On 4/12/07, chuck goolsbee <[EMAIL PROTECTED]> wrote:
> Received this today... it included a word doc ("Ncua FORM.doc" which
> I have NOT opened yet) and a request to fax it. Quite odd.
> Appears to have been formmailled out of The Planet in Dallas, via an
> IP in Romania.
>
> --chuck

It would be interesting to take a look at the .doc to see if they
stripped out the author/who-office-is-registered-to information, as
well as any other interesting meta-data.

-- 
Robert Wesley McGrew
http://mcgrewsecurity.com
_______________________________________________
phishing mailing list
[EMAIL PROTECTED]
http://www.whitestar.linuxbox.org/mailman/listinfo/phishing

Reply via email to