SmartFeedSmartFeed          

Porsche Hangout


WELCOME - YOU ARE CURRENTLY VIEWING 419EATER AS A GUEST

By joining our community you will have the ability to post topics and access other forums reserved for members. Registration is quick, simple and absolutely free. Join our community today by clicking here.

ScamWarners.com - Internet Anti-Fraud Center - now open!


 Lets go Hunting

View next topic
View previous topic
 
Post new topicReply to topic
Author Message
Ruskes-Jadav
Hello I'm New here!


Joined: 15 Dec 2011
Posts: 5


PostPosted: Thu Dec 15, 2011 7:35 am Reply with quoteBack to top

Wells Fargo Phishing Email in my email (scarry it was actualy addressed to me!!)

[email protected] on behalf of; Wells Fargo Online [[email protected]]
Quote:
<http://yavaslar.com/images/wellsfargo/wellsfargo-online.php>

Dear Valued Client,
Account Access Notification

:



It has come to the notice of the online banking security team of Wells Fargo, that there have been multiple logons to your Wells Fargoonline banking accounts from numerous IPs.

We Have reason to believe that there has been unauthorised transactions in your account as of recent

We therefore will need you to verify this transactions by logging on to our online banking service and Confirm your security questions and answers you used to set up your account online

Wells Fargo Online Banking <http://www.hainanworld.ru/doc/dogfiz/wellsfargo-online.php>

If you experience any difficulty with the login process, please contact our Client Services Team on 800 219 7757 (local rates) or e-mail us at [email protected] <mailto:[email protected]> To help us to improve our service, we may record or monitor phone calls Sorry For the Inconvienence

Regards,
© 1999 - 2011 Wells Fargo. All rights reserved. NMLSR ID 399801

View user's profileSend private message
Ruskes-Jadav
Hello I'm New here!


Joined: 15 Dec 2011
Posts: 5


PostPosted: Thu Dec 15, 2011 7:42 am Reply with quoteBack to top

ipTRACKERonline.com wrote:
Header Analysis Quick Report<br>Originating IP: 41.155.74.116<br>Originating ISP: Starcomms Limited<br> City: Lagos<br>Country of Origin: Nigeria<br>* For a complete report on this email header goto ipTRACKERonline
View user's profileSend private message
Ruskes-Jadav
Hello I'm New here!


Joined: 15 Dec 2011
Posts: 5


PostPosted: Thu Dec 15, 2011 8:03 am Reply with quoteBack to top

I managed to download multiple .doc and .xlm from the server where the Wells Fargo phishing originated from.

I did not open the files since not sure my virus protection is adequate on this computer.

How do I attach those files to publish here ?

Don't - RC

Well, here is the url:
Redacted - RC
and all the sub folders so you can see for your self
View user's profileSend private message
N N N
Master of Master Baiters


Joined: 26 Sep 2008
Posts: 689


PostPosted: Thu Dec 15, 2011 8:32 am Reply with quoteBack to top

Ruskes-Jadav wrote:
I managed to download multiple .doc and .xlm from the server where the Wells Fargo phishing originated from.


You really ahould not do that. I'd suggest a thorough scan of your computer is in order.
View user's profileSend private message
Ruskes-Jadav
Hello I'm New here!


Joined: 15 Dec 2011
Posts: 5


PostPosted: Thu Dec 15, 2011 8:58 am Reply with quoteBack to top

Just saved on my harddrive
and uploaded to googledoc

https://docs.google.com/document/d/1g3vCKOGRJ8NA5vMGam87j1YUmluaVVIcL0x_0Y2-1RQ/edit
View user's profileSend private message
Ruskes-Jadav
Hello I'm New here!


Joined: 15 Dec 2011
Posts: 5


PostPosted: Thu Dec 15, 2011 9:14 am Reply with quoteBack to top

So I downloaded the documents from the server where the Phishing Wells Fargo site is.
Mostly they are .doc and some .xls
They are all in Russian ;(

Anyway
It looks like those documents are from a Travel Agency ?
Now the question is:
Is the travel agency just a fasade for the scamer,
or did the scamer hack in to the travel agency computer.

The travel agency:
Chinaworld!
Code:
www.chinaworld.ru
www.hainaworld.ru
View user's profileSend private message
Ruskes-Jadav
Hello I'm New here!


Joined: 15 Dec 2011
Posts: 5


PostPosted: Thu Dec 15, 2011 9:59 am Reply with quoteBack to top

Send an email to the businees woner of the Chinaworld.ru

Quote:
Hello Natalia

I have some urgent information for you:

I got an email from

[email protected]

with a link to your website

Code:
http://www.hainanworld.ru/doc/dogfiz/wellsfargo-online.php

http://www.hainanworld.ru/doc/dogfiz/

It shows a FAKE Wells Fargo (Bank) Log In site.

I suggest you immediately shut that phishing link on your server.

I have informed the authority (Police and internet crime department about this incident).

However, I believe you are just a victim of a hacker.

Since this is a very dangerous link, I will give you 2 hours from the time of this email, before taking more concrete actions against your business
.
View user's profileSend private message
Roycropper
Undead Moderator


Joined: 14 Nov 2005
Posts: 7993
Location: Luxury Coffin


PostPosted: Thu Dec 15, 2011 10:16 am Reply with quoteBack to top

This is not 'Surplus Scam Letters', so I have moved it to misc.

As bad as phishers are, don't go threatening possible ITP's, that's not the way to go about it. I disabled a couple of links, if users go clicking on links from here, we show up in their traffic logs.

Maybe our site killers can advise you.

_________________
the European Union has bounced on our freckles
COULD YOU IMAGINE WHAT HAPPENED WHEN I WENT TO THE BANK
our Agent is Completely broke, pocketless and stranded
I WLL SEND AN AFRICA WITCH TO ATTACH YOU BASTARD
You go die like bird
i started shouting HALLELUJAGOBBLE but none of them notice me immediately police arrested me due to the shouting
f*ck u asshole ur damn mother will loose ur fcuking skull brain ur brain is nothing to compare with rat f*ck ur u
MY FRIEND ALEX WAS DETAINED IN POLICE STATION
I am not happy due to the question i answered at money office. Let me tell you do not play with me ok.
Pith Helmet 10
x4 United Kingdom New Zealand Mortar Closed lad accounts Sand Timer 6Yrs Tattoo x6 Flying Monkey
View user's profileSend private message
Ruskes-Jadav
Hello I'm New here!


Joined: 15 Dec 2011
Posts: 5


PostPosted: Thu Dec 15, 2011 10:45 am Reply with quoteBack to top

Still learning where is the right place to post in here !!

So, I have to use the "Code" to disable the hot links!

I gave the owner of the website a chance to delete the Phishing content,
but i also reported it to Wells Fargo.
Lots of inocent people will loose lots of money if they give out they Wells Fargo Log In information to those crocks.
View user's profileSend private message
Display posts from previous:      
Post new topicReply to topic


 Jump to:   



View next topic
View previous topic
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum



** Find out information about your IP address **


All Content © 2003 - 419Eater.com
Powered by phpBB © 2001, 2002 phpBB Group :S5: FI Theme :: All times are GMT