FW: Re:Nddc Poverty Award (Ref No: NDDC/FGN/009/08/01/NDG)

[Robert Lopez]

-----Original Message-----
From: GIERI, GIAN "JOE"
Sent: Monday, October 26, 2009 3:30 PM
To: LOPEZ, ROBERT
Subject: FW: Re:Nddc Poverty Award (Ref No: NDDC/FGN/009/08/01/NDG)

 I have been seeing emails like the one below slipping through our
email filters. Has something changed?

Gian "Joe" Gieri
Executive Director
CNM - Office of Information Technology Services (ITS)


-----Original Message-----
From: Nddc Poverty Award [mailto:lottoawards at sbcglobal.net]
Sent: Monday, October 26, 2009 2:29 PM
Subject: Re:Nddc Poverty Award (Ref No: NDDC/FGN/009/08/01/NDG)

NIGER DELTA DEVELOPMENT COMMISSION (NDDC)
31 HAILE SELAISSIE, ASOKORO BEHIND ECOWAS BUILDING.
COMPANY REGISTRATION NUMBER 3699618
GROUP VAT REGISTRATION NUMBER 832 6732 26.
REF NO: NDDC/FGN/009/08/01/NDG
BATCH NO: NDDC/FGN20054117/09
BONUS NOS:17,29,28,21,5

Dear One,

NIGER DELTA DEVELOPMENT COMMISSION (NDDC) BOARD in association with
federal government(FGN).

Is proud to inform you that you are to earn Five Hundred Thousand
US-Dollars ($500,000.00 USD).in there poverty scheme Award.

However no previous notification is given before your email address
was picked for this award.

Generally email address are picked, the draws are processed by the
computer through a special program that is special designed for this
award, the program is also known as Random Access Program (RAP) This
software picks email addresses from the internet and through a random
process, picks the winners through their email address.

To file for your claim, please contact our financial agent and also call him:

Mr. Paul Steven
Tel: +234-813-812-6954,
      011-234-813-812-6954
EMAIL:paulsteven at katamail.com

APPLICATION FOR PRIZE CLAIM (Receipt Official Notification Letter)

1. Name
2. Address
3. Nationality
4. Age/Sex
5. Occupation
6. Phone/Fax
7. Bonus nos

For security reasons, we advice all winners to keep this information
confidential from the public until your claim is processed and your
prize released to you. This is part of our security protocol to avoid
double claiming and unwarranted abuse of this program. Please be
warned.

Congratulations!!!

Sincerely,
Mr. Jimoh Egbejule (Finance Director).


--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.
----------------------------------------------------------------------------------------------------------------------------

This is an example of phishing (not targeting colleges, but pretty
blatant) that is slipping past
MailScanner and ScamNailer. I have attached a zip file of the copy
that was sent to me and the
headers of it.  The spam score appears to be "ssss".  I am surprised
it is not higher.

I have added katamail.com to phishing.bad.sites.conf.  I think that is
still in use after ScamNailer was added.

Julian please add it to ScanNailer bad list.
-- 
Robert Lopez
Unix Systems Administrator
Central New Mexico Community College (CNM)
525 Buena Vista SE
Albuquerque, New Mexico 87106
-------------- next part --------------
A non-text attachment was scrubbed...
Name: phishing2009102601.gz
Type: application/x-gzip
Size: 2669 bytes
Desc: not available
Url : http://lists.mailscanner.info/pipermail/mailscanner/attachments/20091026/6ef5394f/phishing2009102601.gz