Idiot Bilingual Mortgage Spammer (Brazilian)

meep · **Joined:** Thu Apr 05, 2007 4:10 pm **Posts:** 2777

This idiot did not bother with a subject line in his bilingual mortgage spam (Portuguese / English)

===BEGIN===
From: DIVERSE FINANCE LTD [[email protected]]
Sent: Monday, May 23, 2011 8:45 AM
Subject:

Olá,
Você precisa de empréstimo urgente?
Precisa de um empréstimo para o negócio?
Precisa de um empréstimo para o seu investimento?
Precisa de um empréstimo para financiar o seu problema?
Necessita de empréstimo pessoal?
Necessita de empréstimo da empresa e de empréstimos do setor?

Contate-nos agora para mais informações oferecemos empréstimo a 3%.
E-mail para contato com nossa empresa ([email protected])

Graças.

Diverse Finance Ltd
São Paulo, SP 02516-000. Brasil.
E-mail: [email protected]

Hello,
Did you need urgent loan?
Need a loan for business?
Need a loan for your investment?
Need a loan to finance your problem?
Need personal loan?
Need company loan and industry loan?

Contact us now for more information we offer loan at 3%.
Email to contact our company ([email protected])

Thanks.

Diverse Finance Ltd
São Paulo, SP 02516-000. Brasil.
E-mail: [email protected]

====END===

Headers show spamming out of Brazil (munged my mail server info). They probably hacked some email account with an easily guessed password on Squirrelmail mail software.

Code:

Received: from xxxx-mymungedmailserver-xxx by
xxxxx with Microsoft SMTP Server (TLS) id
14.0.722.0; Mon, 23 May 2011 08:46:01 -0700
Received: from unknown [200.192.134.218] (EHLO emlidc0014.whservidor.com) by
xxxxxxx with ESMTP id xxxxx (envelope-from
<[email protected]>); Mon, 23 May 2011 09:46:00 -0600 (MDT)
Received: from webmail.grupointegrado.br (uolhostidc3073 [127.0.0.1]) by
emlidc0014.whservidor.com (Postfix) with ESMTP id 8947F2C00E2; Mon, 23 May
2011 12:45:58 -0300 (BRT)
Received: from 127.0.0.1 (SquirrelMail authenticated user
[email protected]) by webmail.grupointegrado.br with HTTP;
Mon, 23 May 2011 12:45:58 -0300 (BRT)
Message-ID: <3505535a9c2f524c0dba576238786a1d.squirrel@webmail.grupointegrado.br>
Date: Mon, 23 May 2011 12:45:58 -0300
Subject:
From: DIVERSE FINANCE LTD <[email protected]>
Reply-To: <[email protected]>
User-Agent: SquirrelMail/1.4.17
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="----=_20110523124558_50531"
X-Priority: 3 (Normal)
Importance: Normal
To: undisclosed-recipients:;
X-Spam: exempt
X-MAIL-FROM: <[email protected]>
X-SOURCE-IP: [200.192.134.218]
Return-Path: [email protected]
X-MS-Exchange-Organization-AuthSource: xxxx-mymungedmailserver-xxx
X-MS-Exchange-Organization-AuthAs: Anonymous

spamislame · **Joined:** Tue May 09, 2006 9:18 am **Posts:** 5022

meep wrote:

They probably hacked some email account with an easily guessed password on Squirrelmail mail software.

Yes, after sending "Webmail account reset" phishing messages to which this person likely responded.

SiL

InBoxRevenge KS Forum

Idiot Bilingual Mortgage Spammer (Brazilian)

Who is online