Thanks. Already reported them -- plus notified Google of their GMAIL address 
that was being used too.

Jon

Tom wrote:
Just report them

http://help.yahoo.com/fast/help/us/groups/cgi_abuse

Tom

At 12:36 PM -0500 2/23/08, Jon R. Kibler wrote:
Hi,

I have suddenly started to receive either invitations
to join Yahoo Groups or 'confirm join request' emails
for groups I have never even heard of, not less have an
interested in. I have looked at the emails and do not
see anything obvious that indicated phishing (example
attached).

Is this some new phishing scheme? If so, how does it work?

If not phishing, what is it?

THANKS!
Jon Kibler
--
Jon R. Kibler
Chief Technical Officer
Advanced Systems Engineering Technology, Inc.
Charleston, SC  USA
o: 843-849-8214
m: 843-224-2494

Received: from mail.trustem.net (trustem01.asetgate.aset.com [10.5.2.101]) port 46267
    by aset.com (security/secret) with ESMTP id m1N7EExg002417
for <[EMAIL PROTECTED]>; Sat, 23 Feb 2008 02:14:14 -0500 (EST) Received: from n10c.bullet.sp1.yahoo.com (n10c.bullet.sp1.yahoo.com [69.147.64.105])
    by mail.trustem.net (security/secret) with SMTP id m1N7E6UN016348
    for <[EMAIL PROTECTED]>; Sat, 23 Feb 2008 02:14:13 -0500 (EST)
X-Envelope-Sender: [EMAIL PROTECTED]
Comment: DomainKeys? See http://antispam.yahoo.com/domainkeys
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=lima; d=yahoogroups.com;

b=cRaZ+NWIfBtvHJckI2gmUSCPjaDBQbEjlFdTYzObldTxD3MdOTNFcJ2cCpp37dTzjwdzSs5PZDKoRor283psbG+K9eO4ai5zKETC9xDP0e623oDpx+ndbBnFBtIVXZo3; Received: from [216.252.122.219] by n10.bullet.sp1.yahoo.com with NNFMP; 23 Feb 2008 07:13:59 -0000 Received: from [209.73.164.83] by t4.bullet.sp1.yahoo.com with NNFMP; 23 Feb 2008 07:13:59 -0000 Received: from [66.218.67.201] by t7.bullet.scd.yahoo.com with NNFMP; 23 Feb 2008 07:13:59 -0000
Date: 23 Feb 2008 07:13:58 -0000
Message-ID: <[EMAIL PROTECTED]>
X-Yahoo-Newman-Property: groups-invite
MIME-Version: 1.0
From: Money_for_Life_08 moderator <[EMAIL PROTECTED]> Reply-To: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: Yahoo! Groups: You're invited! Join Money_for_Life_08 today. Content-Type: multipart/alternative; boundary="-----001230554100296113360027399089"
X-Virus-Scanned: by http://www.trustem.com/ using ClamAV
Content-Length: 15708

This is a multi-part message in MIME format...

-------001230554100296113360027399089
Content-Type: text/plain
Content-Transfer-Encoding: 7bit
Content-Disposition: inline


[EMAIL PROTECTED] has invited you to join Money_for_Life_08 [http://groups.yahoo.com/group/Money_for_Life_08/] on Yahoo! Groups, the best way to discover and share information and advice with others. All for free.

A personal invitation from [EMAIL PROTECTED]:

Hello Opportunity Seeker,

Working at home is something I've always dreamed of. I just couldn't take the stress of doing two jobs just to make ends meet. I'm glad I found this revolutionary global opportunity. After a couple of months of using their systems and techniques I'm pleased to say I'm making a nice steady income with just my computer.
This really great opportunity for everyone.

Visit How it works
http://www.clickaudit.com/goto/?94860
http://www.clickaudit.com/goto/?94860


To your massive success;
Magge Wilson
GlobalBuilderCash

--------------------------------------
You are receiving this message because you have either signed up to receive information from us or a third-party. To be cleared from our records, reply to this e-mail. Subject Line "UNSUBSCRIBE" mailto:[EMAIL PROTECTED]
--------------------------------------


See for yourself why millions of people are members of Yahoo! Groups. But
hurry.  This invitation expires in 30 days.


Join this group:
http://groups.yahoo.com/i?i=3bHm4I8h9cDMpz13Pq--pjvaQIk&e=jon%2Ekibler%40aset%2Ecom

------------------------------------------------------------------------
Yahoo! Groups is a free service that allows you to stay in touch with friends and family or meet new people who share your interests. Yahoo! Groups values your privacy. It is a violation of our service rules for Groups members to abuse this invitation feature. If you feel this has happened, please notify us:
http://help.yahoo.com/fast/help/us/groups/cgi_abuse

You may also change your email preferences to stop receiving group invitations in the future. To do so, please go here: http://groups.yahoo.com/s?tag=10B2ofYwqnhcBMKrSj3JMyt0GClwl_S2MMG0AOGQgtJlI_nYdxdP-JDB6yaNwV8gAT3mg6dYYjVI

Your use of Yahoo! Groups is subject to:
http://docs.yahoo.com/info/terms/





==================================================
Filtered by: TRUSTEM.COM's Email Filtering Service
http://www.trustem.com/
No Spam. No Viruses. Just Good Clean Email.


-------001230554100296113360027399089
Content-Type: multipart/related; boundary="----------=_1203750854-19931-487"
Content-Transfer-Encoding: binary
MIME-Version: 1.0
X-Mailer: MIME-tools 5.411 (Entity 5.404)

This is a multi-part message in MIME format...

------------=_1203750854-19931-487
Content-Type: text/html
Content-Transfer-Encoding: 7bit
Content-Disposition: inline


<html>
<body bgcolor="#FFFFFF">
<a href="http://groups.yahoo.com";><img src="http://us.i1.yimg.com/us.yimg.com/i/yg/img/logo/yg3.gif"; width="233" height="33 alt="Yahoo! Groups" border="0"></a><br> <table width="100%" cellpadding="0" cellspacing="0" border="0" align="center" bgcolor="white">
    <tr>
<td background="cid:wnw.1203750838.1046.54914.w105@yahoogroups.com" width="3" height="3"></td> <td colspan="5" background="cid:wtp.1203750838.1046.54914.w105@yahoogroups.com" height="3"></td> <td background="cid:wne.1203750838.1046.54914.w105@yahoogroups.com" width="3" height="3"></td>
    </tr>

        <tr>
<td background="cid:wlt.1203750838.1046.54914.w105@yahoogroups.com"></td>
      <td></td>
      <td colspan="3" height="10"></td>
      <td></td>
<td background="cid:wrt.1203750838.1046.54914.w105@yahoogroups.com"></td>
    </tr>
    <tr>
<td background="cid:wlt.1203750838.1046.54914.w105@yahoogroups.com"></td>
      <td></td>
      <td colspan="3">
<table width="100%" cellpadding="0" cellspacing="0" border="0"><tr> <td align="left"><font size="-2" face="Verdana">This invitation expires in 30 days.</font></td> <td align="right"><font size="-2" face="Verdana">Saturday, 23 February 2008 - 7:13 AM UTC</font></td>
                  </tr></table>
      </td>
      <td></td>
<td background="cid:wrt.1203750838.1046.54914.w105@yahoogroups.com"></td>
    </tr>
    <tr>
<td background="cid:wlt.1203750838.1046.54914.w105@yahoogroups.com"></td>
      <td></td>
      <td colspan="3" height="10"></td>
      <td></td>
<td background="cid:wrt.1203750838.1046.54914.w105@yahoogroups.com"></td>
    </tr>
    <tr>
<td background="cid:wlt.1203750838.1046.54914.w105@yahoogroups.com"></td>
      <td></td>
      <td colspan="3" height="1" bgcolor="#E0E6F0"></td>
      <td></td>
<td background="cid:wrt.1203750838.1046.54914.w105@yahoogroups.com"></td>
    </tr>
       <tr>
<td background="cid:wlt.1203750838.1046.54914.w105@yahoogroups.com"></td>
      <td colspan="5" height="10"></td>
<td background="cid:wrt.1203750838.1046.54914.w105@yahoogroups.com"></td>
    </tr>
       <tr>
<td background="cid:wlt.1203750838.1046.54914.w105@yahoogroups.com"></td>
      <td width="10"></td>
<td colspan="3"><font size="4" color="#628C2A" face="Arial">[EMAIL PROTECTED] has invited you to join the <b>Money_for_Life_08</b> group!</font></td>
      <td width="10"></td>
<td background="cid:wrt.1203750838.1046.54914.w105@yahoogroups.com"></td>
    </tr>
    <tr>
<td background="cid:wlt.1203750838.1046.54914.w105@yahoogroups.com"></td>
      <td width="10"></td>
      <td colspan="3">
        <table width="100%" cellpadding="10" cellspacing="0" border="0">
          <tr>
            <td>
<table width="100%" cellpadding="0" cellspacing="0" border="0" align="center">
                <tr>
<td background="cid:wnw.1203750838.1046.54914.w105@yahoogroups.com" width="3" height="3"></td> <td colspan="3" background="cid:wtp.1203750838.1046.54914.w105@yahoogroups.com" height="3"></td> <td background="cid:wne.1203750838.1046.54914.w105@yahoogroups.com" width="3" height="3"></td>
                </tr>
                <tr>
<td background="cid:wlt.1203750838.1046.54914.w105@yahoogroups.com"></td>
                  <td colspan="3" height="10"></td>
<td background="cid:wrt.1203750838.1046.54914.w105@yahoogroups.com"></td>
                </tr>
                <tr>
<td background="cid:wlt.1203750838.1046.54914.w105@yahoogroups.com"></td>
                  <td width="10"></td>
                  <td>
                  <font size="2" face="Arial">
                    Hello Opportunity Seeker,<br>
<br>
Working at home is something I've always dreamed of. <br>
I just couldn't take the stress of doing two <br>
jobs just to make ends meet. I'm glad I found this <br>
revolutionary global opportunity. <br>
After a couple of months of using their <br>
systems and techniques I'm pleased to say <br>
I'm making a nice steady income with <br>
just my computer. <br>
<br>
This really great opportunity for everyone.<br>
<br>
Visit How it works<br>
http://www.clickaudit.com/goto/?94860<br>
http://www.clickaudit.com/goto/?94860<br>
<br>
<br>
To your massive success;<br>
Magge Wilson<br>
GlobalBuilderCash<br>
<br>
--------------------------------------<br>
You are receiving this message because <br>
you have either signed up to receive <br>
information from us or a third-party.<br>
To be cleared from our records, reply <br>
to this e-mail. Subject Line &quot;UNSUBSCRIBE&quot; <br>
mailto:[EMAIL PROTECTED]<br>
--------------------------------------                  </font>
                  </td>
                  <td width="10"></td>
<td background="cid:wrt.1203750838.1046.54914.w105@yahoogroups.com"></td>
                </tr>
                <tr>
<td background="cid:wlt.1203750838.1046.54914.w105@yahoogroups.com"></td>
                  <td colspan="3" height="10"></td>
<td background="cid:wrt.1203750838.1046.54914.w105@yahoogroups.com"></td>
                </tr>
                <tr>
<td background="cid:wsw.1203750838.1046.54914.w105@yahoogroups.com" height="3" width="3"></td> <td colspan="3" background="cid:wbm.1203750838.1046.54914.w105@yahoogroups.com" height="3"></td> <td background="cid:wse.1203750838.1046.54914.w105@yahoogroups.com" height="3" width="3"></td>
                </tr>
              </table>
            </td>
          </tr>
        </table>
        <br>       </td>
      <td width="10"></td>
<td background="cid:wrt.1203750838.1046.54914.w105@yahoogroups.com"></td>
    </tr>
    <tr>
<td background="cid:wlt.1203750838.1046.54914.w105@yahoogroups.com"></td>
      <td colspan="5" height="10"></td>
<td background="cid:wrt.1203750838.1046.54914.w105@yahoogroups.com"></td>
    </tr>


          <tr>
<td background="cid:slt.1203750838.1046.54914.w105@yahoogroups.com"></td>
        <td width="10" bgcolor="#E0E6F0"></td>
<td colspan="3" bgcolor="#E0E6F0" height="30" align="right" valign="middle">
          <table cellpadding="0" cellspacing="0" border="0">
            <tr><td>
                <div style="font-family:Arial;
                     font-size: 12px;
                     background-color:#C0C0C0;
                     color:#000000;
                     border-top: solid 2px #D0D0D0;
                     border-bottom: solid 2px #909090;
                     border-left: solid 2px #D0D0D0;
                     border-right: solid 2px #909090;
                     padding:3px 20px 3px 20px;
                     margin:4px;">
<a href="http://groups.yahoo.com/i?i=3bHm4I8h9cDMpz13Pq--pjvaQIk&e=jon%2Ekibler%40aset%2Ecom"; style="color:black; text-decoration:none;">Join this group!</a> </div>
            </td></tr>
          </table>
        </td>
        <td width="10" bgcolor="#E0E6F0"> </td>
<td background="cid:srt.1203750838.1046.54914.w105@yahoogroups.com"></td>
      </tr>
      <tr>
<td background="cid:ssw.1203750838.1046.54914.w105@yahoogroups.com" height="3" width="3"></td> <td colspan="5" background="cid:sbm.1203750838.1046.54914.w105@yahoogroups.com" height="3"></td> <td background="cid:sse.1203750838.1046.54914.w105@yahoogroups.com" height="3" width="3"></td>
      </tr>
      </table>
    <br>
<font size="-2" face="Verdana">Yahoo! Groups is a free service that allows you to stay in touch with friends and family or meet new people who share your interests. Yahoo! Groups values your privacy. It is a violation of our service rules for members to abuse this invitation feature. If you feel this has happened, please <a href="http://help.yahoo.com/fast/help/us/groups/cgi_abuse";>notify us</a>. You may also <a href="http://groups.yahoo.com/s?tag=10B2ofYwqnhcBMKrSj3JMyt0GClwl_S2MMG0AOGQgtJlI_nYdxdP-JDB6yaNwV8gAT3mg6dYYjVI";>change your email preferences</a> to stop receiving group invitations in the future. Your use of Yahoo! Groups is subject to our <a href="http://docs.yahoo.com/info/terms/";>Terms of Service</a>.
</font>
<br clear="all"><br><br><div align="left"><p style="font-family: Courier, monospace ;">&#061;&#061;&#061;&#061;&#061;&#061;&#061;&#061;&#061;&#061;&#061;&#061;&#061;&#061;&#061;&#061;&#061;&#061;&#061;&#061;&#061;&#061;&#061;&#061;&#061;&#061;&#061;&#061;&#061;&#061;&#061;&#061;&#061;&#061;&#061;&#061;&#061;&#061;&#061;&#061;&#061;&#061;&#061;&#061;&#061;&#061;&#061;&#061;&#061;&#061;<br>Filtered by: TRUSTEM.COM's Email Filtering Service<br>http://www.trustem.com/<br>No Spam. No Viruses. Just Good Clean Email.<br></p></div>
</body>
</html>

------------=_1203750854-19931-487
Content-Type: image/gif
Content-ID: <[EMAIL PROTECTED]>
Content-Transfer-Encoding: base64
Content-Disposition: inline; filename="bg_lblue_top.gif"

R0lGODlhAwADAJEAAIyqxv///////wAAACH5BAUUAAIALAAAAAADAAMAAAID
hIVZADs=

------------=_1203750854-19931-487
Content-Type: image/gif
Content-ID: <[EMAIL PROTECTED]>
Content-Transfer-Encoding: base64
Content-Disposition: inline; filename="bg_lblue_bottom.gif"

R0lGODlhAwADAJEAAIyqxv///////wAAACH5BAUUAAIALAAAAAADAAMAAAID
lA9ZADs=

------------=_1203750854-19931-487
Content-Type: image/gif
Content-ID: <[EMAIL PROTECTED]>
Content-Transfer-Encoding: base64
Content-Disposition: inline; filename="bg_lblue_left.gif"

R0lGODlhCgADAJEAAIyqxv///////wAAACH5BAUUAAIALAAAAAAKAAMAAAIH
RI5omctXAAA7

------------=_1203750854-19931-487
Content-Type: image/gif
Content-ID: <[EMAIL PROTECTED]>
Content-Transfer-Encoding: base64
Content-Disposition: inline; filename="bg_lblue_right.gif"

R0lGODlhCgADAJEAAIyqxv///////wAAACH5BAUUAAIALAAAAAAKAAMAAAIH
TGCpqNtWAAA7

------------=_1203750854-19931-487
Content-Type: image/gif
Content-ID: <[EMAIL PROTECTED]>
Content-Transfer-Encoding: base64
Content-Disposition: inline; filename="cr_m_lblue_nw.gif"

R0lGODlhAwADAJEDAIyqxsjV4uDm8P///yH5BAEAAAMALAAAAAADAAMAAAIF
VHACMgUAOw==

------------=_1203750854-19931-487
Content-Type: image/gif
Content-ID: <[EMAIL PROTECTED]>
Content-Transfer-Encoding: base64
Content-Disposition: inline; filename="cr_m_lblue_ne.gif"

R0lGODlhAwADAKEDAIyqxsjV4uDm8P///yH5BAEAAAMALAAAAAADAAMAAAIF
RCQQI1AAOw==

------------=_1203750854-19931-487
Content-Type: image/gif
Content-ID: <[EMAIL PROTECTED]>
Content-Transfer-Encoding: base64
Content-Disposition: inline; filename="cr_m_lblue_sw.gif"

R0lGODlhAwADAKEDAIyqxsjV4uDm8P///yH5BAEAAAMALAAAAAADAAMAAAIF
hBYgElAAOw==

------------=_1203750854-19931-487
Content-Type: image/gif
Content-ID: <[EMAIL PROTECTED]>
Content-Transfer-Encoding: base64
Content-Disposition: inline; filename="cr_m_lblue_se.gif"

R0lGODlhAwADAKEDAIyqxsjV4uDm8P///yH5BAEAAAMALAAAAAADAAMAAAIF
nCAQEFIAOw==

------------=_1203750854-19931-487
Content-Type: image/gif
Content-ID: <[EMAIL PROTECTED]>
Content-Transfer-Encoding: base64
Content-Disposition: inline; filename="bg_blue_left.gif"

R0lGODlhAwADAJEAAIyqxuDm8P///wAAACH5BAUUAAIALAAAAAADAAMAAAIE
RGJ4BQA7

------------=_1203750854-19931-487
Content-Type: image/gif
Content-ID: <[EMAIL PROTECTED]>
Content-Transfer-Encoding: base64
Content-Disposition: inline; filename="bg_blue_right.gif"

R0lGODlhAwADAJEAAIyqxuDm8P///wAAACH5BAUUAAIALAAAAAADAAMAAAIE
TGB4BQA7

------------=_1203750854-19931-487
Content-Type: image/gif
Content-ID: <[EMAIL PROTECTED]>
Content-Transfer-Encoding: base64
Content-Disposition: inline; filename="bg_blue_bottom.gif"

R0lGODlhAwADAJEAAIyqxuDm8P///wAAACH5BAUUAAIALAAAAAADAAMAAAID
jA9ZADs=

------------=_1203750854-19931-487
Content-Type: image/gif
Content-ID: <[EMAIL PROTECTED]>
Content-Transfer-Encoding: base64
Content-Disposition: inline; filename="cr_blue_sw.gif"

R0lGODlhAwADALMAAJKvyODm8LHF2O7y9snX46K60Ofs8/f5+7nL3P///wAA
AAAAAAAAAAAAAAAAAAAAACH5BAUUAAkALAAAAAADAAMAAAQHkIgwADqmRAA7

------------=_1203750854-19931-487
Content-Type: image/gif
Content-ID: <[EMAIL PROTECTED]>
Content-Transfer-Encoding: base64
Content-Disposition: inline; filename="cr_blue_se.gif"

R0lGODlhAwADALMAAIqpxOHn8KnA1MnX4+/y95q0zOfs8/f5+6K60P///wAA
AAAAAAAAAAAAAAAAAAAAACH5BAUUAAkALAAAAAADAAMAAAQHMJQhAEHmRAA7

------------=_1203750854-19931-487--

-------001230554100296113360027399089--




==================================================
Filtered by: TRUSTEM.COM's Email Filtering Service
http://www.trustem.com/
No Spam. No Viruses. Just Good Clean Email.


_______________________________________________
phishing mailing list
phishing@whitestar.linuxbox.org
http://www.whitestar.linuxbox.org/mailman/listinfo/phishing



--
Jon R. Kibler
Chief Technical Officer
Advanced Systems Engineering Technology, Inc.
Charleston, SC  USA
o: 843-849-8214
m: 843-224-2494




==================================================
Filtered by: TRUSTEM.COM's Email Filtering Service
http://www.trustem.com/
No Spam. No Viruses. Just Good Clean Email.

_______________________________________________
phishing mailing list
phishing@whitestar.linuxbox.org
http://www.whitestar.linuxbox.org/mailman/listinfo/phishing

Reply via email to