Advance Fee Fraud: Ms. Kimaeva Lioudmila

This isn't the first time we've seen the name of Mikhail Khodorkovsky invoked in a 419 fraud. This one was addressed to the contact address for this blog, and was received from 66.219.103.122 on Fri, 05 Aug 2005 04:29:53 -0000. It's not entirely clear whether this was a webmail exploit or something else.

 I am Ms.KIMAEVA LIOUDMILA personal secretary to
Mikhail Khodorkovsky the richest man in Russia and
owner of the following companies: Chairman CEO: YUKOS OIL (a
Russian oil company) and
Menatep SBP Bank (A reputable financial institution)
who got arrested for his involvement in politics in
financing opposition political parties (the Union of Right
Forces, led by Boris Nemtsov, and Yabloko, a liberal/social
democratic party led by Gregor Yavlinsky) which poses a
treat to President Vladimir Putin second tenure as
Russian president.
More information are available on:
http://news.bbc.co.uk/1/hi/business/3213505.stm and
http://newsfromrussia.com/main/2003/11/13/51215.html.
I got your contact in my search for a reliable and
trustworthy entity who could handle this confidential
transaction.
You will be entitled to 30% of the sum once everything gets
concluded. Please take this seriously as it is not a hoax.
All I need from you is to stand as a beneficiary to the
funds in one of his accounts that has not yet been
discovered by the authorities.
The account holds the sum of 50.2 million dollars($50.2m).
All modalities necessary for the successful transfer of this
money have been worked out and I wish to relocate out of
here quietly once we are through.
Please if you are interested, provide your details such as
full name, business name, if you have a business and
telphone number so that we can commence immediately. The
transaction has to be concluded in 2 weeks As soon as I get
your willingness to comply through
my most private email address( kmila1@myway.com ]
I will give you more details.

Regards,
Ms.KIMAEVA LIOUDMILA

Advance Fee Fraud: Jacob Moboyo

This is a plain 419, notable only for the fact that it was sent to my legacy address rather than the usual approach of web-scraping. Also, it arrived twice. Both instances came from 196.39.9.66 (in Africa), one on Thu, 04 Aug 2005 22:56:10 +0000, the other on Thu, 04 Aug 2005 23:51:26 +0000.

From Mr. Jacob Moboyo.
Telephone + 27 72 135 8631.

Greetings,

My name is Jacob Moboyo, the elder son of Mr. Tami Moboyo of Zimbabwe.
This might be a surprise to you about where I got your contact address. I got your address from the South African Chamber of Commerce in Johannesburg, South Africa.

During the current war against the farmers in Zimbabwe
from the supports of our President Robert Mugabe to
claim all the white-owned farms to his party members
and his followers, he ordered all white farmers to
surrender all farms to his party members and his
followers.

My father is One of the best farmers in our country
and because he did not support Mugabes ideas,Mugabes
supports invaded my fathers farm and burnt everything
in the farm,killing my father and made away with a lot
of items in my fathers farm.

Before his death, my father had deposited with of the
Security Company in Johannesburg, South Africa the sum
of US$25,5 MILLION (TWENTY FIVE MILLION FIVE HUNDERD
THOUSAND UNITED STATES DOLLARS). After the death of my
father, we decided to move to the Republic of South
Africa where he had deposited the money in the
Security Company as valuables.

So I decided to contact overseas firm or a private Individual
that will assist me to move this money out of South Africa because
as asylum seekers we are not allowed to operate any Bank Account within South Africa.
We have agreed to offer you 25% of the total sum for your assistance, while 75% will
be for me and my family to invest in your country.

You can reach my Mother on this number but please note that she does not speak much of English.please do email us through the below email address.

Tel+ 27 72 135 8631
jacobmoboyo@zwallet.com

Thanks and God bless.

Best Regards
Mr. Jacob Moboyo.

Advance Fee Fraud: Thomas Graham

Here is one common or garden variety 419 scam, telling lies about otherwise true stories in order to lend itself credibility. As is common with 419s of late, this message was sent through a poorly configured webmail system, this time at www.MyFamily.com. Hint to webmasters: the Internet is an unfriendly place, and having your site exploited by miscreants such as this is bad for your reputation, so be careful out there. The shamed IP address in this case is 66.43.25.158.

From The Desk of: Thomas Graham
Head of Trustee and Depository
Institutional Fund Services.
HSBC Bank Plc 24th Floor
8 Canada Square
London E14 5hq.
3rd Of Aug 2005.

   Compliment to you and your family.

 DearSir,

 I am Thomas Graham the Head of Trustee and Depository Institutional
 Fund Services HSBC Bank Plc London. I am writing following an opportunity
 in my office that will be of immense benefit to both of us.
 In my department we discovered an abandoned sum of 14.5million
 British Pounds Sterling (Fourteen million five hundred thousand British
 Pounds) in an account that belongs to one of our foreign customers Late
 Mr. Morris Thompson an American who unfortunately lost his life in the
 plane crash of Alaska Airlines Flight 261 which crashed on January 31
 2000, including his wife and only daughter. You shall read more about
 the crash on visiting this site.
 http://www.cnn.com/2000/US/02/01/alaska.airlines.list/ and
 http://www.nativefederation.org/history/people/mThompson.htm
l
 Since we got information about his death, we have been expecting his
 next of kin or relatives to come over and claim his money because we
 cannot release it unless somebody applies for it as next of kin or 
 relation
 to the deceased as indicated in our banking guidelines. Unfortunately I
 learnt that his supposed next of kin being his only daughter died along
 with him in the plane crash leaving nobody with the knowledge of this
 fund behind for the claim. It is therefore upon this discovery that I
 and two other officials in this department now decided to make   business
 with you and release the money to you as the next of kin or
 beneficiary of the funds for safety keeping and subsequent disbursement 
 since
 nobody is coming for it and we don't want this money to go back into
 Government treasury   as unclaimed bill.
 The banking law and guidelines here stipulates that such money
 remained after five years the money will be transferred into banking
 treasury as unclaimed funds.

 We agreed that 30% of this money will be for you as foreign partner,
 while the balance will be for me and my colleagues.
 I will visit your country for the disbursement according to the
 percentages indicated above once this money gets into your account. 
 Please  be honest to me and trust is our watchword in this transaction.
 Note this transaction is confidential and risk free.   As soon as you
receive this mail you should contact me by return mail.

Please   all necessary arrangement for the smooth release of these funds
to you has been finalised. We will discuss much in details when I do receive
your response.Please in your response include your telephone number for easy
communication between us.
Best regards,

 Mr. Thomas Graham


_____________________________________________________________________
Get your own family web site at www.MyFamily.com!

Pump and Dump: Odds and Ends

There have been a few seen-it-all-before type pump and dumps arrive in the last few days. I won't bother with full text or linking to all past instances -- just a quick summary of stocks and sources. The PSIV and EDEX were sent to "address X", and the PGCN to my legacy address.

Stock	IP Address	Date Received
PSIV	82.230.217.89	Fri, 29 Jul 2005 01:41:40 -0000
PGCN	61.207.157.134	Fri, 29 Jul 2005 03:44:14 +0000
PSIV	60.10.84.159	Fri, 29 Jul 2005 04:37:54 -0000
EDEX	218.23.66.95	Sat, 30 Jul 2005 19:48:32 -0000
EDEX	208.199.20.196	Sun, 31 Jul 2005 17:12:14 -0000
PGCN	210.213.224.9	Mon, 01 Aug 2005 01:24:30 +0000

Advance Fee Fraud: Philip Eze

For the record, one common or garden variety 419 sent to the blog's contact address, received from 203.200.89.200 on Mon, 01 Aug 2005 10:39:14 -0000. The source address is in India, according to WHOIS, and it's the only IP address listed in the headers. There are no obvious signs as to whether this was injected from a webmail system (typical 419 modus operandi at the moment) or not, but the evidence is at least compatible with that theory.

I am Mr PHILIP EZE
secratary to the operation manager
Equity Trust  Bank,Lagos, Nigeria.

ATTN SIR 

I have urgent and very confidential business proposition for you. On 
June 6, 2000, 
a Foreign Oil consultant/contractor with the Nigerian National 
Petroleum Corporation, 
Mr.Barry Kelly made a numbered time (Fixed) Deposit for twelve calendar 
months, 
valued at US$26,500,000.00, (Twenty-six Million, five hundred thousand 
Dollars) 
in my branch.

Upon maturity, my boss sent a routine notification to his forwarding 
address but got 
no reply. After a month,we sent a reminder and finally we discovered 
from his contract 
employers, the Nigerian National Petroleum Corporation that Mr. Barry 
Kelly died from 
an automobile accident. On further investigation, we found out that he 
died without 
making a WILL, and all attempts to trace his next of kin was fruitless. 
The bank 
therefore made further investigation and discovered that Mr. Barry 
Kelly did not 
declare any kin or relations in all his official documents, including 
his Bank Deposit 
paperwork in my Bank. No one will ever come forward to claim it. 
According to Nigerian 
Law, at the expiration of 5 (five) years, the money willrevert to the 
ownership of the 
Nigerian Government if nobody applies to claim the fund.


Consequently, my proposal is that I will like you as an Foreigner to 
stand as next of 
kin to late Mr.Barry Kelly so that the fund US$26,500,000.00 will be 
released and paid 
into your account as the next of kin. I have All documents and proves 
to enable get 
this fund has been carefully worked out by me because of my position as 
the secratary 
to the operation manager .So if you are interested in this deal, 
quickly furnish me 
with your full names as it will appear in the claims doccuments to the 
bank, your full 
address, telephone and fax number. I am writing you because I as a 
public servant
(Junior staff with the bank),i cannot operate a foreign account or have 
an account 
that is more than $200,000.00 USD.

The money will be moved out for us to share in the ratio of 50% for me 
30% for you, 
10% for all expensis and 10% for orphanage After getting this fund 
accross to you, 
i intend to invest my share of this fund in your country, under your 
supervission as 
i can not take them all to my country.If you are interested, please 
reply immediately 
via my email address . 

Upon your response, I shall then provide you with more details and 
relevant documents 
that will help you understand the transaction. Please observe utmost 
confidentiality, 
and rest assured that this transaction would be most profitable for 
both of us because 
I shall require your assistance to invest my share in your 
country.(Buying of properties 
like houses, hotels etc) 

Please do send me your private/mobile telephone fax number so that we 
can have a smooth 
communication.

Awaiting your urgent reply 

Thanks and regards.
PHILIP   EZE