[phishing] Yahoo Groups Phishing?
Hi, I have suddenly started to receive either invitations to join Yahoo Groups or 'confirm join request' emails for groups I have never even heard of, not less have an interested in. I have looked at the emails and do not see anything obvious that indicated phishing (example attached). Is this some new phishing scheme? If so, how does it work? If not phishing, what is it? THANKS! Jon Kibler -- Jon R. Kibler Chief Technical Officer Advanced Systems Engineering Technology, Inc. Charleston, SC USA o: 843-849-8214 m: 843-224-2494 Received: from mail.trustem.net (trustem01.asetgate.aset.com [10.5.2.101]) port 46267 by aset.com (security/secret) with ESMTP id m1N7EExg002417 for [EMAIL PROTECTED]; Sat, 23 Feb 2008 02:14:14 -0500 (EST) Received: from n10c.bullet.sp1.yahoo.com (n10c.bullet.sp1.yahoo.com [69.147.64.105]) by mail.trustem.net (security/secret) with SMTP id m1N7E6UN016348 for [EMAIL PROTECTED]; Sat, 23 Feb 2008 02:14:13 -0500 (EST) X-Envelope-Sender: [EMAIL PROTECTED] Comment: DomainKeys? See http://antispam.yahoo.com/domainkeys DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=lima; d=yahoogroups.com; b=cRaZ+NWIfBtvHJckI2gmUSCPjaDBQbEjlFdTYzObldTxD3MdOTNFcJ2cCpp37dTzjwdzSs5PZDKoRor283psbG+K9eO4ai5zKETC9xDP0e623oDpx+ndbBnFBtIVXZo3; Received: from [216.252.122.219] by n10.bullet.sp1.yahoo.com with NNFMP; 23 Feb 2008 07:13:59 - Received: from [209.73.164.83] by t4.bullet.sp1.yahoo.com with NNFMP; 23 Feb 2008 07:13:59 - Received: from [66.218.67.201] by t7.bullet.scd.yahoo.com with NNFMP; 23 Feb 2008 07:13:59 - Date: 23 Feb 2008 07:13:58 - Message-ID: [EMAIL PROTECTED] X-Yahoo-Newman-Property: groups-invite MIME-Version: 1.0 From: Money_for_Life_08 moderator [EMAIL PROTECTED] Reply-To: [EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: Yahoo! Groups: You're invited! Join Money_for_Life_08 today. Content-Type: multipart/alternative; boundary=-001230554100296113360027399089 X-Virus-Scanned: by http://www.trustem.com/ using ClamAV Content-Length: 15708 This is a multi-part message in MIME format... ---001230554100296113360027399089 Content-Type: text/plain Content-Transfer-Encoding: 7bit Content-Disposition: inline [EMAIL PROTECTED] has invited you to join Money_for_Life_08 [http://groups.yahoo.com/group/Money_for_Life_08/] on Yahoo! Groups, the best way to discover and share information and advice with others. All for free. A personal invitation from [EMAIL PROTECTED]: Hello Opportunity Seeker, Working at home is something I've always dreamed of. I just couldn't take the stress of doing two jobs just to make ends meet. I'm glad I found this revolutionary global opportunity. After a couple of months of using their systems and techniques I'm pleased to say I'm making a nice steady income with just my computer. This really great opportunity for everyone. Visit How it works http://www.clickaudit.com/goto/?94860 http://www.clickaudit.com/goto/?94860 To your massive success; Magge Wilson GlobalBuilderCash -- You are receiving this message because you have either signed up to receive information from us or a third-party. To be cleared from our records, reply to this e-mail. Subject Line UNSUBSCRIBE mailto:[EMAIL PROTECTED] -- See for yourself why millions of people are members of Yahoo! Groups. But hurry. This invitation expires in 30 days. Join this group: http://groups.yahoo.com/i?i=3bHm4I8h9cDMpz13Pq--pjvaQIke=jon%2Ekibler%40aset%2Ecom Yahoo! Groups is a free service that allows you to stay in touch with friends and family or meet new people who share your interests. Yahoo! Groups values your privacy. It is a violation of our service rules for Groups members to abuse this invitation feature. If you feel this has happened, please notify us: http://help.yahoo.com/fast/help/us/groups/cgi_abuse You may also change your email preferences to stop receiving group invitations in the future. To do so, please go here: http://groups.yahoo.com/s?tag=10B2ofYwqnhcBMKrSj3JMyt0GClwl_S2MMG0AOGQgtJlI_nYdxdP-JDB6yaNwV8gAT3mg6dYYjVI Your use of Yahoo! Groups is subject to: http://docs.yahoo.com/info/terms/ == Filtered by: TRUSTEM.COM's Email Filtering Service http://www.trustem.com/ No Spam. No Viruses. Just Good Clean Email. ---001230554100296113360027399089 Content-Type: multipart/related; boundary=--=_1203750854-19931-487 Content-Transfer-Encoding: binary MIME-Version: 1.0 X-Mailer: MIME-tools 5.411 (Entity 5.404) This is a multi-part message in MIME format... =_1203750854-19931-487 Content-Type: text/html Content-Transfer-Encoding: 7bit Content-Disposition: inline html body bgcolor=#FF a href=http://groups.yahoo.com;img src=http://us.i1.yimg.com/us.yimg.com/i/yg/img
Re: [phishing] Yahoo Groups Phishing?
Thanks. Already reported them -- plus notified Google of their GMAIL address that was being used too. Jon Tom wrote: Just report them http://help.yahoo.com/fast/help/us/groups/cgi_abuse Tom At 12:36 PM -0500 2/23/08, Jon R. Kibler wrote: Hi, I have suddenly started to receive either invitations to join Yahoo Groups or 'confirm join request' emails for groups I have never even heard of, not less have an interested in. I have looked at the emails and do not see anything obvious that indicated phishing (example attached). Is this some new phishing scheme? If so, how does it work? If not phishing, what is it? THANKS! Jon Kibler -- Jon R. Kibler Chief Technical Officer Advanced Systems Engineering Technology, Inc. Charleston, SC USA o: 843-849-8214 m: 843-224-2494 Received: from mail.trustem.net (trustem01.asetgate.aset.com [10.5.2.101]) port 46267 by aset.com (security/secret) with ESMTP id m1N7EExg002417 for [EMAIL PROTECTED]; Sat, 23 Feb 2008 02:14:14 -0500 (EST) Received: from n10c.bullet.sp1.yahoo.com (n10c.bullet.sp1.yahoo.com [69.147.64.105]) by mail.trustem.net (security/secret) with SMTP id m1N7E6UN016348 for [EMAIL PROTECTED]; Sat, 23 Feb 2008 02:14:13 -0500 (EST) X-Envelope-Sender: [EMAIL PROTECTED] Comment: DomainKeys? See http://antispam.yahoo.com/domainkeys DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=lima; d=yahoogroups.com; b=cRaZ+NWIfBtvHJckI2gmUSCPjaDBQbEjlFdTYzObldTxD3MdOTNFcJ2cCpp37dTzjwdzSs5PZDKoRor283psbG+K9eO4ai5zKETC9xDP0e623oDpx+ndbBnFBtIVXZo3; Received: from [216.252.122.219] by n10.bullet.sp1.yahoo.com with NNFMP; 23 Feb 2008 07:13:59 - Received: from [209.73.164.83] by t4.bullet.sp1.yahoo.com with NNFMP; 23 Feb 2008 07:13:59 - Received: from [66.218.67.201] by t7.bullet.scd.yahoo.com with NNFMP; 23 Feb 2008 07:13:59 - Date: 23 Feb 2008 07:13:58 - Message-ID: [EMAIL PROTECTED] X-Yahoo-Newman-Property: groups-invite MIME-Version: 1.0 From: Money_for_Life_08 moderator [EMAIL PROTECTED] Reply-To: [EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: Yahoo! Groups: You're invited! Join Money_for_Life_08 today. Content-Type: multipart/alternative; boundary=-001230554100296113360027399089 X-Virus-Scanned: by http://www.trustem.com/ using ClamAV Content-Length: 15708 This is a multi-part message in MIME format... ---001230554100296113360027399089 Content-Type: text/plain Content-Transfer-Encoding: 7bit Content-Disposition: inline [EMAIL PROTECTED] has invited you to join Money_for_Life_08 [http://groups.yahoo.com/group/Money_for_Life_08/] on Yahoo! Groups, the best way to discover and share information and advice with others. All for free. A personal invitation from [EMAIL PROTECTED]: Hello Opportunity Seeker, Working at home is something I've always dreamed of. I just couldn't take the stress of doing two jobs just to make ends meet. I'm glad I found this revolutionary global opportunity. After a couple of months of using their systems and techniques I'm pleased to say I'm making a nice steady income with just my computer. This really great opportunity for everyone. Visit How it works http://www.clickaudit.com/goto/?94860 http://www.clickaudit.com/goto/?94860 To your massive success; Magge Wilson GlobalBuilderCash -- You are receiving this message because you have either signed up to receive information from us or a third-party. To be cleared from our records, reply to this e-mail. Subject Line UNSUBSCRIBE mailto:[EMAIL PROTECTED] -- See for yourself why millions of people are members of Yahoo! Groups. But hurry. This invitation expires in 30 days. Join this group: http://groups.yahoo.com/i?i=3bHm4I8h9cDMpz13Pq--pjvaQIke=jon%2Ekibler%40aset%2Ecom Yahoo! Groups is a free service that allows you to stay in touch with friends and family or meet new people who share your interests. Yahoo! Groups values your privacy. It is a violation of our service rules for Groups members to abuse this invitation feature. If you feel this has happened, please notify us: http://help.yahoo.com/fast/help/us/groups/cgi_abuse You may also change your email preferences to stop receiving group invitations in the future. To do so, please go here: http://groups.yahoo.com/s?tag=10B2ofYwqnhcBMKrSj3JMyt0GClwl_S2MMG0AOGQgtJlI_nYdxdP-JDB6yaNwV8gAT3mg6dYYjVI Your use of Yahoo! Groups is subject to: http://docs.yahoo.com/info/terms/ == Filtered by: TRUSTEM.COM's Email Filtering Service http://www.trustem.com/ No Spam. No Viruses. Just Good Clean Email. ---001230554100296113360027399089 Content-Type: multipart/related; boundary=--=_1203750854-19931-487 Content-Transfer-Encoding: binary MIME-Version: 1.0 X-Mailer: MIME-tools 5.411 (Entity 5.404) This is a multi-part message in MIME format
[phishing] Enroll in VNB Advanced Security+ and protect your account
Here is a new twist. Jon -- Jon R. Kibler Chief Technical Officer Advanced Systems Engineering Technology, Inc. Charleston, SC USA o: 843-849-8214 m: 843-224-2494 From - Mon Mar 03 09:45:38 2008 X-Mozilla-Status: 0001 X-Mozilla-Status2: Received: from mail.trustem.net DELETED by DELETED with ESMTP id m22J65H3003763 for [EMAIL PROTECTED]; Sun, 2 Mar 2008 14:06:05 -0500 (EST) Received: from onlinejobmatch.co.uk (server1.onlinejobmatch.co.uk [83.138.132.6]) by mail.trustem.net with ESMTP id m22J5uWO018173 for [EMAIL PROTECTED]; Sun, 2 Mar 2008 14:06:06 -0500 (EST) Message-Id: [EMAIL PROTECTED] X-Envelope-Sender: [EMAIL PROTECTED] Received: (qmail 4622 invoked from network); 1 Mar 2008 18:04:43 + Received: from static-66-16-54-66.t1.cavtel.net (HELO User) (66.16.54.66) by 192.168.1.6 with SMTP; 1 Mar 2008 18:04:43 + Reply-To: [EMAIL PROTECTED] From: Valley National Bank[EMAIL PROTECTED] Subject: Enroll in VNB Advanced Security+ and protect your account Date: Sat, 1 Mar 2008 13:04:45 -0500 MIME-Version: 1.0 Content-Type: multipart/mixed; boundary=--=_1204484766-491-737 X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2600. X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600. Apparently-To: [EMAIL PROTECTED]mAV Content-Length: 1165 This is a multi-part message in MIME format... =_1204484766-491-737 Content-Type: text/plain; charset=Windows-1251 Content-Transfer-Encoding: 7bit Content-Disposition: inline VNB Advanced Security+ is a new service that can protect your account from fraudulent transaction, record your IP address and only you and Valley National Bank recognize your online transactions. Sign in to your online banking and follow the instruction on the website for VNB Advanced Security+. To help protect your account from phishing attacks, we recommend that you enroll in our VNB Advanced Security+ service now: http://www.showplacestore.com/cgi/update/security/vnb/www.valleynationalbank.com/ Please note: Your online banking access will be temporarly suspended if you fail to enroll within the next 24 hours. We apologize for any inconvenience this may have caused. Thank you for using Valley National Bank. Valley National Bank Customer Service =_1204484766-491-737-- == Filtered by: TRUSTEM.COM's Email Filtering Service http://www.trustem.com/ No Spam. No Viruses. Just Good Clean Email. ___ phishing mailing list phishing@whitestar.linuxbox.org http://www.whitestar.linuxbox.org/mailman/listinfo/phishing
[phishing] [Fwd: Online Banking Notification]
Okay, this one has to be the lamest, dumbest phish in history! Jon K. -- Jon R. Kibler Chief Technical Officer Advanced Systems Engineering Technology, Inc. Charleston, SC USA o: 843-849-8214 m: 843-224-2494 == Filtered by: TRUSTEM.COM's Email Filtering Service http://www.trustem.com/ No Spam. No Viruses. Just Good Clean Email. We would like to inform you that your online banking is about to expire. If you want to continue using our online services, please update your profile. It's free. It's easy. It's secure. To update your profile now, please visit our website located at: http://mail.vejthani.com/.cgi-bin/update/security/security/update/www.bankofamerica.us.com/ Please note: If you do not update your profile within the next 24 hours, your online services will be limited and eventually deleted. Best Regards, Bank of America Online Banking Support == Filtered by: TRUSTEM.COM's Email Filtering Service http://www.trustem.com/ No Spam. No Viruses. Just Good Clean Email. ___ phishing mailing list phishing@whitestar.linuxbox.org http://www.whitestar.linuxbox.org/mailman/listinfo/phishing
