<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Robert L. Weiner: Nonprofit Fundraising Technology Consulting &#187; Phishing</title>
	<atom:link href="http://www.rlweiner.com/tag/phishing/feed" rel="self" type="application/rss+xml" />
	<link>http://www.rlweiner.com</link>
	<description>Technology Advisors to Nonprofits and Educational Institutions</description>
	<lastBuildDate>Tue, 07 Feb 2012 20:00:03 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=</generator>
		<item>
		<title>Lame spam of the day: FBI and Nigeria still want to send me money</title>
		<link>http://www.rlweiner.com/lame-spam-of-the-day-fbi-and-nigeria-still-want-to-send-me-money</link>
		<comments>http://www.rlweiner.com/lame-spam-of-the-day-fbi-and-nigeria-still-want-to-send-me-money#comments</comments>
		<pubDate>Tue, 31 Jan 2012 01:07:21 +0000</pubDate>
		<dc:creator>Robert</dc:creator>
				<category><![CDATA[Phishing]]></category>
		<category><![CDATA[Scam]]></category>
		<category><![CDATA[Spam]]></category>

		<guid isPermaLink="false">http://www.rlweiner.com/?p=2203</guid>
		<description><![CDATA[I wrote about a version of this one last year, but the language of this version is so tortured that I have to post it.&#160; No official-looking seal this time. Sender: FBI OFFICE (office.fbi3@gmail.com) Subject: FROM IMF HEAD OFFICE Text: Anti-Terrorist And Monetary Crimes Division FBI Headquarters, Washington, D.C. Federal Bureau Of Investigation J.Edgar Hoover [...]]]></description>
			<content:encoded><![CDATA[<p>I wrote about <a href="http://www.rlweiner.com/lame-spam-of-the-day-fbi-nigerian-govt-want-to-send-me-money" target="_blank">a version of this one </a>last year, but the language of this version is so tortured that I have to post it.&#160; No official-looking seal this time.</p>
<p><strong>Sender:</strong> FBI OFFICE (office.fbi3@gmail.com)<br />
<strong>Subject: </strong>FROM IMF HEAD OFFICE<br />
<strong>Text:<br />
</strong>Anti-Terrorist And Monetary Crimes Division<br />
FBI Headquarters, Washington, D.C.<br />
Federal Bureau Of Investigation<br />
J.Edgar Hoover Building<br />
935 Pennsylvania Avenue, Nw Washington, D.C. 20535-0001<br />
www.fbi.gov</p>
<p>Attenuation,</p>
<p>This e-mail has been issued to you in order to Officially inform you <br />
that we have completed an investigation on an International Payment in <br />
which was issued to you by an International Lottery Company. With the <br />
help of our newly developed technology (International Monitoring Network <br />
System) we discovered that your e-mail address was automatically <br />
selected by an Online Balloting System, this has legally won you the sum <br />
of $2.4million USD from a Lottery Company outside the United States of <br />
America. During our investigation we discovered that your e-mail won the <br />
money from an Online Balloting System and we have authorized this <br />
winning to be paid to you via INTERNATIONAL CERTIFIED BANK DRAFT.</p>
<p>Normally, it will take up to 5 business days for an INTERNATIONAL <br />
CERTIFIED BANK DRAFT by your local bank. We have successfully notified <br />
this company on your behalf that funds are to be drawn from a registered <br />
bank within the world wide, so as to enable you cash the check instantly <br />
without any delay, henceforth the stated amount of $2.4million USD has <br />
been deposited with IMF.<br />
We have completed this investigation and you are hereby approved to <br />
receive the winning prize as we have verified the entire transaction to <br />
be Safe and 100% risk free, due to the fact that the funds have been <br />
deposited with IMF  you will be required to settle the following bills <br />
directly to the Lottery Agent in-charge of this transaction whom is <br />
located in Cotonou, Benin Republic. According to our discoveries, you <br />
were required to pay for the following,</p>
<p>(1) Deposit Fee's ( IMF INTERNATIONAL CLEARANCE CERTIFICATE )<br />
(3) Shipping Fee's ( This is the charge for shipping the Cashier's <br />
Check to your home address)</p>
<p>The total amount for everything is $76.00 We have tried our possible <br />
best to indicate that this $76.00 should be deducted from your winning <br />
prize but we found out that the funds have already been deposited IMF <br />
and cannot be accessed by anyone apart from you the winner, therefore <br />
you will be required to pay the required fee's to the Agent in-charge of <br />
this transaction</p>
<p>In order to proceed with this transaction, you will be required to <br />
contact the agent in-charge ( Mr. Henry Ben) via e-mail. Kindly look <br />
below to find appropriate contact information:</p>
<p>CONTACT AGENT NAME: Mr. Henry Ben<br />
E-MAIL :   imfoffce5@yahoo.com.tr<br />
PHONE NUMBER: +22999511139</p>
<p>You will be required to e-mail him with the following information:<br />
FULL NAME:<br />
ADDRESS:<br />
CITY:<br />
STATE:<br />
ZIP CODE:<br />
DIRECT CONTACT NUMBER:<br />
OCCUPATION:</p>
<p>You will also be required to request Western Union or Money Gram <br />
details on how to send the required $76.00  in order to immediately ship <br />
your prize of $2.4million USD via INTERNATIONAL CERTIFIED BANK DRAFT <br />
from IMF, also include the following transaction code in order for him <br />
to immediately identify this transaction : EA2948-910.</p>
<p>This letter will serve as proof that the Federal Bureau Of <br />
Investigation is authorizing you to pay the required $76.00 ONLY to Mr. <br />
Henry Ben via information in which he shall send to you,</p>
<p>Mr. Robert Mueller<br />
Federal Bureau of Investigation F B I<br />
Yours in Service, Photograph of Director<br />
Robert S. Mueller, III Robert S. Mueller,<br />
III Director Office of Public Affairs<br />
Welcome once more to FBI www.fbi.gov<br />
&#160;</p>]]></content:encoded>
			<wfw:commentRss>http://www.rlweiner.com/lame-spam-of-the-day-fbi-and-nigeria-still-want-to-send-me-money/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Lame spam of the day: Please provide your tax information</title>
		<link>http://www.rlweiner.com/lame-spam-of-the-day-please-provide-your-tax-information</link>
		<comments>http://www.rlweiner.com/lame-spam-of-the-day-please-provide-your-tax-information#comments</comments>
		<pubDate>Fri, 27 Jan 2012 16:50:54 +0000</pubDate>
		<dc:creator>Robert</dc:creator>
				<category><![CDATA[Phishing]]></category>
		<category><![CDATA[Scam]]></category>
		<category><![CDATA[Spam]]></category>

		<guid isPermaLink="false">http://www.rlweiner.com/?p=2193</guid>
		<description><![CDATA[Just in time for tax filing season in the U.S., a phishing message purporting to come from Intuit.&#160; Intuit's security center lists lots of these, but not the two I got this week.&#160; Both had empty graphics placeholders and broken hyperlinks -- maybe the work of a baby spammer. Sender: INTUIT INC. (onlinebanking@ealerts.bankofamerica.com) -- it [...]]]></description>
			<content:encoded><![CDATA[<p>Just in time for tax filing season in the U.S., a phishing message purporting to come from Intuit.&#160; <a target="_blank" href="http://security.intuit.com/security-alerts.php">Intuit's security center</a> lists lots of these, but not the two I got this week.&#160; Both had empty graphics placeholders and broken hyperlinks -- maybe the work of a baby spammer.</p>
<p><strong>Sender:</strong> INTUIT INC. (onlinebanking@ealerts.bankofamerica.com) -- it claims to come from Intuit, but the return address is at Bank of America<br />
<strong>Subject: </strong>Please provide your tax information. (a second version had an exclamation point before the period)<br />
<strong>Text:</strong><br />
<strong>Version 1:</strong></p>
<blockquote>Hello,<br />
<br />
With intent to ensure that accurate data is being maintained on our systems, as well as to provide you better quality of service; INTUIT INC. has partaken in the Internal Revenue Service [IRS] Name and TIN Matching Program.<br />
<br />
We have discovered, that your name and/or TIN, that is indicated on your account is different from the data on file with the IRS and/or SSA.<br />
<br />
In order to verify the information on your account, please click here.   <strong><em>(link leads to http://{int_link} -- I don't think that one will work, </em></strong><a target="_blank" href="http://blog.dynamoo.com/2012/01/intuit-inc-malicious-spam-and-intlink.html"><strong><em>this site </em></strong></a><strong><em>agrees)</em></strong><br />
Yours sincerely,<br />
<br />
INTUIT INC.<br />
<br />
Corporate Headquarters<br />
2632 Marine Way<br />
Mountain View, CA 94043  </blockquote>
<p><strong>Version 2:</strong></p>
<blockquote>Dear Sir/Madam,<br />
<br />
With intent to guarantee that correct data is being sustained on our systems, as well as to be able to grant you better quality of service; INTUIT INC. has partaken in the Internal Revenue Service [IRS] Name and TIN Matching Program.<br />
<br />
We have discovered, that your name and/or Social Security Number, that is stated on your account does not match the information on file with the IRS.<br />
<br />
In order to check and update your account, please enter the secure section. <em><strong>(link leads to http://{int_link} )</strong></em><br />
<br />
Yours sincerely,<br />
<br />
INTUIT INC.<br />
Corporate Headquarters<br />
2632 Marine Way<br />
Mountain View, CA 94043<br />
&#160;  </blockquote>]]></content:encoded>
			<wfw:commentRss>http://www.rlweiner.com/lame-spam-of-the-day-please-provide-your-tax-information/feed</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>Lame spam of the day: Rock Cruit/Rockzone Management</title>
		<link>http://www.rlweiner.com/lame-spam-of-the-day-rock-cruitrockzone-management</link>
		<comments>http://www.rlweiner.com/lame-spam-of-the-day-rock-cruitrockzone-management#comments</comments>
		<pubDate>Tue, 13 Dec 2011 23:05:23 +0000</pubDate>
		<dc:creator>Robert</dc:creator>
				<category><![CDATA[Phishing]]></category>
		<category><![CDATA[Scam]]></category>
		<category><![CDATA[Spam]]></category>

		<guid isPermaLink="false">http://www.rlweiner.com/?p=2124</guid>
		<description><![CDATA[I've been seeing a bunch of spams trying to prey on job seekers.&#160; Particularly evil in these tough times.&#160; None of them attempts to disguise the URL they're linking to.&#160; Judging from this writeup, they're phishing, not downloading malware.&#160; There are at least some novel locutions, like "Hurroo Robert" and "Pass the time of day [...]]]></description>
			<content:encoded><![CDATA[<p>I've been seeing a bunch of spams trying to prey on job seekers.&#160; Particularly evil in these tough times.&#160; None of them attempts to disguise the URL they're linking to.&#160; Judging from <a href="http://blog.dynamoo.com/2011/11/some-work-at-home-scams-to-avoid.html" target="_blank">this writeup</a>, they're phishing, not downloading malware.&#160; </p>
<p>There are at least some novel locutions, like "Hurroo Robert" and "Pass the time of day with Robert" that make them a little entertaining.&#160; </p>
<p><strong>Version 1:</strong><br />
<strong>Sender:</strong> Rock Cruit Management (alxb@ferienhaus-grad.at)<br />
<strong>Subject:</strong> Please Complete Your Job Application<br />
<strong>Text:</strong><br />
Hello Robert</p>
<p>Thank you for submitting your information for potential employment opportunities.<br />
We look forward to reviewing your application,<br />
but can not do so until you complete our internal application.</p>
<p>The pay range for available positions range from $35.77 per hour to $57.62 per hour.<br />
Prior to begin able to be considered, you will first need you to formally apply.<br />
Please go here to begin the process:</p>
<p>http://widg.me/kfHtP</p>
<p>Also, the following perks are potentially available:</p>
<p>- Paid Time Off<br />
- Health Benefits Package<br />
- Higher than average salaries<br />
- Tuition Reimbursement<br />
- Extensive 401(k)program</p>
<p>Please take the time to follow the directions and complete the entire application process.</p>
<p>-------------------------------------------------------------------</p>
<p>Best Regards,</p>
<p>Rock Cruit Management</p>
<p><strong>Version 2:<br />
Sender:</strong> Rock Cruit Management (3dlicai@force.com)<br />
<strong> Subject: </strong>You have been Selected for Employment<br />
<strong> Text: </strong><br />
Hurroo Robert</p>
<p>Thank you for submitting your information for potential employment opportunities.<br />
We look forward to reviewing your application,<br />
but can not do so until you complete our internal application.</p>
<p>The pay range for available positions range from $35.77 per hour to $57.62 per hour.<br />
Prior to begin able to be considered, you will first need you to formally apply.<br />
Please go here to begin the process:</p>
<p>http://awrhgiuweoisd22.communityarchitect.com/ruiegj6.html</p>
<p>Also, the following perks are potentially available:</p>
<p>- Paid Time Off<br />
- Health Benefits Package<br />
- Higher than average salaries<br />
- Tuition Reimbursement<br />
- Extensive 401(k)program</p>
<p>Please take the time to follow the directions and complete the entire application process.</p>
<p>*********************************************************************************************</p>
<p>Best Regards,</p>
<p>Rock Cruit Management</p>
<p><strong>Version 3:</strong><br />
<strong> Sender: </strong>Rock Cruit Management (bekfurer@centoper.it)<br />
<strong> Text:</strong><br />
Pass the time of day with Robert</p>
<p>Thank you for submitting your information for potential employment opportunities.<br />
We look forward to reviewing your application,<br />
but can not do so until you complete our internal application.</p>
<p>The pay range for available positions range from $35.77 per hour to $57.62 per hour.<br />
Prior to begin able to be considered, you will first need you to formally apply.<br />
Please go here to begin the process:</p>
<p>http://widg.me/SuLt6</p>
<p>Also, the following perks are potentially available:</p>
<p>- Paid Time Off<br />
- Health Benefits Package<br />
- Higher than average salaries<br />
- Tuition Reimbursement<br />
- Extensive 401(k)program</p>
<p>Please take the time to follow the directions and complete the entire application process.</p>
<p>------------------</p>
<p>Best Regards,</p>
<p>Rock Cruit Management</p>
<p><strong>Version 4 </strong><em><strong>(I'm guessing it's related):</strong></em><br />
<strong> Sender: </strong>Alva Lopez (donationslyb3@smilde-bv.nl)<br />
<strong> Subject: </strong>Job Opportunity Followup from Rockzone Management<br />
<strong> Text:</strong><br />
Dear applicant</p>
<p>Thank you for expressing your interest in potential employment openings in your area.<br />
We are delighted to inform you that our placement specialists will be reviewing<br />
available positions for you within the next hour.</p>
<p>Based on your profile, you may qualify for options currently available with a monthly salary in the<br />
$4000 to $8700 range.</p>
<p>To maximize your earnings potential, please complete our full application form first:</p>
<p>http://cbs.so/c5059f</p>
<p>In addition to a highly competitive base pay, applicants that qualify will also enjoy additional benefits such as:<br />
* 2 wks. paid vacation (per annum);<br />
* Scholarship allowance;<br />
* 401(k)<br />
* full benefits insurance<br />
* generous retirement plan</p>
<p>To retain your priority placement, please complete your application at your earliest convenience.</p>
<p>We look forward to finding the right job for you.</p>
<p>Rockforce Management<br />
Bringing the best candidates and the right jobs together.<br />
&#160;</p>]]></content:encoded>
			<wfw:commentRss>http://www.rlweiner.com/lame-spam-of-the-day-rock-cruitrockzone-management/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Lame spam of the day: free Southwest vouchers</title>
		<link>http://www.rlweiner.com/lame-spam-of-the-day-free-southwest-vouchers</link>
		<comments>http://www.rlweiner.com/lame-spam-of-the-day-free-southwest-vouchers#comments</comments>
		<pubDate>Mon, 12 Dec 2011 00:34:21 +0000</pubDate>
		<dc:creator>Robert</dc:creator>
				<category><![CDATA[Phishing]]></category>
		<category><![CDATA[Spam]]></category>

		<guid isPermaLink="false">http://www.rlweiner.com/?p=2110</guid>
		<description><![CDATA[I've seen spam like this before (here's an example using Facebook), and it might have a chance if they'd just used the first sentence.&#160; But they also used some random text generator that makes the message gibberish.&#160; A baby spammer taking his first steps? Sender: bigrick27856@aol.com Subject: blank Text: To: Facebook User, Southwest is giving [...]]]></description>
			<content:encoded><![CDATA[<p>I've seen spam like this before (<a href="http://nakedsecurity.sophos.com/2011/02/22/free-tickets-on-southwest-airlines-latest-facebook-scam/" target="_blank">here's an example using Facebook</a>), and it might have a chance if they'd just used the first sentence.&#160; But they also used some random text generator that makes the message gibberish.&#160; A baby spammer taking his first steps?</p>
<p><strong>Sender: </strong>bigrick27856@aol.com <br />
<strong>Subject:</strong> blank<br />
<strong>Text: </strong><br />
To: Facebook User, Southwest is giving out 100% free vouchers. Hurry fast, Don't hold off any time. Here is webpage - Southwest Promo There are only 437 left.  (Southwest Promo is a link leading to http://uwgmmjz.tumblr.com/)</p>
<p>If it, were that any one went into that place to stay, it is I who would</p>
<p>he would be an advocate for justice, which is an unnatural office absences. But repeating his visits often, expressing his joy to</p>
<p>Instinctively, with the dawn coming, I turned to Madam Mina, intending to</p>
]]></content:encoded>
			<wfw:commentRss>http://www.rlweiner.com/lame-spam-of-the-day-free-southwest-vouchers/feed</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>Lame Spam of the Day: Please stop sending spam messages onto our email</title>
		<link>http://www.rlweiner.com/lame-spam-of-the-day-please-stop-sending-spam-messages-onto-our-email</link>
		<comments>http://www.rlweiner.com/lame-spam-of-the-day-please-stop-sending-spam-messages-onto-our-email#comments</comments>
		<pubDate>Mon, 19 Sep 2011 16:39:39 +0000</pubDate>
		<dc:creator>Robert</dc:creator>
				<category><![CDATA[Phishing]]></category>
		<category><![CDATA[Scam]]></category>
		<category><![CDATA[Spam]]></category>

		<guid isPermaLink="false">http://www.rlweiner.com/?p=2037</guid>
		<description><![CDATA[The text of this message made me smile, but the RAR attachment turned my smile upside down (no, I didn't click --- and don't you click, either).&#160; Here's info on rar attachments: http://www.philipp-winterberg.com/software/rar_faq_phishing_fraudulent_dangerous_malicious_files.php Subject: Please stop sending spam messages onto our email Sender: CorpTech (contact@corptech.com) Attachment: Attached_Document_INC#69397.rar Text: Hello. Your email is sending spam messages! [...]]]></description>
			<content:encoded><![CDATA[<p>The text of this message made me smile, but the RAR attachment turned my smile upside down (no, I didn't click --- and don't you click, either).&#160; Here's info on rar attachments: <a href="http://www.philipp-winterberg.com/software/rar_faq_phishing_fraudulent_dangerous_malicious_files.php" target="_blank">http://www.philipp-winterberg.com/software/rar_faq_phishing_fraudulent_dangerous_malicious_files.php</a></p>
<p><strong>Subject:</strong> Please stop sending spam messages onto our email</p>
<p><strong>Sender:</strong> CorpTech (contact@corptech.com)</p>
<p><strong>Attachment:</strong> Attached_Document_INC#69397.rar</p>
<p><strong>Text:</strong> </p>
<p>Hello.</p>
<p>Your email is sending spam messages!</p>
<p>If you don't stop sending spam, we will be impelled to sue you!</p>
<p>We've attached a scanned copy of the document assembled by our security service to this letter.</p>
<p>Please carefully read through the document and stop sending spam messages.</p>
<p><br />
This is the final warning!<br />
Corporate Technology Information Services.<br />
&#160;</p>]]></content:encoded>
			<wfw:commentRss>http://www.rlweiner.com/lame-spam-of-the-day-please-stop-sending-spam-messages-onto-our-email/feed</wfw:commentRss>
		<slash:comments>4</slash:comments>
		</item>
		<item>
		<title>Lame Spam of the Day: Loan Offer from Kiva</title>
		<link>http://www.rlweiner.com/lame-spam-of-the-day-loan-offer-from-kiva</link>
		<comments>http://www.rlweiner.com/lame-spam-of-the-day-loan-offer-from-kiva#comments</comments>
		<pubDate>Mon, 29 Aug 2011 16:53:23 +0000</pubDate>
		<dc:creator>Robert</dc:creator>
				<category><![CDATA[Phishing]]></category>
		<category><![CDATA[Scam]]></category>
		<category><![CDATA[Spam]]></category>

		<guid isPermaLink="false">http://www.rlweiner.com/?p=2031</guid>
		<description><![CDATA[I guess Kiva has attained sufficient mindshare to become a phishing tool.&#160; I hadn't realized that $5,000 to $100,000 constituted a micro-loan. Sender: Kiva Micro Financial Loan Company &#60;kiva@yahoo.com&#62; Subject: APPLY FOR YOUR LOAN AS LOW AS 0.2% Message: Goodday,We Offer Private, Commercial and Personal Loans with very Minimal annual Interest Rates as Low as [...]]]></description>
			<content:encoded><![CDATA[<p>I guess Kiva has attained sufficient mindshare to become a phishing tool.&#160; I hadn't realized that $5,000 to $100,000 constituted a micro-loan.</p>
<p><strong>Sender: </strong>Kiva Micro Financial Loan Company &lt;kiva@yahoo.com&gt;<br />
<strong>Subject: </strong>APPLY FOR YOUR LOAN AS LOW AS 0.2% </p>
<p><strong>Message:</strong> </p>
<p>Goodday,We Offer Private, Commercial and Personal Loans with very Minimal<br />
annual Interest Rates as Low as 0.2% within a 1 year to 50 years repayment<br />
duration period to any part of the world. We give out loans within the<br />
range of $5,000 to $100,000,000 US Dollars loans are well insured for<br />
maximum security is our priority ,Are you losing sleep at nights worrying<br />
how to get a Legit Loan Lender? Are you biting your finger nails? Instead<br />
of beating your self up, contact Kiva Micro Financial Loan Company now, Loan<br />
specialists who help stop Bad Credit History, to discover a win solution<br />
which is Our Mission.* Are you financially Squeezed?* Do you seek funds to<br />
pay off credits and debts?* Do you seek finance to set up your own<br />
business?* Are you in need of private or business loans for various<br />
purposes?* Do you seek loans to carry out large projects?* Do you seek<br />
funding for various other processes?* If you have any of the above<br />
problems, I can be assistance to you.</p>
<p>Any interested persons should fill the form below and send it to our<br />
email down below.<br />
E-mail:kivaloanfin77@hotmail.com</p>
<p>Name:..................................................<br />
Country:..................................................<br />
Address:................................................<br />
Phone number:..........................................<br />
Cell Number............................................<br />
Current place of work:..................................<br />
Loan amount needed:..............................<br />
Loan duration:...................................<br />
Monthly income:.............................<br />
Occupation....................<br />
Email address:.......................................<br />
Sex.......................</p>
<p><br />
Thanks for your understanding,<br />
Rev David Chris<br />
General Consultant,Kiva Micro Financial Loan Company<br />
www.kiva.org</p>
]]></content:encoded>
			<wfw:commentRss>http://www.rlweiner.com/lame-spam-of-the-day-loan-offer-from-kiva/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Lame spam of the day: FBI &amp; Nigerian Govt want to send me money</title>
		<link>http://www.rlweiner.com/lame-spam-of-the-day-fbi-nigerian-govt-want-to-send-me-money</link>
		<comments>http://www.rlweiner.com/lame-spam-of-the-day-fbi-nigerian-govt-want-to-send-me-money#comments</comments>
		<pubDate>Fri, 22 Jul 2011 16:15:29 +0000</pubDate>
		<dc:creator>Robert</dc:creator>
				<category><![CDATA[Phishing]]></category>
		<category><![CDATA[Scam]]></category>
		<category><![CDATA[Spam]]></category>

		<guid isPermaLink="false">http://www.rlweiner.com/?p=2009</guid>
		<description><![CDATA[This one's pretty funny.&#160; It claims to come from the "Federal Bureau of Investigation (FBI) Counter-terrorism Division and Cyber Crime Division".&#160; The letter begins "Series of meetings have been held over the past 7 months with the secretary general of the United Nations Organization. This ended 3 days ago. It is obvious that you have [...]]]></description>
			<content:encoded><![CDATA[<p>This one's pretty funny.&#160; It claims to come from the "Federal Bureau of Investigation (FBI) Counter-terrorism Division and Cyber Crime Division".&#160; The letter begins "Series of meetings have been held over the past 7 months with the secretary general of the United Nations Organization. This ended 3 days ago. It is obvious that you have not received your fund which is to the tune of $850,000.00 due to past corrupt Governmental Officials."&#160; They want to send me "a custom pin based ATM card which you will use to withdraw up to $3,000 per day from any ATM machine that has the Master Card Logo."&#160; And no need to worry about the offer's legitimacy, because "everything has been taken care of by the Federal Government of Nigeria, The United Nation and also the FBI."&#160;</p>
<p>Here's the whole thing:</p>
<p><strong>Sender: </strong>Nicholas Story (office@fbi.gov)</p>
<p><strong>Subject: </strong>Contact Mr. Terence McCulley ASAP.<strong><br />
</strong>&#160;</p>
<h5><a href="/images/2011/07/Screenshot3.jpg" title="Screenshot3" rel="lightbox[slideshow]"><img height="196" width="400" src="/images/2011/07/400/Screenshot3.jpg" alt="Screenshot3" /></a><br />
&#160;</h5>
<p>Dear Beneficiary,</p>
<p>Series of meetings have been held over the past 7 months with the secretary general of the United Nations Organization. This ended 3 days ago. It is obvious that you have not received your fund which is to the tune of $850,000.00 due to past corrupt Governmental Officials who almost held the fund to themselves for their selfish reason and some individuals who have taken advantage of your fund all in an attempt to swindle your fund which has led to so many losses from your end and unnecessary delay in the receipt of your fund.</p>
<p>The National Central Bureau of Interpol enhanced by the United Nations and Federal Bureau of Investigation have successfully passed a mandate to the current president of Nigeria his Excellency President Good luck Jonathan to boost the exercise of clearing all foreign debts owed to you and other individuals and organizations who have been found not to have receive their Contract Sum, Lottery/Gambling, Inheritance and the likes. Now how would you like to receive your payment? Because we have two method of payment which is by Check or by ATM card?</p>
<p>ATM Card: We will be issuing you a custom pin based ATM card which you will use to withdraw up to $3,000 per day from any ATM machine that has the Master Card Logo on it and the card have to be renewed in 4 years time which is 2015. Also with the ATM card you will be able to transfer your funds to your local bank account. The ATM card comes with a handbook or manual to enlighten you about how to use it. Even if you do not have a bank account.</p>
<p>Check: To be deposited in your bank for it to be cleared within three working days. Your payment would be sent to you via any of your preferred option and would be mailed to you via UPS. Because we have signed a contract with UPS which should expire by 30th of July 2011 you will only need to pay $135 instead of $420 saving you $285 So if you pay before 30th of July 2011 you save $285 Take note that anyone asking you for some kind of money above the usual fee is definitely a fraudsters and you will have to stop communication with every other person if you have been in contact with any. Also remember that all you will ever have to spend is $135.00 nothing more! Nothing less! And we guarantee the receipt of your fund to be successfully delivered to you within the next 48hours after the receipt of payment has been confirmed.</p>
<p>Below are few list of tracking numbers you can track from UPS website to confirm people like you who have received their payment successfully.</p>
<p>Name: Donna L. Vargas: UPS Tracking Number: 1Z757F991598420403 (www.ups.com)<br />
Name: Rovenda Elaine Clayton: UPS Tracking Number: 1Z757F991596606592 (www.ups.com)</p>
<p>Note: Everything has been taken care of by the Federal Government of Nigeria, The United Nation and also the FBI and including taxes, custom paper and clearance duty so all you will ever need to pay is $135.</p>
<p>DO NOT SEND MONEY TO ANYONE UNTIL YOU READ THIS: The actual fees for shipping your ATM card is $420 but because UPS have temporarily discontinued the C.O.D which gives you the chance to pay when package is delivered for international shipping We had to sign contract with them for bulk shipping which makes the fees reduce from the actual fee of $420 to $135 nothing more and no hidden fees of any sort!</p>
<p>To effect the release of your fund valued at $850,000.00 you are advised to contact our correspondent in Africa the delivery officer McCulley Terence with the information below,</p>
<p>Email: terencemcculley@yahoo.cn<br />
Telephone: +234-808-254-8308<br />
You are advised to contact him with the information’s as stated below:</p>
<p>Your full Name..<br />
Your Address:..............<br />
Home/Cell Phone:..............<br />
Preferred Payment Method (ATM / Cashier Check)</p>
<p>Upon receipt of payment the delivery officer will ensure that your package is sent within 48 working hours. Because we are so sure of everything we are giving you a 100% money back guarantee if you do not receive payment/package within the next 48hours after you have made the payment for shipping.</p>
<p>Yours sincerely,</p>
<p>NICHOLAS STORY<br />
FEDERAL BUREAU OF INVESTIGATION<br />
UNITED STATES DEPARTMENT OF JUSTICE<br />
WASHINGTON, D.C. 20535<br />
TELEPHONE: (206) 309-0312<br />
FAX: (202) 666-5283</p>
<p>Note: Do disregard any email you get from any impostors or offices claiming to be in possession of your ATM CARD, you are hereby advice only to be in contact with McCulley Terence of the ATM CARD CENTRE who is the rightful person to deal with in regards to your ATM CARD PAYMENT and forward any emails you get from impostors to this office so we could act upon and commence investigation.<br />
&#160;</p>]]></content:encoded>
			<wfw:commentRss>http://www.rlweiner.com/lame-spam-of-the-day-fbi-nigerian-govt-want-to-send-me-money/feed</wfw:commentRss>
		<slash:comments>3</slash:comments>
		</item>
		<item>
		<title>Spam of the Day: So and so wants to connect on LinkedIn</title>
		<link>http://www.rlweiner.com/spam-of-the-day-so-and-so-wants-to-connect-on-linkedin</link>
		<comments>http://www.rlweiner.com/spam-of-the-day-so-and-so-wants-to-connect-on-linkedin#comments</comments>
		<pubDate>Fri, 10 Jun 2011 23:31:18 +0000</pubDate>
		<dc:creator>Robert</dc:creator>
				<category><![CDATA[Phishing]]></category>
		<category><![CDATA[Scam]]></category>
		<category><![CDATA[Spam]]></category>

		<guid isPermaLink="false">http://www.rlweiner.com/?p=1987</guid>
		<description><![CDATA[It was only a matter of time.&#160; I've started receiving phishing messages that look like LinkedIn connection requests.&#160; So far the text has been identical.&#160; Note that the person who wants to connect (Mark Andronas) does not match the signature block (Neal Collins, Vice President, Strategy &#38; Corporate Development at Payroll Processing, Greater Chicago Area).&#160; [...]]]></description>
			<content:encoded><![CDATA[<p>It was only a matter of time.&#160; I've started receiving phishing messages that look like LinkedIn connection requests.&#160; So far the text has been identical.&#160; Note that the person who wants to connect (Mark Andronas) does not match the signature block (Neal Collins, Vice President, Strategy &amp; Corporate Development at Payroll Processing, Greater Chicago Area).&#160; The big clue is that if you hold your cursor over the "Confirm that you know Neal" button you'll see that it doesn't point to a LinkedIn address.&#160; On one message it pointed to a link on salesforceappi.com, on another it pointed to a link on upsclients.org.&#160; Out of curiosity I looked into those domains and they were both licensed by someone in China using the same hotmail address.&#160; </p>
<p><a rel="lightbox[slideshow]" title="Screenshot76" href="/images/2011/06/Screenshot76.jpg"><img width="400" height="270" align="left" alt="Screenshot76" src="/images/2011/06/400/Screenshot76.jpg" /></a><br />
&#160;</p>]]></content:encoded>
			<wfw:commentRss>http://www.rlweiner.com/spam-of-the-day-so-and-so-wants-to-connect-on-linkedin/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Phishing scam of the day: U.N. Framework Convention on Climate Change lottery</title>
		<link>http://www.rlweiner.com/phishing-scam-of-the-day-u-n-framework-convention-on-climate-change-lottery</link>
		<comments>http://www.rlweiner.com/phishing-scam-of-the-day-u-n-framework-convention-on-climate-change-lottery#comments</comments>
		<pubDate>Wed, 28 Jul 2010 23:11:46 +0000</pubDate>
		<dc:creator>Robert</dc:creator>
				<category><![CDATA[Phishing]]></category>
		<category><![CDATA[Spam]]></category>

		<guid isPermaLink="false">http://www.rlweiner.com/?p=1795</guid>
		<description><![CDATA[It's not unusual to get phishing scams in the form of lottery "winnings" or that appear to come from legitimate businesses or nonprofits (see the Habitat for Humanity job offer scam).&#160; But this scam is more creative than most.&#160; It arrives as a nice-looking 4-page PDF attachment from the United Nations Framework Convention on Climate [...]]]></description>
			<content:encoded><![CDATA[<p>It's not unusual to get phishing scams in the form of lottery "winnings" or that appear to come from legitimate businesses or nonprofits (see the <a href="http://www.rlweiner.com/phishing-scam-habitat-for-humanity-fundraising" target="_blank">Habitat for Humanity job offer scam</a>).&#160; But this scam is more creative than most.&#160; It arrives as a nice-looking 4-page PDF attachment from the United Nations Framework Convention on Climate Change (well, nice looking if you ignore the creative spelling and the fact that the typeface and font color changes with every paragraph).&#160; It starts out "PLEASE HELP PROTECT/SAVE OUR PLANET" and has a photo of Nelson Mandela and Bill Clinton walking arm-in-arm.&#160; It then informs me that the "NELSON MANDELA FOUNDATION and WILLIAM J. CLINTON FOUNDATION in Collaboration with the United Nations Framework Convention on Climate Change has held an Internet Raffle Draw" and selected my email address!&#160;&#160; And it's signed by Desmond Tutu.&#160; Of course, they need my contact info, including:</p>
<p>1. Full name...............................<br />
2. Country..................................<br />
3. Contact Address.....................<br />
4. Telephone Number.................<br />
5. fax Number............................<br />
5. Marital Status.........................<br />
6. Occupation.............................<br />
7. Date of birth......................<br />
8. Sex.................................<br />
9. Alternative email address…………………….</p>
<p>I hope the wild variety of fonts and colors alone are enough to tell the world this is a scam.&#160; Here's what it looks like:</p>
<h5 style="text-align: left;"><img width="741" height="960" src="/images/2010/07/unitednationsframeworkconventiononclimatechangeunfccc-001.jpg" alt="unitednationsframeworkconventiononclimatechangeunfccc 001" /></h5>
<h5 style="text-align: left;"><img width="741" height="960" src="/images/2010/07/unitednationsframeworkconventiononclimatechangeunfccc-002.jpg" alt="unitednationsframeworkconventiononclimatechangeunfccc 002" /></h5>
<h5 style="text-align: left;"><img width="741" height="960" src="/images/2010/07/unitednationsframeworkconventiononclimatechangeunfccc-003.jpg" alt="unitednationsframeworkconventiononclimatechangeunfccc 003" /></h5>
<h5><img width="741" height="960" src="/images/2010/07/unitednationsframeworkconventiononclimatechangeunfccc-004.jpg" alt="unitednationsframeworkconventiononclimatechangeunfccc 004" /><br />
&#160;</h5>
<h5 style="text-align: left;">&#160;</h5>
<h5 style="text-align: left;">&#160;</h5>
<h5 style="text-align: left;">&#160;</h5>]]></content:encoded>
			<wfw:commentRss>http://www.rlweiner.com/phishing-scam-of-the-day-u-n-framework-convention-on-climate-change-lottery/feed</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>Phishing Scam: Habitat for Humanity fundraising</title>
		<link>http://www.rlweiner.com/phishing-scam-habitat-for-humanity-fundraising</link>
		<comments>http://www.rlweiner.com/phishing-scam-habitat-for-humanity-fundraising#comments</comments>
		<pubDate>Thu, 04 Mar 2010 17:20:40 +0000</pubDate>
		<dc:creator>Robert</dc:creator>
				<category><![CDATA[Phishing]]></category>
		<category><![CDATA[Spam]]></category>

		<guid isPermaLink="false">http://www.rlweiner.com/?p=1629</guid>
		<description><![CDATA[I received the following phishing email today.&#160; It's a variation on the "your email inbox is too large" scam I posted in June.&#160; It plays on Habitat's name, Haiti relief, and pure greed -- it claims you can earn big tax-free commissions as a fundraiser.&#160; There are so many things wrong with this pitch.&#160; Fundraising [...]]]></description>
			<content:encoded><![CDATA[<p>I received the following phishing email today.&#160; It's a variation on the <a href="http://www.rlweiner.com/phishing-scam-dear-webmail-user" target="_blank">"your email inbox is too large" scam </a>I posted in June.&#160; It plays on Habitat's name, Haiti relief, and pure greed -- it claims you can earn big tax-free commissions as a fundraiser.&#160; There are so many things wrong with this pitch.&#160; Fundraising (at least in the U.S.) doesn't work this way -- commissions violate the <a href="http://www.afpnet.org/Ethics/EnforcementDetail.cfm?ItemNumber=3261" target="_blank">Association of Fundraising Professionals' code of ethics</a>.&#160; The income wouldn't be tax-free just because it's from an international charity.&#160; An organization like Habitat wouldn't look for employees by sending mass emails to "undisclosed recipients."&#160; And they wouldn't use a Gmail address.</p>
<p>I hope no one falls for this.&#160;</p>
<p>==========================</p>
<p>Subject: Important Message(Job Offer)</p>
<p>Hello Prospective Employee,<br />
<br />
At HABITAT FOR HUMANITY INTERNATIONAL, we work hard to improve and provide training, technical expertise and support in fund-raising to the national organizations in all the regions of the world. However, the actual work of HABITAT is carried out at the community level by affiliates that have been officially approved by the HFHI Board of Directors. The International Board of Directors (IBOD) are volunteers from around the world who share a deep concern for the problems of poverty housing.<br />
<br />
This is demonstrated in our role as a corporate sponsor for the HAITI RELIEF PROGRAM with money raised going towards helping displaced and disabled children and their families. <br />
We are an organization with a remarkable heritage.<br />
<br />
You've got a chance to be one of our representatives and earn a commission for funds raised plus an ANNUAL UPFRONT ALLOWANCE paid at the beginning of the fiscal year in early January .This Could earn you an average of $500 - $1500 weekly and as much as $5000 (TAX FREE) in a month depending on how active you are.<br />
<br />
You can be rest assured that you WOULD NOT be required to pay any fees upfront and this won't affect your current job earnings or disability payments in any way and you can conveniently work from your desk at home.<br />
<br />
Private donations will be made in your name from our esteemed Voluntary Donors in your region and other parts of the world and you'll be allowed to deduct 10 percent (10%) of the total amount on these donations. This serves as your remuneration for the great service you would be rendering in support of saving lives in the third-world countries. Balances (after the 10%) shall be required to be forwarded to the Regional Co-ordinators of the various charitable projects we are involved in around the Globe.<br />
<br />
&#160;<br />
Please Note: You won't have to do any travelling and WILL NOT be required to pay any fees, this position won't affect your present employment. <br />
<br />
To apply, Kindly forward the following info: to our Human Resource Department at the email listed below for further instructions.<br />
<br />
FULL NAME : <br />
FULL ADDRESS : <br />
CITY : <br />
STATE: <br />
ZIP CODE/POSTCODE: ..<br />
PHONE NUMBER (S) <img src='http://www.rlweiner.com/wp-includes/images/smilies/icon_sad.gif' alt=':(' class='wp-smiley' /> must be valid) would be called to confirm.<br />
GENDER : ..<br />
AGE : ..<br />
EMAIL ADDRESS:...<br />
COUNTRY : ...<br />
&#160;&#160;&#160;&#160;&#160;&#160;&#160;&#160; <br />
Your prompt response is solicited<br />
Coordinator's Desk,<br />
HABITAT FOR HUMANITY INTERNATIONAL<br />
+44(0)7031883958, +14092915940<br />
Registered No. MHQLTH1084442<br />
REPLY TO BE SENT THROUGH : habitatcareers1@gmail.com</p>]]></content:encoded>
			<wfw:commentRss>http://www.rlweiner.com/phishing-scam-habitat-for-humanity-fundraising/feed</wfw:commentRss>
		<slash:comments>13</slash:comments>
		</item>
	</channel>
</rss>

