<?xml version="1.0" encoding="iso-8859-1"?><!-- generator="b2evolution/1.10.2" -->
<rss version="0.92">
	<channel>
		<title>IS Security - Last comments</title>
				<link>http://davemoats.com/blog/index.php/issec?disp=comments</link>
		<description></description>
		<language>en-US</language>
		<docs>http://backend.userland.com/rss092</docs>
				<item>
			<title>In response to: Internal Revenue Service Scam Email</title>
			<description>I just got one too; here's the body (deleting it)...&lt;br /&gt;
&lt;br /&gt;
Sender: &quot;Internal Revenue Service&quot;  info@mail.irs.gov&lt;br /&gt;
Subject: Notice of Underreported Income &lt;br /&gt;
Date: Wed, 11 Nov 2009 11:52:05 -0300 &lt;br /&gt;
To: nlkupf@the-beach.net &lt;br /&gt;
   &lt;br /&gt;
Taxpayer ID: nlkupf-00000337325032US&lt;br /&gt;
Tax Type: INCOME TAX&lt;br /&gt;
Issue: Unreported/Underreported Income (Fraud Application)&lt;br /&gt;
&lt;br /&gt;
Please review the attached statement (execute self-extracting archive file attached to this letter).&lt;br /&gt;
&lt;br /&gt;
Internal Revenue Service&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
File: statement.zip (17 kBbytes)  &lt;br /&gt;
</description>
			<link>http://davemoats.com/blog/index.php/issec/2009/11/13/internal_revenue_service_scam_email#c4845</link>
		</item>
				<item>
			<title>In response to: Euro Million Lottery Award 2009 Scam Email</title>
			<description>I have also received one just like this...&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
-----Original Message-----&lt;br /&gt;
From: EUROMILLION LOTTERY 2009 [mailto:million@web2mail.com] &lt;br /&gt;
Sent: Saturday, May 23, 2009 10:55 AM&lt;br /&gt;
Subject: CONGRATULATIONS !!! {YOUR EMAIL WON Batch No:WNTO/7416/VA/ES}&lt;br /&gt;
&lt;br /&gt;
                                     YOUR E-MAIL ADDRESS WON THE LOTTERY.&lt;br /&gt;
&lt;br /&gt;
Sir/Madam,&lt;br /&gt;
&lt;br /&gt;
We congratulate you over your email success in our computer balloting (Sweepstakes) held on Monday 20th of May, 2009. This is a Millennium Scientific Computer Game in which email addresses were used, your winning Ticket No is: 07-13-31.54-640, Ref No.ES/037/11/06/MD, Batch No:WNTO/7416/VA/ES and Serial No:MUOTI/82536. It is a promotional program aimed at encouraging internet users; therefore you do not need to buy ticket to enter for it. You have been approved for the star prize of 1,000,000.00 (One Million Euros Only).&lt;br /&gt;
&lt;br /&gt;
To claim your winning prize, you are to contact the appointed claim agent as soon as possible with your Name, Age, Nationality and Telephone number.&lt;br /&gt;
&lt;br /&gt;
Mr.Cliff Branson.&lt;br /&gt;
LOTERIA CONFIANZA AGENCIA S.L.&lt;br /&gt;
Mario Cabre Sin Numero, 28016,&lt;br /&gt;
Madrid - Spain.&lt;br /&gt;
E-mails: cliffbranson2009@auto.lt&lt;br /&gt;
&lt;br /&gt;
Tel: 0034-687-413-988.&lt;br /&gt;
&lt;br /&gt;
Note: You are advised to keep this winning very confidential until you receive your lump prize in your account or optional cheque issuance to you. This is a protective measure put in place to avoid people applying for your winning fund, as we have had cases like this before.&lt;br /&gt;
::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::&lt;br /&gt;
The information transmitted is intended only for the person or entity to whom it is addressed. Unauthorized use, disclosure or copying is strictly prohibited. The sender accepts no liability for the improper transmission of this communication nor for any delay in its receipt&lt;br /&gt;
&lt;br /&gt;
Regards,&lt;br /&gt;
Mrs. Helen Gomez.&lt;br /&gt;
</description>
			<link>http://davemoats.com/blog/index.php/issec/2009/01/15/euro_million_lottery_award_2009_scam_ema#c3603</link>
		</item>
				<item>
			<title>In response to: Euro Million Lottery Award 2009 Scam Email</title>
			<description>Tis is a copy of the ttached document sent with an email tous under the Euromillions email scam.&lt;br /&gt;
&lt;br /&gt;
LOTERIAS COMP&lt;br /&gt;
Y.&lt;br /&gt;
LOTERIA CONFIANZA AGENCIA&lt;br /&gt;
MARIO CABRE SIN N&amp;#218;MERO&lt;br /&gt;
MADRID BRANCH, SPAIN&lt;br /&gt;
Tel: 0034687413988.&lt;br /&gt;
Fax: 0034911849835.&lt;br /&gt;
N&amp;#186;. ND/19734231&lt;br /&gt;
PAYME&lt;br /&gt;
T APPLICATIO&lt;br /&gt;
 FORM&lt;br /&gt;
Your application for the claim of lottery winning prize will be duly processed, and payment be made upon&lt;br /&gt;
certification. Hence, carefully fill in the appropriate informations in the space provided below to facilitate&lt;br /&gt;
our immediate Commencement of your claim/processing and remittance.&lt;br /&gt;
Full Name of Beneficiary: ..................................&lt;br /&gt;
Address: ......................................&lt;br /&gt;
City/.Country: ......................./.......Date Of. Birth.............&amp;#8230;&lt;br /&gt;
Nationality: ................................ Sex: ............... I.D/ Passport No ............................&amp;#8230;&amp;#8230;&amp;#8230;&amp;#8230;&amp;#8230;..&lt;br /&gt;
Occupation: ...................................&lt;br /&gt;
Tel: ..........................................Fax: ........................................ Mobile Phone &amp;#8230;&amp;#8230;&amp;#8230;&amp;#8230;&amp;#8230;&amp;#8230;..&amp;#8230;&amp;#8230;...&lt;br /&gt;
Next of Kin: ..........................................&lt;br /&gt;
Winning Email Address: ......................................&lt;br /&gt;
AMOUNT WON: ..........................................&lt;br /&gt;
Ticket No.: ............................&amp;#8230;&amp;#8230;&amp;#8230;.&lt;br /&gt;
WINNER&amp;#8217;S SIGNATURE: ------------------------ DATE ----------------------------&lt;br /&gt;
OFFICIAL USE ONLY&lt;br /&gt;
Verified by: --------------------------------- Confirmed by: ---------------------&lt;br /&gt;
&lt;br /&gt;
</description>
			<link>http://davemoats.com/blog/index.php/issec/2009/01/15/euro_million_lottery_award_2009_scam_ema#c3563</link>
		</item>
				<item>
			<title>In response to: Federal Reserve Bank System Administration Scam Email</title>
			<description>I assume the site/url was the page i was sent to access information about this scam.  Anyway, I got hit earlier today.  I tried copying and paste, cutting the address short, some of everything.  Like Dave, I should have known this email wasn't legit since i went directly to my spam or junk mail.  The site took me to a partial picture of a flag and then a porn site!!  I tried to respond back to the email sent and it came back undeliverable permanently failed.  Why is it people insist upon screwing with you.  Aren't times hard enough as it is to not have to worry about email scams too?</description>
			<link>http://davemoats.com/blog/index.php/issec/2009/01/31/federal_reserve_bank_system_administrati#c3538</link>
		</item>
				<item>
			<title>In response to: More Facebook Scam / Phishing Emails</title>
			<description>Tom,&lt;br /&gt;
&lt;br /&gt;
You are most welcome and I would appreciate the link from your site.&lt;br /&gt;
&lt;br /&gt;
Thanks,&lt;br /&gt;
Dave</description>
			<link>http://davemoats.com/blog/index.php/issec/2009/03/15/more_facebook_scam_phishing_emails#c3360</link>
		</item>
				<item>
			<title>In response to: More Facebook Scam / Phishing Emails</title>
			<description>Thanks for the recon, helps me in content blocking. Can I link you site to mine</description>
			<link>http://davemoats.com/blog/index.php/issec/2009/03/15/more_facebook_scam_phishing_emails#c3359</link>
		</item>
				<item>
			<title>In response to: Facebook Today (Striptease Dance Party) Scam Email</title>
			<description>Any time.....just trying to make sure no one gets a nasty surprise.&lt;br /&gt;
&lt;br /&gt;
Dave</description>
			<link>http://davemoats.com/blog/index.php/issec/2009/03/14/facebook_today_striptease_dance_party_sc#c3342</link>
		</item>
				<item>
			<title>In response to: Facebook Today (Striptease Dance Party) Scam Email</title>
			<description>Thx dave</description>
			<link>http://davemoats.com/blog/index.php/issec/2009/03/14/facebook_today_striptease_dance_party_sc#c3341</link>
		</item>
				<item>
			<title>In response to: Euro Million Lottery Award 2009 Scam Email</title>
			<description>Thanks for the additional email information.  The more versions we identify the more chance we have at stopping someone from getting scammed.&lt;br /&gt;
&lt;br /&gt;
Dave</description>
			<link>http://davemoats.com/blog/index.php/issec/2009/01/15/euro_million_lottery_award_2009_scam_ema#c3267</link>
		</item>
				<item>
			<title>In response to: Euro Million Lottery Award 2009 Scam Email</title>
			<description>Subject: You Are Winner 2009 !!! {Ref No.ES/037/11/06/MD}&lt;br /&gt;
&lt;br /&gt;
From: LOTTERY@euromilliones.org&gt;      Block User&lt;br /&gt;
&lt;br /&gt;
Date: Tue, 6 Jan 2009 07:33:32 +0100&lt;br /&gt;
&lt;br /&gt;
 &lt;br /&gt;
&lt;br /&gt;
Message:&lt;br /&gt;
&lt;br /&gt;
The Coordinator,&lt;br /&gt;
Euro Million Lottery International,&lt;br /&gt;
Paseo De La castellana15-89,&lt;br /&gt;
28008 Madrid.&lt;br /&gt;
Spain.&lt;br /&gt;
&lt;br /&gt;
YOUR E-MAIL ADDRESS WON EURO MILLION END OF YEAR LOTTERY.&lt;br /&gt;
&lt;br /&gt;
Sir/Madam,&lt;br /&gt;
&lt;br /&gt;
We congratulate you over your email success in our computer balloting (Sweepstakes) held on January 3rd, 2009. This is a Millennium Scientific Computer Game in which email addresses were used, your winning Ticket No is: 07-13-31.54-640, Ref No.ES/037/11/06/MD, Batch No: WNTO/7416/VA/ES and Serial No:MUOTI/82536. It is a promotional program aimed at encouraging internet users; therefore you do not need to buy ticket to enter for it. You have been approved for the star prize of &amp;#65533;1,000,000.00 (One Million Euros Only).&lt;br /&gt;
To claim your winning prize, you are to contact the appointed claim agent as soon as possible with your Name, Age, Nationality, Occupation and Telephone number for the immediate release of your winnings.&lt;br /&gt;
&lt;br /&gt;
Dr Jose Paul&lt;br /&gt;
LOTERIA CONFIANZA AGENCIA S.L.&lt;br /&gt;
Mario Cabre Sin Numero, 28016,&lt;br /&gt;
Madrid - Spain.&lt;br /&gt;
E-mails: loteria.confianza@gmail.com&lt;br /&gt;
&lt;br /&gt;
Tel: 0034687413988&lt;br /&gt;
&lt;br /&gt;
Note: You are advised to keep this winning very confidential until you receive your lump prize in your account or optional cheque issuance to you. This is a protective measure put in place to avoid people applying for your winning fund, as we have had cases like this before.&lt;br /&gt;
::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::&lt;br /&gt;
The information transmitted is intended only for the person or entity to whom it is addressed. Unauthorized use, disclosure or copying is strictly prohibited. The sender accepts no liability for the improper transmission of this communication nor for any delay in its receipt&lt;br /&gt;
&lt;br /&gt;
Regards,&lt;br /&gt;
Mrs. Helen Gomez&lt;br /&gt;
Lottery Coordinator.&lt;br /&gt;
&lt;br /&gt;
Send email on your phone with mig33. Go to www.mig33.com&lt;br /&gt;
</description>
			<link>http://davemoats.com/blog/index.php/issec/2009/01/15/euro_million_lottery_award_2009_scam_ema#c3266</link>
		</item>
				<item>
			<title>In response to: USNEWS update Virus Email</title>
			<description>The file from the website has been submitted to AVERT to see if it is a virus.  The initial review was inconclusive, meaning the file is not a known virus.  Now the file will be reviewed by an AVERT researcher to see if it may be something new.&lt;br /&gt;
&lt;br /&gt;
Dave</description>
			<link>http://davemoats.com/blog/index.php/issec/2009/02/04/usnews_update_virus_email#c3245</link>
		</item>
				<item>
			<title>In response to: Applebee's Hoax Spam</title>
			<description>You are most welcome.&lt;br /&gt;
&lt;br /&gt;
Dave</description>
			<link>http://davemoats.com/blog/index.php/issec/2006/11/06/applebee_s_hoax_spam#c3226</link>
		</item>
				<item>
			<title>In response to: Advan Group LTD Scam Email</title>
			<description>Good catch..and thanks for sending in the text of the email you received.  The more versions that are identified as scams / spam, the mor likely people will find the message they receive and not fall for something.&lt;br /&gt;
&lt;br /&gt;
Dave</description>
			<link>http://davemoats.com/blog/index.php/issec/2008/10/13/advan_group_ltd_scam_email#c3154</link>
		</item>
				<item>
			<title>In response to: Advan Group LTD Scam Email</title>
			<description>Here's the $4000 email offer I received :&lt;br /&gt;
&lt;br /&gt;
&quot;Tourist agency &quot;Advan Group&quot; has vacancy for position of &quot;Tour Manager&quot;. We received your CV from Employment Center so now we offer you opportunity to work for our company. It's not  a Spam and it's sent only to you as you've been chosen among many candidates.&lt;br /&gt;
&lt;br /&gt;
About us: &lt;br /&gt;
&lt;br /&gt;
&quot;Advan Group&quot; was founded in 2001 and Head office is located in Sweden. We are part of the best 10 tourist agencies in Europe. We have been working in USA since 2006. Please visit our web-site  for additional information.&lt;br /&gt;
&lt;br /&gt;
About Job: &lt;br /&gt;
&lt;br /&gt;
You will be official representative of our company in USA&lt;br /&gt;
&lt;br /&gt;
Your duty is  supporting our american clients during their tours around Europe. We don't require any special knowledge from you. Our manager will train you and will be happy to assist any time. We encourage our employees who carries out  responsibly in their work. Your monthly salary will be  4000 USD but in the future it will be increased. &lt;br /&gt;
&lt;br /&gt;
It's a part-time job you have to work only 3-4 hours daily. We'll provide you with career opportunity, after 3 months employment we review the results if our clients are pleased with your work your salary will be increased and you will be promoted. So your career will depend on how you cope with a task.&quot;&lt;br /&gt;
&lt;br /&gt;
Additional comment : The usual warning flags :  a non-company email address; grammar mistakes; no website address given despite referring to it&lt;br /&gt;
&lt;br /&gt;
</description>
			<link>http://davemoats.com/blog/index.php/issec/2008/10/13/advan_group_ltd_scam_email#c3152</link>
		</item>
				<item>
			<title>In response to: Advan Group LTD Scam Email</title>
			<description>They are probably using some type of auto-generation process that isn't quite fully baked yet.  The sites and emails are getting better, so everyone has to be extra vigilant when looking at messages and sites like this.&lt;br /&gt;
&lt;br /&gt;
Dave </description>
			<link>http://davemoats.com/blog/index.php/issec/2008/10/13/advan_group_ltd_scam_email#c3151</link>
		</item>
				<item>
			<title>In response to: Advan Group LTD Scam Email</title>
			<description>I just had one of these today.  The sender's address is from a dot-sg domain.  The salary here is up to $4000.&lt;br /&gt;
&lt;br /&gt;
The web site looks authentic, with photos of staff and a big building, allegedly in Goteborg.  The contact name/email in the text has a corresponding name on the staff page...but the email address there is different.  All the email addresses are a mish-mash of different but similarly spelled domains, none of which are real.   It's like whoever did this just got tired of making it look real.</description>
			<link>http://davemoats.com/blog/index.php/issec/2008/10/13/advan_group_ltd_scam_email#c3150</link>
		</item>
				<item>
			<title>In response to: Key Bank Phishing Email</title>
			<description>Hi Brian,&lt;br /&gt;
&lt;br /&gt;
Thanks for the kudos.....after looking at this one and the way the web page tried to get me to run and executable file, I was concerned that some folks out might get bit by this one.&lt;br /&gt;
&lt;br /&gt;
I hope everyone remembers that if you get an email like this and it doesn't look right and you do business with the company that supposed sent the email.  Contact the company using contact information not from the email or any link contained in the email.&lt;br /&gt;
&lt;br /&gt;
Dave</description>
			<link>http://davemoats.com/blog/index.php/issec/2008/10/15/key_bank_phishing_email#c3036</link>
		</item>
				<item>
			<title>In response to: Key Bank Phishing Email</title>
			<description>My email lists as the sending host:  159-56-20-190.adsl.terra.cl (159-56-20-190.adsl.terra.cl [190.20.56.159])&lt;br /&gt;
&lt;br /&gt;
I don't do business with key bank, so I thought it was scam to begin with.  Congrats on being the first (as far I see from a google search) to post on this.&lt;br /&gt;
&lt;br /&gt;
-Brian</description>
			<link>http://davemoats.com/blog/index.php/issec/2008/10/15/key_bank_phishing_email#c3035</link>
		</item>
				<item>
			<title>In response to: Another Version of the Lottery Scam Email</title>
			<description>I have a question, cause something pretty disappointing happened to me. We are a family and we rent rooms for travelers in Argentina. Some woman contacted me asking for a room. She claimed to be from the Uk but her english was really bad. She said they were going to make a deposit in advanced to save the room and they asked for the sae info as in this emails. I send her the info, but everything looked pretty suspicious as I started to ask info about her.  One day after I send her the info, I received this scam email in my account (which is brand new...there was no spam. I started too look a little bit in the web and I found out that the phone number she gave me (it&amp;#180;s busy all the time) it&amp;#180;s quite similar to the one in this scam, and the info she asked me it&amp;#180;s a copy paste form this email (without  the ticket stuff). Anyways,..it&amp;#180;s pretty disappointing cause we rent rooms for honest people and we have to deal with this freaks now. The question is, why would the need my name and address for?? They can get it  a the white pages!! Can anybody tell me why do these people does this? How do they get money out if this? Any motive? I&amp;#180;m rally curious about it...thanks!  </description>
			<link>http://davemoats.com/blog/index.php/issec/2008/02/03/another_version_of_the_lottery_scam_emai#c1914</link>
		</item>
				<item>
			<title>In response to: Another Version of the Lottery Scam Email</title>
			<description>In this day and age every time we get email messages that say we won something or need to update some financial information we have to do exactly what you did, look for more information. &lt;br /&gt;
&lt;br /&gt;
I am glad this information was able to help you avoid a scam.&lt;br /&gt;
&lt;br /&gt;
Continue keeping your guard up,&lt;br /&gt;
Dave&lt;br /&gt;
&lt;br /&gt;
</description>
			<link>http://davemoats.com/blog/index.php/issec/2008/02/03/another_version_of_the_lottery_scam_emai#c1560</link>
		</item>
			</channel>
</rss>
