[nsp-sec] attn Google, leonpanetta0123 at gmail.com dropbox in lame scam

Mon Sep 26 22:10:57 EDT 2011

ack.

On Mon, Sep 26, 2011 at 6:19 PM, RuthAnne Bevier <ruthanne at caltech.edu>wrote:

> ----------- nsp-security Confidential --------
>
> Yes, leonpanetta0123 at gmail.com with the famous CIA New York Firld office.
>  Sample with full headers is below:
>
> From franky at soleil.ocn.ne.jp Mon Sep 26 18:05:02 2011
> Return-Path: <franky at soleil.ocn.ne.jp>
> X-Original-To: thanne at caltech.edu
> Received: from fire-doxen.imss.caltech.edu (localhost [127.0.0.1])
>        by fire-doxen-postvirus (Postfix) with ESMTP id 93194328129;
>        Mon, 26 Sep 2011 18:05:03 -0700 (PDT)
> X-Spam-Scanned: at Caltech-IMSS on fire-doxen by amavisd-new
> X-Spam-Flag: NO
> X-Spam-Score: 3.854
> X-Spam-Level: ***
> X-Spam-Status: No, score=3.854 tagged_above=-10000 required=5
>        tests=[ADVANCE_FEE_2=2.049, SPF_PASS=-0.001, SUBJ_ALL_CAPS=1.806]
>        autolearn=unavailable
> Received: from jonola.caltech.edu (jonola.caltech.edu [131.215.239.176])
>        by fire-doxen-external (Postfix) with ESMTP id DA2C6328004;
>        Mon, 26 Sep 2011 18:04:53 -0700 (PDT)
> Received: by jonola.caltech.edu (Postfix, from userid 60001)
>        id B3BC21714B; Mon, 26 Sep 2011 18:04:53 -0700 (PDT)
> X-Original-To: security at treqs.caltech.edu
> Delivered-To: security at treqs.caltech.edu
> Received: from outgoing-mail.its.caltech.edu (
> outgoing-mail.its.caltech.edu [131.215.239.19])   by jonola.caltech.edu(Postfix) with ESMTP id 3CB4216EFC        for <
> security at treqs.caltech.edu>; Mon, 26 Sep 2011 18:04:52 -0700 (PDT)
> Received: from treqs-delivery.caltech.edu (localhost [127.0.0.1])       by
> fire-doxen-postvirus (Postfix) with ESMTP id D4D7B328109     for <
> security at treqs.caltech.edu>; Mon, 26 Sep 2011 18:04:51 -0700 (PDT)
> X-Mailbox-Line: From franky at soleil.ocn.ne.jp  Mon Sep 26 18: 04:51 2011
> X-Original-To: security at cco.caltech.edu
> Delivered-To: security at cco.caltech.edu
> Received: from fire-doxen.imss.caltech.edu (localhost [127.0.0.1])      by
> fire-doxen-postvirus (Postfix) with ESMTP id 7956C32811F     for <
> security at cco.caltech.edu>; Mon, 26 Sep 2011 18:04:51 -0700 (PDT)
> X-Spam-Scanned: at Caltech-IMSS on fire-doxen by amavisd-new
> Received: from mv-osn-hcb006.ocn.ad.jp (mv-osn-hcb006.ocn.ad.jp[60.37.51.254]) by fire-doxen-external (Postfix) with ESMTP id CD7C43280F9
>    for <security at cco.caltech.edu>; Mon, 26 Sep 2011 18:04:49 -0700 (PDT)
> Received: from mzcstore122.ocn.ad.jp (mv-osn-hcb006 [60.37.51.254])     by
> mv-osn-hcb006.ocn.ad.jp (Postfix) with ESMTP id 71E3830839C; Tue, 27 Sep
> 2011 10:04:43 +0900 (JST)
> Date: Tue, 27 Sep 2011 10:04:43 +0900 (JST)
> From: Central Intelligence Agency New York <franky at soleil.ocn.ne.jp>
> Reply-To: "Mr. Leon Panetta" <leonpanetta0123 at gmail.com>
> Message-ID: <
> 725054829.16425611317085483334.JavaMail.root at mz-cb122p.noc-chibaminato.ocn.ad.jp
> >
> Subject: [TR #2252449] CENTRAL INTELLIGENCE AGENCY,  NEW YORK FIRLD OFFICE
> DELIVERY NOTIFICATION.
> MIME-Version: 1.0
> Content-Type: text/plain; charset=ISO-2022-JP
> Content-Transfer-Encoding: 7bit
> X-Originating-IP: [118.23.185.140]
> To: undisclosed-recipients:;
> X-TBCK-ID: 1fad03e6946c73f5ce291a0c633c0bca
> X-TBCK-Status: First;AllClear;0
> Precedence: bulk
> X-Caltech-ITS-T-Reqs-Initiated: yes
> X-Caltech-ITS-T-Reqs-URL:
> https://treqs.caltech.edu/cgi-bin/ars-get-ticket.pl?ticket_id=2252449
> X-Caltech-ITS-T-Reqs-Group: Information Security
>
> Central Intelligence Agency
> New York Field Office United States of America.
> 25th floor, World Trade Center Building 7
> Phone Number:315-307-2080
> Email:leonpanetta0123 at gmail. com
> www.cia.gov
>
>
>
>
> Attn:Beneficiary,
> This  Central Intelligence Agency New York Field Office United States of
> America hereby write to inform you that we caught a diplomat called Mr.
> Chika Zumba at (John F Kennedy International Airport) here in New York with
> a consignment box filed with United State Dollars.
>
> Meanwhile, base on our interview with the diplomat he said that the
> consignment box belongs to you, that he was sent by one Mr.Williams I. Luis
> to deliver the consignment box to your doorstep not knowing that the content
> of the box is money. The diplomat also said that his first transit in the
> state was at Cincinnati Northern Kentucky International Airport Ohio.
> Now, the diplomat is under detention here in New York and we cannot release
> him until we carry out our proper investigation on how this huge amount of
> money managed to be yours before we will release him with the box.. So, in
> regards to this,you are to reassure and prove to us that the money you are
> about to receive is legal by sending us the Award Ownership Certificate
> showing that the money is not illegal.
>
> Note, that the Award Ownership Certificate must be secured from the office
> of the senate president in Nigeria, being the source country of the fund and
> because that is the only Assigned Office that will issue you the original
> Award Ownership Certificate of this funds.
> You are advised to forward immediately the Award Ownership Certificate if
> you have it with you, but if you did not have it we will urge you to contact
> the sender of the diplomat to help you secure the Award Ownership
> Certificate if at all you did not have it.
>
> Below is the contact information of the Assigned Official that sent the
> diplomat Mr.Chika Zumba as you are requested to send your full contact
> details and direct Phone number to him to enable a stimulated process of the
> issuance of the said Certificate:
>
> Senate Committee Department On Foreign Remittance
> Name:  Mr.Williams I. Luis
> Email:  luiswilliam20_10 at hotmail.com
> Phone:+234- 8067-27913
>
> Furthermore, we are giving you only but 3 working business days to forward
> the requested Award Ownership Certificate. Please note that we shall get
> back to you after the 3 working business days, that if you are not able to
> come up with the certificate as we shall confiscate the funds and have it
> sent to the Federal Reserve Account of the United States Government then
> charge you for money laundering, but if you forward the Award Ownership
> Certificate then we will release the diplomat with your consignment box also
> gives you every back up and full immunity before all the Assigned Offices
> concerned with the remittances of foreign contract fund such as your here in
> the United States of America even after you have received your fund as
> stated.
>
> Thanks for your understanding and co-operation
>
>
> Yours Truly,
>
> Best Regards,
>
> I AWAIT YOUR REPLY SO I CAN INSTRUCT YOU ON WHAT TO DO NEXT TO ENABLE FULL
> IMMUNITY BY THIS AGENCY EVEN AFTER YOU HAVE RECEIVED YOUR CONSIGNMENT AS
> STATED.
>
> Mr. Leon E. Panetta
> Director, Central Intelligence Agency
> 25th floor,World Trade Center Building 7
> New York Field Office USA.
> Phone Number: 315-307-2080
> Website: www.cia.gov
>
>
> CONFIDENTIALITY NOTICE:
> This communication and its attachments may contain non-public, confidential
> or legally privileged information. The unlawful interception, use or
> disclosure of such information is prohibited. If you are not the intended
> recipient, or have received this communication in error,please notify the
> sender immediately by reply email and delete all copies of this
> communication and attachments without reading or saving them
> --
> RuthAnne Bevier
> Director, Information Security
> California Institute of Technology
> ruthanne at caltech.edu
> 626-395-2671
>
>
> _______________________________________________
> nsp-security mailing list
> nsp-security at puck.nether.net
> https://puck.nether.net/mailman/listinfo/nsp-security
>
> Please do not Forward, CC, or BCC this E-mail outside of the nsp-security
> community. Confidentiality is essential for effective Internet security
> counter-measures.
> _______________________________________________
>

-- 
Peter Moody      Google    1.650.253.7306
Security Engineer  pgp:0xC3410038