Email Fraud Alert received from: Rashaad
I recently received an email with this subject line: RESERVE BANK PAYMENT and I am concerned that it could be an attempt at defrauding me. Let me know in the comments section what you think, please.
The full contents of the suspected fraudulent (phishing / scamming) e-mail appear below:
Delivered-To: My email adress sorry cant leave this here
Received: by 10.28.4.203 with SMTP id 194csp1086715wme;
Sun, 20 Nov 2016 07:44:44 -0800 (PST)
X-Received: by 10.194.122.101 with SMTP id lr5mr5757019wjb.210.1479656684701;
Sun, 20 Nov 2016 07:44:44 -0800 (PST)
Return-Path:
Received: from as2.telkomsa.net (as.telkomsa.net. [196.25.211.37])
by mx.google.com with ESMTPS id q141si9700738wmd.43.2016.11.20.07.44.35
(version=TLS1 cipher=AES128-SHA bits=128/128);
Sun, 20 Nov 2016 07:44:44 -0800 (PST)
Received-SPF: pass (google.com: domain of online2377210@telkomsa.net designates 196.25.211.37 as permitted sender) client-ip=196.25.211.37;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of online2377210@telkomsa.net designates 196.25.211.37 as permitted sender) smtp.mailfrom=online2377210@telkomsa.net
Received: from unknown (HELO scorpius.telkomsa.net) ([192.168.111.56])
by as2.telkomsa.net with ESMTP; 20 Nov 2016 17:44:34 +0200
Received: from mail3.telkomsa.net (zimbra3-vm1.lb2.telkomsa.net [192.168.16.224]) by scorpius.telkomsa.net (Postfix) with ESMTP id 8896CF8154; Sun, 20 Nov 2016 17:27:17 +0200 (SAST)
Date: Sun, 20 Nov 2016 17:27:17 +0200 (SAST)
From: RESERVE BANK PAYMENT
Reply-To: info.reservebankfinancialdepartment2@consultant.com
Message-ID:
In-Reply-To:
Subject: reserve bank payment
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary=”—-=_Part_21287410_2116418536.1479655637466″
X-Originating-IP: [10.146.44.55]
X-Mailer: Zimbra 7.2.4_GA_2903 (ZimbraWebClient – FF3.0 (Win)/7.2.4_GA_2900)
To: undisclosed-recipients:;
——=_Part_21287410_2116418536.1479655637466
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
PLEASE VIEW ATTACHED RESERVE BANK PAYMENT
——=_Part_21287410_2116418536.1479655637466
Content-Type: application/vnd.openxmlformats-officedocument.presentationml.presentation; name=”RESERVE BANK PAYMENT.pptx”
Content-Disposition: attachment; filename=”RESERVE BANK PAYMENT.pptx”
Content-Transfer-Encoding: base64
——=_Part_21287410_2116418536.1479655637466–
The above email was sent by “RESERVE BANK PAYMENT” from this email address: online2377210@telkomsa.ne
I, Rashaad, have the following thoughts/comments on this suspected fraudulent email message from “RESERVE BANK PAYMENT”:
This user send a pptx document wich i have checked is infected not willing to share that here as some one might accidently click it
please be very careful