June 7, 2017

[hr_invisible]

Phish NETS:  Bad Apples

Nothing but rotten Apples this week.  Lots of them.  Here are two…

This awful phishing email came from the creatively constructed domain support-invalidlogin.com.  “Your APPLE ID We’ve noticed that some of your account informations appears to be missing or incorrect.”   Look how these criminals stretched out the Apple logo.  Would anyone fall for this?  God, we hope not.  A mouse-over of  “Login to Apple” reveals a shortened link at bit.ly.  We unshortened that link using URLEX.org and discovered that it points to the website mv-to.update-id-acc-DOT-com. A WHOIS lookup of this domain reveals that it was registered through an Australian Registrar on May 30 and the site description is listed as “DEPARTMENT OF THE ENVIRONMENT AND ENERGY.”

Delete.

[hr_invisible]

Though this next Apple phishing scam was better designed, there are still grammatical, punctuation and capitalization errors that give it away, in addition to the wrong from address and mouse-over link.  However, the best part of this stupid phish is the greeting… “Reversed Customer.”  We can’t help but smile sometimes at the foreigners who try so hard to separate us from our money.

Enjoy.

[hr_invisible]

[hr_invisible]

YOUR MONEY:  Free Bonus at Bingo Hall, Auto Warranty Has Expired, and your MassMutual Life Insurance Acceptance Letter

Do you like playing bingo?  Did you know that it was invented by an Italian in 1530 according to Wikipedia.  We’re not surprised to learn that Bingo is played online for money at the real website called BingoHall.ag (.ag is the 2-letter country code for the islands called Antigua and Barbuda in the Caribbean.) But before you rush off to the real BingoHall.ag, you might want to read the reviews of some very pissed off consumers and people who say that the site isn’t trustworthy. However, this next email actually didn’t come from Bingo Hall.  It came from a subdomain (temple) of the domain qraze.us and the links point back to it.  Qraze.us  was registered just hours before the email came out by someone named “Edik Pendleton” from Benijofar, Spain and the site is being hosted in England.  The spammy white text at the bottom of the email came from a Yelp review of Pucket’s Grocery & Restaurant in Nashville, TN.  Would you like to give qraze.us your credit card information and open a new account now?

BINGO!

[hr_invisible]

The design and presentation of these next two scam emails lead us to believe they were created by the same designer.  You be the judge…

From Final.Warranty.Notice @ removal.canvehiclewarrantextend.us comes the subject line “Notice your Auto Warranty Has Expired. Action Required. Ref. No. 22263215”  It even offers a username (your email) and an account ending in “2237.”  This is as phony as a $3 bill.  That long domain canvehiclewarrantextend.us was registered on June 1^st by a Garvin Brockman from Bayanzurkh, Mongolia.  However, we are very interested in the “Great genuine barbecue” review at the bottom of the email!    Again, a Yelp review.  This one is for a BBQ in Rigby, Idaho called Lil’ Mike’s Smokin BBQ.  Sounds great!

[hr_invisible]

This next offer expires in 72 hours, says Ian Johnson from the Approval Department of “MassMutual Life Insurance.”  Yeah, whatever.  You’ve received a guaranteed acceptance letter for life insurance, starting at less than $10 per month.  Can you believe that “you won’t need to take a medical exam or answer any health questions?”  That ought to confirm that it’s a scam!  But the greatest reveal, once again, is a simple WHOIS lookup of the domain.  Lifeinsurancewaited.us was registered by Edik Pendleton of Benijofar, Spain!  Looks like Edik represents both Bingo and Life Insurance!  What a well rounded repertoire.

Now delete.

[hr_invisible]

[hr_invisible]

TOP STORY: We Know The Best People

During the last few weeks we’ve been contacted by Dignitaries, International Attorneys and Barristers, Bank Managers, Chairmen and senior staff members of government agencies around the world. And many are waiting at airports for our reply!  This most exemplary list of special people even includes Vice President Mike Pence who emailed us as recently as June 3! This is all so exciting and our heads are swimming!  Vice President Pence must be traveling because the email came to us from an address in Italy.  Apparently he writes to inform us that $20 million dollars is to be delivered to our “humble address” through a delivery agent.  Do you doubt us?  People, we don’t make this sh*t up!  In fact, all of these amazingly special people have money for us.  We can’t possibly take up this column with all the good news so we’ll just share the email from Vice President Pence and below we’ll give you a link to a pdf file containing all the other wonderful emails we’ve received recently.

From: flaviogamerro@alice.it Time:  2017-06-03 06:58:03 Subject: Assigned By President Donald Trump

Assigned By President Donald Trump

I am  Mike Pence, and I am writing to inform you about your Bank Check Draft brought back by the United Embassy from the government of Benin Republic in the white house Washington DC been mandated to be deliver to your home address once you reconfirm it with the one we have here with us to avoid wrong delivery of your check draft Twenty million united states dollars $20,000,000,00usd that was assigned to be delivered to your humble home address by Honorable president Donald Trump the president of this great country this week by a delivery agent MR Jackson Perez

Also reconfirm your details for the check delivery by filling the form below and send it immediately to our Email in for verification and for prompt collection of your fund.

Fill The Form Below:

Full Names : Residential Address Mobile Number Fax Number Occupation Sex Age Nationality : Country : Marital Status :

A copy of your ID or passport

Accept my hearty congratulation again!

Yours Sincerely,

MR MIKE PENCE vice-president USA 1600 Pennsylvania Ave NW, Washington, DC 20500, United States

In addtion to Vice President Pence, our distinguished list of people includes:

Dr. Hassan Musa, senior staff of the Nigerian Ports Authority Mrs. Maria Tokunbo ; Bank Manager of BOA BANK, Abidjan Ci Robert Williams, Inspection Unit Manager United Nations Inspection Agency in Hartsfield Jackson International Airport Atlanta, Georgia Office of The Presidency, Nigerian Presidential Complex, Aso Rock Presidential Villa, Abuja-Nigeria. Diplomat Anthony Wharton Diplomat Andrew Ndife Diplomat Richard Harry Dr Charles Holliday Jr.. Bank of America, Vice Chairman on Investment Banking Director Abdel Whani, Chairman Payment Verification Panel Barrister Adewigi Wetigoma

You can pull up a pdf of the emails of all these distinguished people on our website!

[hr_invisible]