[Chapter-delegates] Fwd: Brutal Experience...Marina Wang

[Niran Beharry]

It is Spam, based on a known attack vector I suggest he change his email
and associated account passwords.
Niran Beharry
ISOCTT

On Mon, Jun 11, 2012 at 10:49 AM, Charles Mok (gmail) <charlespmok at gmail.com
> wrote:

> Alejandro, I don't seem to be able to reply to you directly....your domain
> rejects my Gmail and hknet.com
>
> mail.unam.mx rejected your message to the following e-mail addresses:
>
> apisan at local.unam.mx<mailto:apisan at local.unam.mx>
>
> mail.unam.mx gave this error:
> Client was not authenticated
>
> Your message wasn't delivered due to a permission or security issue. It
> may have been rejected by a moderator, the address may only accept e-mail
> from certain senders, or another restriction may be preventing delivery.
>
>
>
>
> Back to the original scam mail received, from the header, I can't be sure
> that the header was faked, which means maybe Charles's account is indeed
> compromised?  Only he can check himself.
>
> Delivered-To: charlespmok at gmail.com
> Received: by 10.223.17.7 with SMTP id q7csp64471faa;
>         Mon, 11 Jun 2012 06:46:28 -0700 (PDT)
> Received: by 10.236.74.74 with SMTP id w50mr20691307yhd.34.1339422388036;
>         Mon, 11 Jun 2012 06:46:28 -0700 (PDT)
> Return-Path: <charlesg1075 at yahoo.com>
> Received: from nm19-vm1.bullet.mail.ne1.yahoo.com (nm19-vm1.bullet.mail.ne1.yahoo.com. [98.138.91.56])
>         by mx.google.com with SMTP id h29si7703325anm.166.2012.06.11.06.46.27;
>         Mon, 11 Jun 2012 06:46:28 -0700 (PDT)
> Received-SPF: pass (google.com: best guess record for domain of charlesg1075 at yahoo.com designates 98.138.91.56 as permitted sender) client-ip=98.138.91.56;
>
>
>
> On Mon, Jun 11, 2012 at 10:27 PM, Dr. Alejandro Pisanty Baruch <
> apisan at unam.mx> wrote:
>
>>  Hi Charles, all,
>>
>>  this is a type of scam that has been around for some time and grown
>> recently. Someone tells you he/she is in trouble in travel with a story
>> that's moderately credible and very scary (so it activates your response
>> and suspends critical thinking.)
>>
>>  It is awful that the wrongdoers have picked up Charles Gaye's name and
>> the association with ISOC.
>>
>>  We have already had email from him on January 30 this year warning of
>> supplantations.
>>
>>  What I fail to see in this new case is how the scam works if it comes
>> from his legit email address. Are the phone numbers supplanted? Or is there
>> a total hijack of his communications? Can someone who communicates with him
>> or others in Liberia help clear the mess?
>>
>>  Yours,
>>
>>  Alejandro Pisanty
>>
>> ! !! !!! !!!!
>> NEW PHONE NUMBER - NUEVO NÚMERO DE TELÉFONO
>>
>>
>>
>> +52-1-5541444475 FROM ABROAD
>>
>> +525541444475 DESDE MÉXICO
>>
>> SMS +525541444475
>>      Dr. Alejandro Pisanty
>> UNAM, Av. Universidad 3000, 04510 Mexico DF Mexico
>>
>> Blog: http://pisanty.blogspot.com
>> LinkedIn: http://www.linkedin.com/in/pisanty
>> Unete al grupo UNAM en LinkedIn,
>> http://www.linkedin.com/e/gis/22285/4A106C0C8614
>> Twitter: http://twitter.com/apisanty
>> ---->> Unete a ISOC Mexico, http://www.isoc.org
>> .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .
>>   ------------------------------
>> *Desde:* chapter-delegates-bounces at elists.isoc.org [
>> chapter-delegates-bounces at elists.isoc.org] en nombre de Charles Mok
>> (gmail) [charlespmok at gmail.com]
>> *Enviado el:* lunes, 11 de junio de 2012 09:14
>> *Hasta:* Chapter Delegates
>> *Asunto:* [Chapter-delegates] Fwd: Brutal Experience...Marina Wang
>>
>>  I am not sure how many of you may have received this, but it looks like
>> a typical scam, but using the name of one of the persons at ISOC Liberia
>> (at least I googled and found some folk by that name in that organization).
>>
>>
>> ---------- Forwarded message ----------
>> From: charles Gaye <charlesg1075 at yahoo.com>
>> Date: Mon, Jun 11, 2012 at 9:46 PM
>> Subject: Brutal Experience...Marina Wang
>> To:
>>
>>
>>   Hi,
>>
>>    I really hope you get this fast. I could not inform anyone about my
>> trip, because it was impromptu. I had to be in Madrid Spain for a program.
>> The program was successful, but my journey has turned sour. I misplaced my
>> wallet on my way back to my hotel after I went for sight seeing. The wallet
>> contained all the valuables I had. Now, my passport is in custody of the
>> hotel management pending when I make payment.
>>
>>   I am sorry if i am inconveniencing you, but i have only very few
>> people to run to now. i will be indeed very grateful if i can get a loan of
>> $2,000 from  you. this will enable me sort my hotel bills and get my sorry
>> self back home. I will really appreciate whatever you  can afford in
>> assisting me with. I promise to refund it in full as soon as I return. let
>> me know if you can be of any assistance. Please, let me know soonest.
>> Thanks so much.
>>
>> Charles Kanlah Gaye
>> Vice President
>> Liberia Chapter of the Internet Society
>> P.O. Boc 6303
>> Tel: +(231)76324918 OR +(231)3693891
>>
>>
>
> _______________________________________________
> Chapter-delegates mailing list
> Chapter-delegates at elists.isoc.org
> https://elists.isoc.org/mailman/listinfo/chapter-delegates
>
>


-- 
Managing Director
Proteus Technologies Limited
3 Freeling Street
Tunapuna, Trinidad & Tobago
Telephone: +1 868 782 9995
Website:  www.pro-tt.com
MSN: niran.beharry at pro-tt.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://elists.isoc.org/mailman/private/chapter-delegates/attachments/20120611/cec9e4f4/attachment.htm>