Last visit was: Fri Jul 04, 2014 9:34 pm
It is currently Fri Jul 04, 2014 9:34 pm

Idiot Bilingual Mortgage Spammer (Brazilian)


All times are UTC - 5 hours [ DST ]


 [ 2 posts ] 
Author Message
 PostPosted: Wed May 25, 2011 12:34 pm   
Spammers' Nightmare
User avatar

Joined: Thu Apr 05, 2007 4:10 pm
Posts: 2777
This idiot did not bother with a subject line in his bilingual mortgage spam (Portuguese / English)

===BEGIN===
From: DIVERSE FINANCE LTD [[email protected]]
Sent: Monday, May 23, 2011 8:45 AM
Subject:



Olá,
Você precisa de empréstimo urgente?
Precisa de um empréstimo para o negócio?
Precisa de um empréstimo para o seu investimento?
Precisa de um empréstimo para financiar o seu problema?
Necessita de empréstimo pessoal?
Necessita de empréstimo da empresa e de empréstimos do setor?


Contate-nos agora para mais informações oferecemos empréstimo a 3%.
E-mail para contato com nossa empresa ([email protected])

Graças.

Diverse Finance Ltd
São Paulo, SP 02516-000. Brasil.
E-mail: [email protected]






Hello,
Did you need urgent loan?
Need a loan for business?
Need a loan for your investment?
Need a loan to finance your problem?
Need personal loan?
Need company loan and industry loan?


Contact us now for more information we offer loan at 3%.
Email to contact our company ([email protected])

Thanks.

Diverse Finance Ltd
São Paulo, SP 02516-000. Brasil.
E-mail: [email protected]

====END===

Headers show spamming out of Brazil (munged my mail server info). They probably hacked some email account with an easily guessed password on Squirrelmail mail software.

Code:
Received: from xxxx-mymungedmailserver-xxx by
xxxxx with Microsoft SMTP Server (TLS) id
14.0.722.0; Mon, 23 May 2011 08:46:01 -0700
Received: from unknown [200.192.134.218] (EHLO emlidc0014.whservidor.com) by
xxxxxxx with ESMTP id  xxxxx (envelope-from
<[email protected]>);   Mon, 23 May 2011 09:46:00 -0600 (MDT)
Received: from webmail.grupointegrado.br (uolhostidc3073 [127.0.0.1])   by
emlidc0014.whservidor.com (Postfix) with ESMTP id 8947F2C00E2; Mon, 23 May
2011 12:45:58 -0300 (BRT)
Received: from 127.0.0.1  (SquirrelMail authenticated user
[email protected])   by webmail.grupointegrado.br with HTTP;
Mon, 23 May 2011 12:45:58 -0300 (BRT)
Message-ID: <[email protected].br>
Date: Mon, 23 May 2011 12:45:58 -0300
Subject:
From: DIVERSE FINANCE LTD <[email protected]>
Reply-To: <[email protected]>
User-Agent: SquirrelMail/1.4.17
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="----=_20110523124558_50531"
X-Priority: 3 (Normal)
Importance: Normal
To: undisclosed-recipients:;
X-Spam: exempt
X-MAIL-FROM: <[email protected]>
X-SOURCE-IP: [200.192.134.218]
Return-Path: [email protected]
X-MS-Exchange-Organization-AuthSource: xxxx-mymungedmailserver-xxx
X-MS-Exchange-Organization-AuthAs: Anonymous


Top
 Profile  
 PostPosted: Wed May 25, 2011 4:08 pm   
Site Admin
User avatar

Joined: Tue May 09, 2006 9:18 am
Posts: 5022
meep wrote:
They probably hacked some email account with an easily guessed password on Squirrelmail mail software.

Yes, after sending "Webmail account reset" phishing messages to which this person likely responded.

SiL


Top
 Profile  
 [ 2 posts ] 

All times are UTC - 5 hours [ DST ]


Who is online

Users browsing this forum: Ahrefs, Wayback machine and 0 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Jump to:  


Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group
Style originally created by Volize © 2003 • Redesigned SkyLine by MartectX © 2008