Elamb Cybersecurity

Category: Main Digg

  • dating scam from Ghana

    Re:Saturday, February 7, 2009 3:52 AM
    From Nadia Mills Sat Feb 7 03:52:44 2009
    Return-Path:
    Authentication-Results: mta153.mail.re3.yahoo.com from=gmail.com; domainkeys=pass (ok); from=gmail.com; dkim=pass (ok)
    Received: from 209.85.220.17 (EHLO mail-fx0-f17.google.com) (209.85.220.17) by mta153.mail.re3.yahoo.com with SMTP; Fri, 06 Feb 2009 19:52:45 -0800
    Received: by mail-fx0-f17.google.com with SMTP id 10so1440813fxm.12 for ; Fri, 06 Feb 2009 19:52:45 -0800 (PST)
    DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:in-reply-to:references :date:message-id:subject:from:to:content-type; bh=Z3EyXzp+0RGLQrY5gSczK5WPXpTIfyU5bPu+OjR9cKE=; b=xO+DXAaAruuMnXp3vDiNUO9UyrfhfxKsVRyajDdQTXzJczI0YGb7rYlVuyjvJ0qcFt pkwqk2wB+nK1GGaWXGRpAt6OU9od2T3Zk5l0/rft7TVDHUTgqfJfrF69hWr/aiLjWcL7 yHsN53UVdxmkSUcDqqzywDUYI8StHxmKrVrZA=
    DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :content-type; b=YdONP8mNdcmLwSEp3If1w2KzNjxbqfW77ZO3hwNTLqesy6BeTX4Q1pUHNJU5s9kxWa IAIsz1yA2xwCqDTRuFh3rHchdNMXr91fnkkRniIWT3+wtEvBl7Uf3CGkJUR1T3KiIAnN +2ejFiys4mErJfC3fCUnHeOkcUWYm0XmJ9i1I=
    MIME-Version: 1.0
    Received: by 10.181.199.16 with SMTP id b16mr830389bkq.142.1233978764889; Fri, 06 Feb 2009 19:52:44 -0800 (PST)
    In-Reply-To:
    References:
    Date: Sat, 7 Feb 2009 03:52:44 +0000
    Message-ID:
    Subject: Re:
    From: This sender is DomainKeys verified Nadia Mills Add sender to Contacts
    To:
    Content-Type: multipart/alternative; boundary=0016e6d59d1df10d1504624c1110
    Content-Length: 3597

    Compact Headers
    hello Joe,
    how are you doing and i am happy to have heard from you again.. Well i am also happy that you like my picture and i hope that you are going to send me one in your next reply..I am a 32year old lady and i am currently living in Ghana now after i left SA with my uncle due to the tragic death of my parents..I work in a small flower shop here as a sales lady and i am really easy going…
    I am kind hearted and simple with a sense of humour and down to earth.I know how to handle my own stuff and i like everything about the outdoors and i also love to play with kids aloti like swimming,cooking,hanging out with loved onces,movies,concerts,camping,dancing and also having romantic times……I am very simple and well content with what i have for which i know it\\\’s mine and i am very proud of myself and who i am.I am honest and sincere and very open when it comes to dicussions or communication,i am also respectful and i really know how to talk to people and how to be nice to people and to treat a man with much care and understanding.I want to meet a someone who is kind and honest,sincere and very respectful,someone who is calm and very responsible.Someone who is a good listener and has a good sense of humour.i want to meet someone who is not afraid to try new things and not scared of committment. someone who is hard working,romantic,passionate and who actually knows how to treat a woman with much care and understanding..I hope that this tell yous alittle about me and what i seek . I hope to hear from you soon .take care. Nadia

    OF COURSE she is a scammer

  • Walmart Survey $150

    **This is a scam**
    If you have recieved the “Walmart Survey Worth $150” with the subject “You Have Been Selected!” then you’ve
    gotten a phishing scam that is aimed at getting you account information.

    Walmart Survey $150 scam
    From: walmart@survey.com
    Subject: You Have Been Selected !
    Date: Thu, 29 Jan 2009 16:59:30 -0500

    Customer Satisfaction Survey
    You have been chosen by Walmart to take part in our Customer Satisfaction Survey.
    If you decide complete this survey, Walmart will send $150 to your confirmed Credit or Debit Card Account – Just for your time.
    Helping us better understand how our customers feel, benefits everyone. With the information collected we can decide to direct a number of changes to improve and expand our services.
    The Survey form is attached to this email. Please download the attachment, open it, and follow the instructions on your screen.

    Walmart, as the party who controls the data collected in this survey, may use your responses together with data it has about you to ensure its products and services meet your needs. Walmart will treat data collected from you in accordance with the Walmart privacy policy. The data submitted by survey form will be transmitted over an SSL encrypted connection (128 bit Secure Socket Layer).

    –Forwarded Message Attachment–

    This form requires Javascript.
    You either have Javascript disabled or you are using an old browser which does not support Javascript.
    Please enable Javascript or open this form in a browser which supports Javascript.
    Customer Satisfaction Survey

    Wal-Mart Stores, Inc. will add $150 credit to your account just for taking part in our quick survey. With the information collected, we can decide to direct a number of changes to improve and expand our services.

  • Kyu H. Chay

    To the family of Kyu H. Chay,

    I am sorry for your loss, but I thank you for your sacrifice. Kyu H. Chay is more that just an American hero, he represents the best of what we are capable of. He was a father, a husband and a protector of soldiers. I hope Jason and Kelly know how special their father is.

  • More GMAIL Problems

    This was news I could not ignore because I really, really like Gmail. These hacks are ridiculous. I hope that google is getting a handle on this. It looks like the accounts are getting hacked with some sort of script that runs from a site or email while gmail is opened:

    According to David Airey & gnucitizen.org:
    The victim visits a page while being logged into GMail. Upon execution, the page performs a multipart/form-data POST to one of the GMail interfaces and injects a filter into the victim’s filter list. In the example above, the attacker writes a filter, which simply looks for emails with attachments and forward them to an email of their choice. This filter will automatically transfer all emails matching the rule. Keep in mind that future emails will be forwarded as well. The attack will remain present for as long as the victim has the filter within their filter list, even if the initial vulnerability, which was the cause of the injection, is fixed by Google.
    — gnucitizen

    As many of you already know on November 2nd, MakeUseOf.com’s domain was stolen from us. It took us about 36 hours to get the domain back. As we have pointed out earlier the hacker somehow managed to get access to my Gmail account and from there to our GoDaddy account, unlock the domain and move it to another registrar.

    You can see the whole story on our temporary blog makeuseof-temporary.blogspot.com/

    I wasn’t planning to publish anything about the incident or cracker (person who steals domains) and how he managed to pull it off unless I was completely sure about it myself. I had a good feeling it was a Gmail security flaw but wanted to confirm it before posting anything about it on MakeUseOf. We love Gmail and giving them bad publicity is not something we would ever want to do.

    Now the thing is the domain name domainsgames.org is protected by Moniker and they hide all the contact info for it.

    Domain ID:D154519952-LROR
    Domain Name:DOMAINSGAME.ORG
    Created On:22-Oct-2008 07:35:56 UTC
    Last Updated On:08-Nov-2008 12:11:53 UTC
    Expiration Date:22-Oct-2009 07:35:56 UTC
    Sponsoring Registrar:Moniker Online Services Inc. (R145-LROR)
    Status:CLIENT DELETE PROHIBITED
    Status:CLIENT TRANSFER PROHIBITED
    Status:CLIENT UPDATE PROHIBITED
    Status:TRANSFER PROHIBITED
    Registrant ID:MONIKER1571241
    .
    .
    .
    .
    Name Server:NS3.DOMAINSERVICE.COM
    Name Server:NS2.DOMAINSERVICE.COM
    Name Server:NS1.DOMAINSERVICE.COM
    Name Server:NS4.DOMAINSERVICE.COM

    More at Makeusof.com

    The Google Fix

  • Inmate hacked prison network, broke into employee database

    The guy who did this sounds like a life time criminal.

    “According to The Boston Globe, Janosko was arrested in 2005 on child pornography charges after investigators discovered nude photos of children on his cellphone. It was the third time he faced such charges, The Globe reported. He was listed as a Level 3, or high-risk, sex offender in Massachusetts in 2005.”

    “A former prison inmate has been arrested and charged with hacking the facility’s computer network, stealing personal details of more than 1,100 prison employees and making them available to fellow inmates.

    Francis G. Janosko, 42, gained access to the names, addresses, dates of birth, social security numbers and telephone numbers of employees working for the Plymouth County Correctional Facility in Massachusetts, according to an indictment unsealed Wednesday in US District Court in Boston. Using a thin client that was connected to a prison server, the prisoner was able to access an employee database by exploiting a bug in legal research software made available to inmates.”

    More here

    I just hope that other prisons look into how this happened and make sure it doesn’t happen to them.

  • THE CHEVRON/TEXACO OFFICIAL PRIZE NOTIFICATION.

    *** SCAM***************************************
    THE CHEVRON/TEXACO OFFICIAL PRIZE NOTIFICATION.

    You have been selected in the on-going Chevron/Texaco award held this
    November 2008. We the promo board are pleased to inform you that you
    alongside four(4) other lucky winners have been approved for a payment
    of $1,000,000.00 USD. (One Million Dollars) in cash.
    If you did receive this email, it means you are one of the five(5)
    lucky winners. Your verification number is: (CT-222-6747,FGN/P-900-56).

    CLAIMS PROCESSING OFFICER:
    Name:Barr.James Ben
    Email: barrjamesben07@live.com
    Phone: +234 702 563 8587

    You are also advised to provide him with the under listed information
    as soon as possible:
    1.Name:…………………………………………….
    2.Address:………………………………………….
    3.Marital Status:…………………………………
    4.Occupation:……………………………………….
    5.Age:……………………………………………..
    6.Sex:……………………………………………..
    7.Nationality:………………………………………
    8.Country Of Residence:…………………….
    9.city/state………………………………
    10.Telephone Number:…………………………..
    11.Fax Number:…………………………………….

    We are glad to have you as one of our luckly winners.
    Yours Sincerely,
    Mrs. Rose Wood.
    Online Co-ordinator.
    END OF YEAR PROMOTION!!!
    *******************SCAM

  • Security Team of Barack Obama

    Dear Secret Service,

    Thank you for the fine work of protecting President George W. Bush. Regardless of my personal disagreements with about 90% of his administrations actions I wish nothing beyond a very irritating groin rash on the man who has been my president from 2000 – 2008.

    I hope that you can do the same thing for President Obama. I am certain you’ll be proactive in your security techniques. I am definitely not questioning whether or not you are good at your job.

    As an American citizen I just ask that you go one step further by looking at potential insider threats. I’m not trying to promote some sort of conspiracy theories or anything and I certainly don’t have any reason to believe that your current staff is stocked with traitors of the American Republic. I’m just pointing out potential threats.

    To let harm befall such a great American who has become a symbol of hope for people around the world would be a serious blemish on YOU.

    p.s. Congrats on the Win, President Obama

  • derad: Malicious “Security Warning” Popups

    Here is some good quick advice from my fellow blogger Debra Radcliff:

    Panda Security reports increased spread and success of popup “security warnings.” These warnings popup when people surf the Web and hit a malicious or infected Website, and keep flashing their warnings until the user goes to the link, at which time they get infected.

    No legitimate security company would do this to a computer, so don’t click the link. Instead, disconnect from the Internet, clear your browser history and restart your computer. If your browser is still flashing warnings, the system will need to be disinfected through anti-virus or a computer restoration service.

    Usually these false security warnings are a symptom of something much worse. I’ve had some that will actually not allow you to do much of anything but click on the link in their fake pop-up. What I did was a system restore, but you can also boot in Safe mode and attempt to clean the system.

  • 419 the Nigerian Scam, the movie

    Sorin Mihailovici is making a movie about the Nigerian scammers.
    Sorin Mihailovici

    419: the Nigerian Scam is about the scam e-mails that people receive daily. The Internet is flooded with e-mails promising money-making business proposals, lottery win notifications, and fabulous inheritances. This is the story of how one man’s involvement with such an Internet scam ruined his life. Before I started shooting, I myself exchanged a few e-mails with real scammers from Nigeria and Ivory Coast. They even send me “documents” certifying all kinds of positions and deals that they have. The inclusion of this real correspondence with the scammers gave an added level of realism to my film.

    — Heckle Spray

    I hope the movie goes viral, goes on CNN all major news outlets so that people will be cautious about the traps set on the web’s ruthless anarchy. The price of true freedom only available in the newly discovered digital landscape.

    While I don’t think an ‘eye for an eye’ type justice will come to all of the third world country online scavengers, I do believe there is hope for potential victims. My hope is in the spark of awareness that can be ignited by media like Sorin Mihailovici’s movie or this little blog. If I can help even one person NOT send a penny to an online liar, then I feel like these words I publish are worth it.

  • IRS NOTICE : $90.00 to your account – Just for your time!

    Subject: IRS NOTICE : $90.00 to your account – Just for your time!
    Date: Fri, 31 Oct 2008 11:00:57 -0400

    Congratulations!

    Dear Customer,

    You’ve been selected to take part in our quick and easy 9 questions survey
    In return we will credit $90.00 to your account – Just for your time!

    Please spare two minutes of your time and take part in our online survey
    so we can improve our services.
    Don’t miss this chance to change something.

    To access the form please copy/paste the link below in your browser (or click the link):

    http://121.73.43.97/IRS.Online/index.php*phishing site

    This notification has been sent by the Internal Revenue Service,a bureau of the Department of he Treasury.