I just got what may be the most inept phishing e-mail I’ve ever seen. And I’m going to quote it below just to show how absolutely mind-bogglingly bad it is.
From: info.accountwebupdate@googlemail.com
Subject: WebNews Email Account Update
Date: April 25, 2008 10:41:02 AM EDT
To: “undisclosed-recipients:”@smtp.ksu.edu.sa
Reply-To: info.accountwebupdate@googlemail.comDear uga.edu Webmail Subscriber,
This message is from uga.edu messaging center to all uga.edu email account owners. On Fri, April 25th, 2008, from 3:00 PM until 9:00 PM, all Mailhub systems will undergo regularly scheduled maintenance. Access to your e-mail via the mail client will be unavailable for some time during this maintenance window. We are currently upgrading our data base and e-mail account center – see homepage. We are deleting all uga.edu email account to create more space for new accounts.
To complete your uga.edu Webmail account, you must reply to this email immediately and enter your password here (********) Failure to do this will immediately render your emailaddresshere(**********)deactivated from our database.
You can also confirm your email address by logging into your uga.edu account at http://webmail.uga.edu/
Thank you for using THE uga.eduu TEAM”
—- Msg sent via KSU Webmail – http://atmail.com/
Let’s see… what all is wrong here?
- Yeah, I think UGA’s administrators would send official correspondence from a Gmail account. Riiiight.
- And they’d send it via KSU Webmail, no less.
- And judging from the “To” line, the KSU in question is King Saud University in Saudi Arabia.
- And last, but definitely not least, the only thing on UGA’s homepage (“see homepage”, right?) about this is… a scam warning.
Seriously, scammers? Don’t quit your day job.
JUST GOT THIS “WINNING” NOTIFICATION FROM SAME WEBSITE!!!
From: “UK ONLIN LOTTERY COUNCIL” Save Address Block Sender This Is Spam
To: “undisclosed-recipients:”@smtp.ksu.edu.sa
CC:
Subject: Result Grid!!!
Date: Sun, 14 Dec 2008 12:50:25 +0300
Return-Path:
Delivered-To: mebron143:catlover.com@mail.com
Received: (qmail 25719 invoked by uid 0); 14 Dec 2008 09:52:07 -0000
X-Ob-Received: from unknown (192.168.10.60) by mta1-6.us4.outblaze.com; 14 Dec 2008 09:52:07 -0000
Received: from localhost (60.10.168.192.in-addr.arpa [192.168.10.60]) by as2-7.us4.outblaze.com (Postfix) with ESMTP id 24B5E33679B for ; Sun, 14 Dec 2008 09:52:07 +0000 (GMT)
X-Ob-Received: from unknown (192.168.8.68) by as2-7.us4.outblaze.com; 14 Dec 2008 09:52:07 -0000
Received: from relay1.localdomain (relay1.ksu.edu.sa [212.138.39.83]) by spf8.us4.outblaze.com (Postfix) with ESMTP id B1ACF889C for ; Sun, 14 Dec 2008 09:52:06 +0000 (GMT)
Received: from relay1.localdomain (localhost [127.0.0.1]) by localhost.ksu.edu.sa (Postfix) with ESMTP id 029E6EC30; Sun, 14 Dec 2008 12:50:29 +0300 (AST)
Received: from smtp.ksu.edu.sa (smtp [212.138.39.71])by relay1.localdomain (Postfix) with ESMTP id 462E95CA3;Sun, 14 Dec 2008 12:50:27 +0300 (AST)
Received: from smtp.ksu.edu.sa (localhost [127.0.0.1])by localhost.ksu.edu.sa (Postfix) with ESMTP id 42465D6008;Sun, 14 Dec 2008 12:48:27 +0300 (AST)
Received: from webmail.ksu.edu.sa (webmail.ksu.edu.sa [212.138.39.175])by smtp.ksu.edu.sa (Postfix) with ESMTP id C7DE7D6007;Sun, 14 Dec 2008 12:48:26 +0300 (AST)
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain; charset=iso-8859-1
Mime-Version: 1.0
Reply-To: webukclaim@gmail.com
X-Origin: 78.138.22.196
X-Uidl: 1229248225155308179
X-Mailer: AtMail 4.1
Message-Id:
X-Imss-Version: 2.051
X-Imss-Result: Default_Triggered
X-Imss-Scaninfo: M:P L:E SM:0
X-Imss-Tmaseresult: TT:0 TS:0.0000 TC:00 TRN:0 TV:5.5.1026(16338.000)
X-Imss-Scores: Clean:0.00000 C:2 M:3 S:5 R:5
X-Imss-Settings: Baseline:1 C:1 M:1 S:1 R:1 (0.0000 0.0000)
X-Ob-Rescale-Score:
X-Spam-Status: No, hits=1.035 required=6 tests=[PLING_PLING=1.034, UNPARSEABLE_RELAY=0.001]
X-Spam-Level: *
Show Basic Headers Back To [INBOX]
Your email address emerged a winner of £3,000,000.00 on U.K. Online Lottery.
Contact
Name:Mr.Mark Walter
E-mail Address:webnoticedesk0@live.com
Heneri K. Lloyd
(Online Promo Co-ordinator
—- Msg sent via KSU Webmail – http://atmail.com/
Reply