[phishing] Yahoo Groups Phishing?
Hi, I have suddenly started to receive either invitations to join Yahoo Groups or 'confirm join request' emails for groups I have never even heard of, not less have an interested in. I have looked at the emails and do not see anything obvious that indicated phishing (example attached). Is this some new phishing scheme? If so, how does it work? If not phishing, what is it? THANKS! Jon Kibler -- Jon R. Kibler Chief Technical Officer Advanced Systems Engineering Technology, Inc. Charleston, SC USA o: 843-849-8214 m: 843-224-2494 Received: from mail.trustem.net (trustem01.asetgate.aset.com [10.5.2.101]) port 46267 by aset.com (security/secret) with ESMTP id m1N7EExg002417 for [EMAIL PROTECTED]; Sat, 23 Feb 2008 02:14:14 -0500 (EST) Received: from n10c.bullet.sp1.yahoo.com (n10c.bullet.sp1.yahoo.com [69.147.64.105]) by mail.trustem.net (security/secret) with SMTP id m1N7E6UN016348 for [EMAIL PROTECTED]; Sat, 23 Feb 2008 02:14:13 -0500 (EST) X-Envelope-Sender: [EMAIL PROTECTED] Comment: DomainKeys? See http://antispam.yahoo.com/domainkeys DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=lima; d=yahoogroups.com; b=cRaZ+NWIfBtvHJckI2gmUSCPjaDBQbEjlFdTYzObldTxD3MdOTNFcJ2cCpp37dTzjwdzSs5PZDKoRor283psbG+K9eO4ai5zKETC9xDP0e623oDpx+ndbBnFBtIVXZo3; Received: from [216.252.122.219] by n10.bullet.sp1.yahoo.com with NNFMP; 23 Feb 2008 07:13:59 - Received: from [209.73.164.83] by t4.bullet.sp1.yahoo.com with NNFMP; 23 Feb 2008 07:13:59 - Received: from [66.218.67.201] by t7.bullet.scd.yahoo.com with NNFMP; 23 Feb 2008 07:13:59 - Date: 23 Feb 2008 07:13:58 - Message-ID: [EMAIL PROTECTED] X-Yahoo-Newman-Property: groups-invite MIME-Version: 1.0 From: Money_for_Life_08 moderator [EMAIL PROTECTED] Reply-To: [EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: Yahoo! Groups: You're invited! Join Money_for_Life_08 today. Content-Type: multipart/alternative; boundary=-001230554100296113360027399089 X-Virus-Scanned: by http://www.trustem.com/ using ClamAV Content-Length: 15708 This is a multi-part message in MIME format... ---001230554100296113360027399089 Content-Type: text/plain Content-Transfer-Encoding: 7bit Content-Disposition: inline [EMAIL PROTECTED] has invited you to join Money_for_Life_08 [http://groups.yahoo.com/group/Money_for_Life_08/] on Yahoo! Groups, the best way to discover and share information and advice with others. All for free. A personal invitation from [EMAIL PROTECTED]: Hello Opportunity Seeker, Working at home is something I've always dreamed of. I just couldn't take the stress of doing two jobs just to make ends meet. I'm glad I found this revolutionary global opportunity. After a couple of months of using their systems and techniques I'm pleased to say I'm making a nice steady income with just my computer. This really great opportunity for everyone. Visit How it works http://www.clickaudit.com/goto/?94860 http://www.clickaudit.com/goto/?94860 To your massive success; Magge Wilson GlobalBuilderCash -- You are receiving this message because you have either signed up to receive information from us or a third-party. To be cleared from our records, reply to this e-mail. Subject Line UNSUBSCRIBE mailto:[EMAIL PROTECTED] -- See for yourself why millions of people are members of Yahoo! Groups. But hurry. This invitation expires in 30 days. Join this group: http://groups.yahoo.com/i?i=3bHm4I8h9cDMpz13Pq--pjvaQIke=jon%2Ekibler%40aset%2Ecom Yahoo! Groups is a free service that allows you to stay in touch with friends and family or meet new people who share your interests. Yahoo! Groups values your privacy. It is a violation of our service rules for Groups members to abuse this invitation feature. If you feel this has happened, please notify us: http://help.yahoo.com/fast/help/us/groups/cgi_abuse You may also change your email preferences to stop receiving group invitations in the future. To do so, please go here: http://groups.yahoo.com/s?tag=10B2ofYwqnhcBMKrSj3JMyt0GClwl_S2MMG0AOGQgtJlI_nYdxdP-JDB6yaNwV8gAT3mg6dYYjVI Your use of Yahoo! Groups is subject to: http://docs.yahoo.com/info/terms/ == Filtered by: TRUSTEM.COM's Email Filtering Service http://www.trustem.com/ No Spam. No Viruses. Just Good Clean Email. ---001230554100296113360027399089 Content-Type: multipart/related; boundary=--=_1203750854-19931-487 Content-Transfer-Encoding: binary MIME-Version: 1.0 X-Mailer: MIME-tools 5.411 (Entity 5.404) This is a multi-part message in MIME format... =_1203750854-19931-487 Content-Type: text/html Content-Transfer-Encoding: 7bit Content-Disposition: inline html body bgcolor=#FF a href=http://groups.yahoo.com;img
Re: [phishing] Yahoo Groups Phishing?
Thanks. Already reported them -- plus notified Google of their GMAIL address that was being used too. Jon Tom wrote: Just report them http://help.yahoo.com/fast/help/us/groups/cgi_abuse Tom At 12:36 PM -0500 2/23/08, Jon R. Kibler wrote: Hi, I have suddenly started to receive either invitations to join Yahoo Groups or 'confirm join request' emails for groups I have never even heard of, not less have an interested in. I have looked at the emails and do not see anything obvious that indicated phishing (example attached). Is this some new phishing scheme? If so, how does it work? If not phishing, what is it? THANKS! Jon Kibler -- Jon R. Kibler Chief Technical Officer Advanced Systems Engineering Technology, Inc. Charleston, SC USA o: 843-849-8214 m: 843-224-2494 Received: from mail.trustem.net (trustem01.asetgate.aset.com [10.5.2.101]) port 46267 by aset.com (security/secret) with ESMTP id m1N7EExg002417 for [EMAIL PROTECTED]; Sat, 23 Feb 2008 02:14:14 -0500 (EST) Received: from n10c.bullet.sp1.yahoo.com (n10c.bullet.sp1.yahoo.com [69.147.64.105]) by mail.trustem.net (security/secret) with SMTP id m1N7E6UN016348 for [EMAIL PROTECTED]; Sat, 23 Feb 2008 02:14:13 -0500 (EST) X-Envelope-Sender: [EMAIL PROTECTED] Comment: DomainKeys? See http://antispam.yahoo.com/domainkeys DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=lima; d=yahoogroups.com; b=cRaZ+NWIfBtvHJckI2gmUSCPjaDBQbEjlFdTYzObldTxD3MdOTNFcJ2cCpp37dTzjwdzSs5PZDKoRor283psbG+K9eO4ai5zKETC9xDP0e623oDpx+ndbBnFBtIVXZo3; Received: from [216.252.122.219] by n10.bullet.sp1.yahoo.com with NNFMP; 23 Feb 2008 07:13:59 - Received: from [209.73.164.83] by t4.bullet.sp1.yahoo.com with NNFMP; 23 Feb 2008 07:13:59 - Received: from [66.218.67.201] by t7.bullet.scd.yahoo.com with NNFMP; 23 Feb 2008 07:13:59 - Date: 23 Feb 2008 07:13:58 - Message-ID: [EMAIL PROTECTED] X-Yahoo-Newman-Property: groups-invite MIME-Version: 1.0 From: Money_for_Life_08 moderator [EMAIL PROTECTED] Reply-To: [EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: Yahoo! Groups: You're invited! Join Money_for_Life_08 today. Content-Type: multipart/alternative; boundary=-001230554100296113360027399089 X-Virus-Scanned: by http://www.trustem.com/ using ClamAV Content-Length: 15708 This is a multi-part message in MIME format... ---001230554100296113360027399089 Content-Type: text/plain Content-Transfer-Encoding: 7bit Content-Disposition: inline [EMAIL PROTECTED] has invited you to join Money_for_Life_08 [http://groups.yahoo.com/group/Money_for_Life_08/] on Yahoo! Groups, the best way to discover and share information and advice with others. All for free. A personal invitation from [EMAIL PROTECTED]: Hello Opportunity Seeker, Working at home is something I've always dreamed of. I just couldn't take the stress of doing two jobs just to make ends meet. I'm glad I found this revolutionary global opportunity. After a couple of months of using their systems and techniques I'm pleased to say I'm making a nice steady income with just my computer. This really great opportunity for everyone. Visit How it works http://www.clickaudit.com/goto/?94860 http://www.clickaudit.com/goto/?94860 To your massive success; Magge Wilson GlobalBuilderCash -- You are receiving this message because you have either signed up to receive information from us or a third-party. To be cleared from our records, reply to this e-mail. Subject Line UNSUBSCRIBE mailto:[EMAIL PROTECTED] -- See for yourself why millions of people are members of Yahoo! Groups. But hurry. This invitation expires in 30 days. Join this group: http://groups.yahoo.com/i?i=3bHm4I8h9cDMpz13Pq--pjvaQIke=jon%2Ekibler%40aset%2Ecom Yahoo! Groups is a free service that allows you to stay in touch with friends and family or meet new people who share your interests. Yahoo! Groups values your privacy. It is a violation of our service rules for Groups members to abuse this invitation feature. If you feel this has happened, please notify us: http://help.yahoo.com/fast/help/us/groups/cgi_abuse You may also change your email preferences to stop receiving group invitations in the future. To do so, please go here: http://groups.yahoo.com/s?tag=10B2ofYwqnhcBMKrSj3JMyt0GClwl_S2MMG0AOGQgtJlI_nYdxdP-JDB6yaNwV8gAT3mg6dYYjVI Your use of Yahoo! Groups is subject to: http://docs.yahoo.com/info/terms/ == Filtered by: TRUSTEM.COM's Email Filtering Service http://www.trustem.com/ No Spam. No Viruses. Just Good Clean Email. ---001230554100296113360027399089 Content-Type: multipart/related; boundary=--=_1203750854-19931-487 Content-Transfer-Encoding: binary MIME-Version: 1.0 X-Mailer: MIME-tools 5.411 (Entity 5.404) This is a multi-part message in MIME
