US Marine Advance Fee Scam
Sunday, April 27, 2008

A favourite ruse employed by Internet fraudsters is to include a link in their initial scam email that leads to a reputable news website. When a potential victim clicks the link he or she will be taken to a news article that seemingly confirms the claims in the scam email. In this case, the link leads to a 2003 BBC news report about a large stash of money found in Baghdad by the US military. The article notes that several US soldiers were questioned after a portion of the funds was allegedly stolen. The BBC article itself is perfectly legitimate and reports on true events. However, the claims in the scam email are fictitious and have no connection whatsoever with the real incident described. The scammer poses as one of the soldiers questioned over the alleged theft and implies that he is still in possession of these stolen funds. Those who fall for the ruse and reply to the scam email will be promised a large percentage of the money if they are willing to help the "soldier" transfer the funds. However, to complete the "deal" the victim will be asked to provide upfront fees, ostensibly to cover transfer and banking expenses. The victim may also be asked to provide a substantial amount of personal and financial information which may later be used to steal his or her identity.

Don't be fooled by unsolicited emails that promise lucrative deals, even if they contain links to news articles that supposedly relate to the scammers claims. For details about Advance Fee scams, see:
Nigerian Scams - 419 Scam Information


An example of the scam email:

Subject: CONFIRM WHAT I WANT TO SHARE WITH YOU

Attn dear,

Good day to you,I know you would be surprised to read from someone relatively
unknown to you before now. My name is Master Sgt. Edward Ramirez, a soldier in the U.S. Marine, deployed to Iraq in the beginning of the war in 2003. I would like to share some highly personal and classified information with you regarding my personal experience and role which I played in the pursuit of my career serving under the U.S ARMY which was at the fore-front of the war in iraq

However, I would like to hold back certain information for security reasons for now until you have found time to visit the BBC website stated below to enable you have insight regarding what I intend to share with you, believing that it would be of your desired interest in one way or the other. Here is a BBC news listing that confirms what I share with you

http://news.bbc.co.uk/2/hi/middle_east/2988455.stm

I need your assistance to secure a certain deposit of funds which originated from the source mentioned in the webpage above. My proposal is of mutual benefit to us and should be treated as such. I must say that I'm very uncomfortable sending this message to you without knowing truly if you would misconstrue the importance of confidentiality in this regards and decide to go public.If you are interested and willing to assist, please contact me immediately to enable me
provide you with further details.Thank you for your understanding.

Kindest regards,
Master Sgt. Edsummer Ramirez

posted by Brett Christensen @ 10:37 AM, ,


Beware of Malicious April Fools Emails
Tuesday, April 1, 2008

Inboxes are currently being hit by April Fools Day malware emails similar to the following:

Subject: All Fools' Day
Surprise! http:[Link removed]

The messages have a number of subjects, including those listed below:

I am a Fool for your Love
Join the Laugh-A-Lot!
One who is sportively imposed upon by others on the first day of April
Surprise!
Surprise! The joke's on you.
Today's Joke!
Today You Can Officially Act Foolish
Wise Men Have Learned More from Fools
All Fools' Day
April Fools' Day
Doh! All's Fool.
Doh! April's Fool.
Gotcha!
Gotcha! All Fool!
Gotcha! April Fool!
Happy All Fool's Day.
Happy All Fools Day!
Happy All Fools!
Happy April Fool's Day.
Happy April Fools Day!
Happy April Fools!

Clicking the link in these malicious emails can open a seemingly funny webpage that is designed to trick the visitor into downloading and installing a trojan. Be very cautious of clicking links in emails related to April Fools Day.

For more information, see:
April Fools Dorf

posted by Brett Christensen @ 12:16 PM, ,


Virus in Digital Photo Frames
Saturday, January 26, 2008

Digital photo frames are becoming more popular and make excellent gifts. The frames allow users to transfer digital images from their computers and display them either individually or as dynamic slide shows. Many have other functions as well, including calendars, clocks and video playback.

Recently however, it was discovered that a number of Insignia brand digital frames sold by Best Buy were infected by a computer virus. This presented the possibility that the user's computer could become infected by the virus when the device was plugged into a computer to transfer photos. It seems that some frames somehow became infected with the virus during the manufacturing process.

Insignia recalled the infected frames as soon as it became aware of the problem and has issued a statement about the incident on its website.

Luckily, the virus is an old one and virtually any reliable and up-to-date anti-virus program should be able to deal with it before it causes problems on the user's computer.

So, although it may have affected some users, this cannot be considered a serious problem and is an isolated incident. What it does illustrate, however, is that, when it comes to computer security, we must remain constantly vigilant. Security threats can sometimes originate from the most unlikely of sources.

posted by Brett Christensen @ 4:17 PM, ,


Valentine Malware Emails
Thursday, January 24, 2008

Criminals are now using love-themed Valentine's Day email's to trick recipients into installing a trojan. The emails contain a short message and link like the one included below:

Subject: Sending You My Love
Hugging My Pillow http://72 .[removed]


The emails have a number of subject lines, including the following:

The short message in front of the link also varies.

Clicking the link opens a web page which prompts the user to download what is supposedly a Valentine's Day Greeting Card. However, the download actually installs a variant of the Storm worm.

Be wary of any email message that supposedly leads to an online greeting card. The tactic has been used continually for months and has previously targeted different holidays such as 4th July, Christmas and New Year.

A screen shot of the malware website:

Trojan Website screenshot

posted by Brett Christensen @ 8:10 AM, ,


USS New York Launches
Tuesday, January 15, 2008

Since mid 2006, a message has been circulating that claims that steel left from the World Trade Center is being used in the construction of new navy assault ship, USS New York. The information in the message is true.

And, according to recent news about the vessel, USS New York has now been launched. The following report from the USS New York website gives details about the launch:



USS New York Update 1/1/2008 HERE SHE COMES !


The future USS NEW YORK LPD-21, (USSNY) the fifth ship of the San Antonio-class of amphibious ships was launched (get wet) on December 19th at Northrop Grumman Ship Systems facility (www.ngc.com) in Avondale, LA. As the USSNY nears 75% completion, final plans are coming together for the Chris-Comm Events. The Christening will be held on the 1st of March. It is a invitation only event, you must contact (www.ss.northropgrumman.com) for invitations if you would like to attend. The ships sponsor, Mrs. Gordon England, wife of Deputy Secretary of Defense Gordon England, (www.defenselink.mil) will break the ceremonial bottle of champagne across her bow and “Christen Thee New York”. Following that the ship will continue through sea trials and final fitting out until the Commissioning in New York City (www.nycvisit.com), Fall 2009. Preparations are underway for these events, which are expected to span an entire week. The Commissioning Committee (www.ussnewyorkcommissioning.com) web site coming in March 2008) comprised of volunteers from a broad spectrum, has the awesome responsibility of raising 1.5 M for these events as well as other USSNY projects. The commissioning is expected to be the memorial event of the century and draw many top political and public figures as well as huge crowds. The USS New York’s importance to this City, State and Nation cannot be underestimated. There is no other ship in world history that will carry the import and prestige that this vessel carries. She will become America’s greatest naval ambassador and will carry our flag to the 4 corners of the world throughout the 21st century.

Many milestones will occur this year like main engine light-offs, powering up on her own diesel generators and completing and testing of the various ships systems. Each system creates its own vibration in the hull that makes the ship feel as if it has come to life. Many sailors will awake when that vibration stops for any reason. It’s as if she was singing you to sleep.

As she awakens… A nation awaits

For more info or to keep up on the USSNY’s news blog
www.ussnewyork.com

posted by Brett Christensen @ 12:38 PM, ,


Name Dropping Nigerian Scammer

This bloke is really out to impress me! Rather than just naming a single entity as the one supposedly handing over the millions, he throws several high-profile names into the pot. According to his message (see below), I've been awarded the princely sum of $20 million from – wait for it – the United States Government, the World Bank, the United Nations, and – last but not least – the British Prime Minister. Moreover, the message has been sent by no less than a British Knight in the person of one "Sir Benson Gilbert".

With such powerful entities backing the payment, it must be true right? After all, would a "Sir" lie? But, hold on, why would Sir Benson, being an agent of such a mega-group, use a free Yahoo webmail account for his messages? And why would Citibank use a free Gmail account? Come to think of it, why am I being given 20 million dollars anyway? The message is not too clear on that, for some reason. And Sir B's grammar and spelling seem a little off as well. Does he really want me to "bellow" my details? I'm not sure he'll hear me! Couldn't I just email them? Also, he mentions something about a "wining payment". I wonder if he'd mind if I swapped it for beer instead of wine.

Jokes aside, it hardly needs to be said that this is just one more in the seemingly endless parade of Advance Fee scam emails that darken inboxes the world over. Scams this transparent might seem amusing until you realize that they actually work. New victims fall for scams just like this one every day.

Victims of such scams will be asked to send money, ostensibly to allow the release of the non-existent funds. If they "bellow" enough sensitive personal information, they may also have their identities stolen.

Sir Benson's Message:

From: unitednationremitpayment4@yahoo.com
Subject: PAYMENT NOTIFICATION FOR 2008

CHAIRMAN COMMITTE ON FOREIGN
CONTRACT/AWARD WINING PAYMENT
UNITED NATION AND USA GOVERNMENT.
SIR BENSON GILBERT.

ATTEN: OWNER BENEFICIALRY

U.S.A GOVERNMENT, WORLD BANK, UNITED NATION ORGANIZATION OFFICIAL APPROVAL PAYMENT VALUED $20M

The British Prime Minister in conjunction with U.S.A GOVERNMENT, WORLD BANK, UNITED NATIONORGANIZATION do hereby give this irrevocable approval order with Release Code: GNC/3480/02/00 in your favor for your contract entitlement/award winning payment with the UNITED NATION to your nominated bank account.

Now you're new Payment, United nation Approval No; UN5685P, White House Approved No: WH44CV, Reference No.-35460021, Allocation No: 674632 Password No: 339331, Pin Code No: 55674 and your Certificate of Merit Payment No: 103, Released Code No: 0763; Immediate Citibank Telex confirmation No: -1114433; Secret Code No: XXTN013, Having received these vital payment number, therefore You are qualified now to received and confirm Your payment with the United Nation immediately within the next 72hrs.

As a matter of fact, you are required to Deal and Communicate only with MR ANDREW WOLLEY, DIRECTOR INTERNATIONAL REMMITTANCE CITIBANK OF UNITED KINGDOM, with the help and monitory team from the CITIBANK OF NEW YORK which is our official remitting bank, Committee On Foreign Payment Matters in United Nation, has look up to make sure you receive your money.

SO contact: MR ANDREW WOLLEY on his contact information, Direct Citibank Telephone No +44-700-5966547, Cell/mobile +44-7045772110 or cell/mobile +44-7045772110 Fax Number: +44 870 4861663, Telephone Number: +44-870 4861646, Email:citibank1903@gmail.com

For immediate release of your contract/inheritance/Award Winning claim be informed that you are not allowed to correspond with any person or office anymore, you are required to send bellow information for your transfer.

1) YOUR FULL NAME:
2) ADDRESS, CITY, STATE AND COUNTRY:
3) PERSONAL PHONE, FAX AND MOBILE:
4) COMPANY NAME (IF ANY) POSITION AND ADDRESS:
5) BANK NAME:
6) BANK ADDRESS:
7) ACCOUNT NUMBER:
8) ROUTING NUMBER OR SWIFT CODE NO:
9) PROFESSION, AGE AND MARITAL STATUS:
10) COPY OF YOUR INT'L PASSPORT/DRIVERS LICENSE:

NOTE: YOUR PERSONAL CONTACT/COMMUNICATIONCODE WITH CITIBANK IS (511), YOU ARE ADVICE TO SEND YOU FULL BANKING INFORMATION TO THE CITIBANK OF LONDON INTERNATIONAL REMMITTANCE DIRECTOR HEADED BY MR ANDREW WOLLEY AND MAKE SURE YOU SPEAK WITH HIM, WITH YOUR NEW
PAYMENT CODE FOR RELEASE OF YOUR PAYMENT AND SEND HIM ALL YOUR BANKING INFORMATION NOW. Regard. Senate CONTACT CODE (511) OFFICER: MR ANDREW WOLLEY.

POSITION: DIRECTOR, INTL, AND REMMITTANCE CITIBANK LONDON.
TELEPHONE OFFICE/BANK: 44-700-595644,
FAX NUMBER: +44 870 4861663, +44-870 4861646
CELL/MOBLIE, +44-7045772110or cell/mobile +44-7045772110.
EMAIL: citibank1903@gmail.com.

CHAIRMAN COMMITTE ON FOREIGN CONTRACT/AWARD WINING PAYMENT
UNITED NATION AND USA GOVERNMENT.
SIR BENSON GILBERT

posted by Brett Christensen @ 12:36 PM, ,


Malware New Year Greeting Emails
Monday, December 31, 2007

The barrage of bogus greeting card emails that have been hitting inboxes for months has now shifted its theme from Christmas to New Year.

The Happy New Year emails include links that supposedly leads to such items as a "greeting card" or a "2008 song". However, those who click on the link will be taken to a website that tries to entice visitors into downloading a malicious .exe file.

New Year Scam Website

There have already been several different versions of these malware messages and more are likely to follow. Be very cautious of any Happy New Year messages that claim to contain links to greeting cards, songs, or other New Year orientated material

Examples:

A New Year 2008 song

Happy 2008!
[LINK REMOVED]


Happy New Year To (email address removed)

New 2008 Year Greeting Card
[LINK REMOVED]

posted by Brett Christensen @ 8:25 AM, ,