From

Location

Message

Date Posted

Little-TON - Colorado

Alan and Joan.....New scam out there...for money...I have received an email saying you are in the UK....been mugged.....at the consolate need money of course....Now....I am aware of the spoofing of an email account...it can be on your machine...or someone elses...that has your address in their book as well....Now this ones a good one....as I responded to your address, it resent me a another message...that says....this is for real....send me money....but didnt sign it at the end.....SO.....I replied back....with a question.....WHO AM I.....we will see how smart this spoof iZ....and the response.....just to let others know....how sophisticated theZe social engineering messages can be......Now I think that Alan and Joan are out on a cruise ship...so their responses will be limited perhaps another spin on this type of spoof........LetZ see...what returns back...and hoping this indeed iZ not true....Wizzzy

1/1/2011 9:26:56 AM

Little-TON - Colorado

Of course we would never want to not help a friend in need....however...that is how theZe things are so effective.....A play on our emotionZ......

1/1/2011 9:28:47 AM

Little-TON - Colorado

Here is the response to my email to them letting them know an email was being sent out....

"It's me. this is for real, i'm doing everything i can to work my way out of here peacefully. I have checked with the consulate but there is nothing really working out, most important is i don't have enough money on me , please i need you to loan me some, i can pay you back in couple of days.I only want to make my trip privately that is why I didn't inform any body please for God sake help me with any amount you can afford and I promise to pay you back as soon as I get back to state please I need your help,will be waiting to read from you soon.


Thanks
"
Gee...no signature....a sign that something iZ wrong....also no personal info...LIke Hey WiZ....stop using all thoZe ZZZZ's...and send me buckZ.....but the payload did respond to me....NICE....

Now I trust me home system....Win7....updated...firewalled...no admin....lol I like chess gameZ.......lol Knowledge is power....dont fall for it..!

1/1/2011 9:38:50 AM

Long Island,New York

Damn. I just sent all my money to Greg Kurkowski. Sorry Alan.

1/1/2011 9:44:54 AM

Little-TON - Colorado

Glenn.....lol I got that one too.....for grinZ...I responded back to Alans spoof...asking where to send and how much was wanted....eventually the hacker would have to respond back to get their reward....but my cat is out of the bag sort of....lol but letZ see what growZ out.....

1/1/2011 9:59:18 AM

South Hero, VT

Wiz, try this website to locate source of email. http://www.iplocation.net/index.php

1/1/2011 10:21:18 AM

Ohio

The Gibson's have been told. Another thing, if you see this email it would probably be a good idea NOT to open it. On occasion they can be an silent attachment to it which could effect your own system without you even knowing it.

1/1/2011 10:54:41 AM

Little-TON - Colorado

AH Yes Venari.....this is why itZ so much fun...for some...So far...my honey pot haZ drawn no flyZ....itZ the beauty of having so many systems at home....I find it interesting....My W2K server box is getting the email but my Win7 box doeZ not....I dont expect to get a bite on my pole... but we will see...WIZ is going fishin in 2011, My server shows no new files associated with this email so far....Here fishy fishy..........
|
ƾ

. . .
. . .
><> ><> <><

....lol

1/1/2011 11:19:07 AM

Little-TON - Colorado

HereZ the geneticZ on this one......before it hit the Microsoft server in NY it came from here......I didnt bounce too many timeZ.....

Geolocation data from IP2Location (Product: DB4)

IP Address Country Region City ISP

41.206.12.2 Nigeria - - Afrinic

......lol

1/1/2011 11:30:03 AM

Little-TON - Colorado

Reply back went to Joan's email so that PC should be the one infected and was online a 7:24AM MST....since it answered my email as well.....For grinZ I would welcome the name of the infection that was indentified for future reference......YO!

1/1/2011 11:33:25 AM

South Hero, VT

Another Nigerian internet scam. Imagine that, eh.

1/1/2011 11:34:26 AM

Parker, Co

we got the email too. it sounded like joan of whom english as a second language to me! but...let's make the most of it and remind them of the money we lent them when we are on the next pumpkin cruise!

1/1/2011 5:18:33 PM

Little-TON - Colorado

Well here is the response to my email back that asked them to let me know how I could help:
xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

>"I am so glad you replied back,i have nothing left on me right now but am very lucky to have my life and passports with me, it would have been worst if the muggers had made away with my passports.

Well all I need now is just 1,000 or anything you can afford,You can have it wired to my name via any Western Union Outlet around you and anything you send will really go a long way in helping me here. I'll have to show my passport as ID to pick it up here and i promise to pay you back as soon as I get back home. Here is the info where you will
wire the money to

Receiver name: Joan Gibson
Address : 414 Seven Sisters Road. London. N4 2LX
Country: United kingdom

As soon as it has been done, kindly get back to me with the confirmation number. Let me know if you are heading to the Western Union outlet now.

I owe you a lot."<

xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Well., Interesting experience for all for social engineering type scams. Notice the email response is always generic so one siZe fitZ all and never calls me by name, I would think eventually the scams would become more personaliZed....

1/1/2011 6:10:13 PM

Little-TON - Colorado

Wow.....sent an email this morning telling them I was sorry I couldnt get to Union Station due to all the bad weather I had here and the minus 7 degrees. Unbelievable how determined they are, and really to be this leans towards identity theft as well. Kinda makes me feel bad if it was a real letter from Joan and she needed my help, however we know better......

***********************************************************

Yes I really need help I keep wondering why I didn't get any reply how can you help me ? The longer I stay more money the pay.

Joan
*********************************************************
Now I wanna keep this person on the hook, my replies continue to go to the Gibson's email address at MSN.com. Now I am taking a chance that continued baiting may start additional threats to ColoradoPumpkins.com however, my site is run by a third party, their servers and protection instruments......LinuX as well, but we are changing over our ISP too. Sorry ALan and Joan to keep this going in your name. What I am wondering now is the email being redirected from your PC and a program installed or via a nother spoofed address, all very interesting as I continue my forenZics. I hope that eventually Alan emails me at [email protected] with additional information. I will continue to "fish" for now.......YO!

Im thinking my next move will be to send a false Western Union confirmation number next with a $1000 of play money......the low lifes! lol

1/2/2011 1:38:50 PM

Little-TON - Colorado

Here is what I replied:

Ok, I am sorry, I will get down to the station and send it.... WIll $1000 be enough? LEt me know I can send more I got a Christmas bonus......

W

1/2/2011 1:42:00 PM

Little-TON - Colorado

Gee....They responded back that $1000 would be enough for now....lol So Off to the Western Union I go.....lol

1/2/2011 2:44:26 PM

Little-TON - Colorado

OK here is my email back.....

Joan,

OK, just came back from Western Union......got a MCTN number of

# 0HNO-U812

Please let me know when you get it and good luck, hope all gets better and for your safe arrrival back in the US, sorry you had a bad trip.
W

1/2/2011 3:27:33 PM

Little-TON - Colorado

Ok...done for now....now I gotta go watch my buddy TEBOW....trying to get him signed up in the RMGVG too....lol

1/2/2011 3:30:05 PM

Little-TON - Colorado

....lol more back at me...

***********************************************************

Is this a joke or something , this mtcn u gave to me I don't think letters shoul be assigned to it moreso the numbers aren't complete , let me know what's going on I would be charge to court by monday which is tomorow and I need to settle the bills as fast as I can.

Joan

***********************************************************

1/2/2011 5:16:58 PM

Little-TON - Colorado

My reply

sorry I looked at the reference number its my first time doing this. Safe trip.

payment amount : 1000.00 USD
MTCN : 4040220007
Sender Information : James Bond

Hope this works better for you sorry for the confusion.
W

1/2/2011 5:29:39 PM

Little-TON - Colorado

This time the originating address is:

IP Address Country Region City ISP

64.255.180.100 Norway - - Opera Software Asa

Geolocation data from IPligence (Product: Max)

IP Address Country Region City ISP

64.255.180.100 United States California Santa Clara Jupiter Hosting Corporation


They like to bounce off of many servers so it makes them hard to find and discourages the search.

1/2/2011 5:37:11 PM

Long Island,New York

go wiz go!!

1/2/2011 7:02:28 PM

Little-TON - Colorado

Not getting a fast response back now....But thatZ OK...Ill be sending another email to them from an alternate account I have setup for CEastWood....... these type folkZ are dirt bagZ....Either they hacked into Joans email account and changed her password....or have infected her PC and are answering the emails off her PC.
So...
1)Update your PC's to the latest DAT antivirus files weekly, a good A/V program has weekly updates.
2). Make sure you accept all updates from Microsoft, Adobe Reader, JAVA. Check monthly.
3). Very little in life is free so beware.
4). Never give out your password or account information over the phone or via email, legit sites dont ask for info that way.
5). Have a strong password, make it at least 10 characters....15 perferrable, use all four characters... upper, lower, numeric and puncuation, no words from a dictionary...make it your personal best number....then only pumpkinators can hack you....change it every 90 days....and dont put it on bottom of your keyboard BIZ.... or on a post it note stored on your laptop....lol It's not funny I find it all the time at work.

Oh and never ask for money from someone named...
TheWiZ

Stay secure....and GrowZem BIG.

1/2/2011 7:49:54 PM

Breslau, Ontario, Canada

Hey Wiz,

Send a reply signed Chuck Norris...lol
That would scare the daylights out of me

1/3/2011 3:19:37 AM

El Paso TX.

Wiz - you might try contacting Western Union's fraud department and see if their security team might be interested in seeing what they could do to track this down as well - I'm sure they don't like these types using their service for this kind of thing and you never know but they might like an opportunity to get them to come in and try picking up those funds !

Sad part is since they are requesting it sent in Joan's name they probably already have fake documents with her name on it and possibly credit card numbers etc. as well (hopefully not)- so she may want to contact her bank and other creditors and put a watch on her accounts and check the credit reporting agencies for any new accounts being open that she didn't request !

1/3/2011 5:10:12 AM

Little-TON - Colorado

I agree. I will do that

1/3/2011 9:50:44 AM

Ohio

WIZ, im stuck with the BIZ in Kentucky.can u send money. got caught with that dang moonshine u wanted.

LOL

1/3/2011 4:15:29 PM

Owensboro, Ky.

D & Biz...just tell em it's Kentucky Spring Water!!! If awl else fails, call 1-800-the sticks!!! Peace, Wayne
PS...Wiz, I sorta think you should help em out!!!! BTW, MY RMGVG Coffee cup arrived today, way KUL!!!

1/4/2011 2:40:29 AM

Cameron

Jane & I also received the email.

Jane & Phil

1/4/2011 8:12:52 AM

Little-TON - Colorado

This person is really a bone head....here is the return reply...I am still gonna play this fish...what comeZ around goeZ around.....lol The reply is....
***********************************************************

What is this about? On getting to the bank , they told me the informations are incorrect did you send someone for the transfer because am unfamiliar with the name james bond which you claim to be the sender's name please let me know what's going on I need to get out of here fast.

Joan
**********************************************************

I will watch because if I was the hacker I would send wiZ a mickey.....lol

1/4/2011 8:11:14 PM

Little-TON - Colorado

My response back......

Joan,

I am sorry, I sent my brother over as I have him 1000$ check to send to you, I will contact you back and see what he told them . Are you OK? Please let me know. I will email you back real soon, sorry I am away on vacation my self and not being able to always read my emails as I am in Canada right now heading towards the US... but I really want to help you out. I hope you are OK. Please let me know.
W

1/4/2011 8:29:33 PM

Little-TON - Colorado

Now hereZ a bit of new info for people.....What ever goeZ onto the internet can be retraced.....IE

Go to google and type in your name.....search for it....you may be very surpriZed what you may find. That doeZnt mean to unplug your computer and throw it away, but do use caution. You are not invisible......I found my sisters blue print to her house since she refinanced her house and they posted it via a web service. So it appeared on the web. Knowledge iZ power. But dont hide from it. Make google your friend. But realiZe you are not inviZable on the internet especially Face book. Wish my son would realiZe that.......
W

1/4/2011 8:42:54 PM

Little-TON - Colorado

For this reason.....The WiZ will now go Dark on this posting.....however....You will..... see me "out there"....
GrowZem BIG
W

1/4/2011 10:16:19 PM

Little-TON - Colorado

. °
. °

.. °
°
><>

GoT me a bite......

1/14/2011 11:08:45 PM