RE: [Declude.JunkMail] A burst of USBank fraud spam

[Colbeck, Andrew]

Title: Message

Something else that is interesting about this spam is that the spammer is using "Security", "Staff" and "Fraud Prevention" as the mailfrom and, deliberately I think, randomizing the trailing characters of parts of the address to prevent easy blocking by old fashioned address blocking e.g.   Staff [EMAIL PROTECTED] Fraud Prevention [EMAIL PROTECTED] Security [EMAIL PROTECTED]   likewise, the end of the subject line is mangled, e.g.   Fraud Verificatiuj U.S. Bank Fraud Verificatieg U.S. Bank Fraud Verificatiie Fraud Interventixy   but I think the subject line randomization is bad software, or more deliberate antispam measures.  Only the spammer knows...   Andrew 8)   -----Original Message----- From: Colbeck, Andrew Sent: Tuesday, July 27, 2004 1:36 PM To: '[EMAIL PROTECTED]' Subject: [Declude.JunkMail] A burst of USBank fraud spam The actual URL in the href is:   http://www.secureusbank.com/internetBanking/RequestRouter/requestCmdId/DisplayLoginPage/login.htm   The sending IP is: 140.116.177.114 which is apparently belongs to an educational institute in Taiwan.   Andrew 8)   Body text is as follows:     Dear U.S. Bank account holder, We recently reviewed your account, and suspect that your U.S. Bank Internet Banking account may have been accessed by an unauthorized third party. Protecting the security of your account and of the U.S. Bank network is our primary concern. Therefore, as a preventative measure, we have temporarily limited access to sensitive account features. To restore your account access, please take the following steps to ensure that your account has not been compromised: 1. Login to your U.S. Bank Internet Banking account. In case you are not enrolled for Internet Banking, you will have to use your Social Security Number as both your Personal ID and Password.For security you can provide your information in the box bellow. 2. Review your recent account history for any unauthorized withdrawals or deposits, and check your account profile to make sure not changes have been made. If any unauthorized activity has taken place on your account, report this to U.S. Bank staff immediately. To get started, please click the link below: https://www4.usbank.com/internetBanking/RequestRouter?requestCmdId=DisplayLoginPage We apologize for any inconvenience this may cause, and appreciate your assistance in helping us maintain the integrity of the entire U.S. Bank system. Thank you for your prompt attention to this matter. Sincerely, The U.S. Bank Team Please do not reply to this e-mail. Mail sent to this address cannot be answered. For assistance, log in to your U.S. Bank account and choose the "Help" link in the header of any page.