[TowerTalk] Phishing Attempt on list members

[Richard Solomon]

The link they supplied should have
raised more red flags than their 1/2
broken english.

73, Dick, W1KSZ

On Tue, Mar 7, 2017 at 3:02 PM, <marsh at ka5m.net> wrote:

> Doesn't "Chase Online" raise a red flag?
>
> Marsh, KA5M
>
>
> -----Original Message-----
> From: TowerTalk [mailto:towertalk-bounces at contesting.com] On Behalf Of
> Steve
> Baughn
> Sent: Tuesday, March 7, 2017 12:14 PM
> To: towertalk at contesting.com; W0MU Mike Fatchett <w0mu at w0mu.com>
> Subject: Re: [TowerTalk] Phishing Attempt on list members
>
> Bad thing is these bozo's are getting a little better with their English
> and
> use of terms such as 73 etc making it a bit harder to spot.,..
>
> 73, Steve, WD8NPL
>
> -----Original Message-----
> From: W0MU Mike Fatchett
> Sent: Tuesday, March 07, 2017 12:55 PM
> To: towertalk at contesting.com
> Subject: Re: [TowerTalk] Phishing Attempt on list members
>
> and many other QTH.com list users.
>
>
> On 3/7/2017 9:21 AM, Bill Cotter wrote:
> > Beware of the phishing attempt you may receive (below). Someone has
> > harvested names from this list and is targeting "tower-speak" members.
> >
> > 73 Bill N4LG
> >
> >
> >
> >> Delivered-To: n4lg at qx.net
> >> DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=qth.net;
> >> s=default;
> >>         t=1488899527;
> >> bh=y3c0luieP8LJ655Uh35p+oaTX6WXSC4BE+eL0xv3NIs=;
> >> h=Date:To:From:Subject:List-Id:List-Unsubscribe:List-Archive:
> >>         List-Post:List-Help:List-Subscribe:Reply-To;
> >>
> >> b=SsD1PS1YSwz2Gv0Z6J93oDBAdXLIpaXzgM0/YCQBmO4QoZD8tuGBApMurdovTrMvK
> >>
> >> 5BfgStgEa+d78emz1tgS7oWACF+Tf+UydoMda4glMQsfHBQB1xrG7foebi1ZgpYdWp
> >>         gkkiep1te6AA48Q4nNk644U87Nm0sSE8aSfY8jRo=
> >> X-Original-To: tower-speak at mailman.qth.net
> >> Delivered-To: tower-speak at mailman.qth.net
> >> Date: Tue, 7 Mar 2017 23:10:30 +0900
> >> To: tower-speak at mailman.qth.net
> >> From: "Chase AcctSec. Team chasesecurity-team_noreplies at chse.com"
> >>         <kb0stn at sbcglobal.net>
> >> X-Sender-Warning: www.cep.co.jp has no MX records
> >> X-Sender-Warning: Reverse DNS lookup failed for 210.255.105.34
> >> (deferred)
> >> X-SpamExperts-Class: unsure
> >> X-SpamExperts-Evidence: Combined (0.39)
> >> X-Recommended-Action: accept
> >> X-Filter-ID:
> >> s0sct1PQhAABKnZB5plbIZpY1ikLiFgbVmksaMuwG0C5OxuSEtuFWwwaLyTv3J4q92PND
> >> pgLsd6D
> >>
> >> dd/s7VM53g3T+DSfEwaX1fMB91s1i0eF3rqxKFd/nPW1dGGCWU27kPJbqGF1mm7icJReI
> >> Q1Y0eGb
> >>
> >> l2rxzgZzlEZmtq8bUJ1ESxetogg2qpgjEaQVMqtgHHASJNUmoOHSoqgqxfHmWWFKriOvK
> >> 5c3NjZx
> >>
> >> hn31ZU4XXoJpPBs4SXre2qkDo6tZnxyFa+Q+jcWWki4nd/MNUQioT+LYyf+F84tisMSPn
> >> hn31ZU4XXoJpPBs4SXre2qkDo6tZnxyFa+Q+VK7RuLD
> >>
> >> 0cO47gH2HJlBchoL647lNwN4qOsSZg+fYhVZG6JgW08GUKyIRv5R4YS10xebidA8HjwZk
> >> 0cO47gH2HJlBchoL647lNwN4qOsSZg+ZUDJOsO
> >>
> >> TC4gLPcreuTRO8h4kE9NVybyZuCiaqkrTMLg0gyykv6sPD5sIH8EF3joBheiindVvWjMA
> >> s6k3Y4z
> >>
> >> hdrc7mVMTsXqUoUqJg7F2WHEjt37MS2lIdOrf/zvkfJ5qxZ6Hdc351pSh/Q9kPA7nEm8y
> >> CUrkAIp
> >>
> >> zU0HC+OHo93JT2u4lL5dx5YjZwWTcp0rVeO1dO6omiH/21XAikGmQzbz+8y1rHkBAO56p
> >> zU0HC+lfq0eVU
> >>
> >> aVfwajC1K+JsJP8LNZ+wb8Fh6AzaRQJBYfVjU8jp64UzkfHMeaQSZyGwfqeNO0Vta0QHI
> >> aVfwajC1K+JsJP8LNZ+SXmTwUu
> >>
> >> LKQ+ubjvZxdX/Mk3mf2JJ6ytnJ0Xd4KZmhdHwpVLA+f58jEXnRK5ls8GJS1nfGZHtwH6g
> >> LKQ+pgoatEb
> >>         QYNxkjCA
> >> X-Report-Abuse-To: spam at quarantine4.antispamcloud.com
> >> X-Content-Filtered-By: Mailman/MimeDel 2.1.20
> >> Subject: [Tower-Speak] Account Suspension
> >> X-BeenThere: tower-speak at mailman.qth.net
> >> X-Mailman-Version: 2.1.20
> >> List-Id: Discussion of anything related to towers
> >> <tower-speak.mailman.qth.net>
> >> List-Unsubscribe:
> >> <http://mailman.qth.net/mailman/options/tower-speak>,
> >>
> >> <mailto:tower-speak-request at mailman.qth.net?subject=unsubscribe>
> >> List-Archive: <http://mailman.qth.net/pipermail/tower-speak/>
> >> List-Post: <mailto:tower-speak at mailman.qth.net>
> >> List-Help: <mailto:tower-speak-request at mailman.qth.net?subject=help>
> >> List-Subscribe:
> >> <http://mailman.qth.net/mailman/listinfo/tower-speak>,
> >>
> >> <mailto:tower-speak-request at mailman.qth.net?subject=subscribe>
> >> Reply-To: alt.y7-fdeawx2 at yopmail.com
> >> Sender: "Tower-Speak" <tower-speak-bounces at mailman.qth.net>
> >> X-MagicMail-OS: Inactive
> >> X-MagicMail-UUID: 6ddbd5e8-0348-11e7-a552-002481abe416
> >> X-MagicMail-SourceIP: 69.16.227.189
> >> X-MagicMail-EnvelopeFrom: <tower-speak-bounces at mailman.qth.net>
> >> X-MagicMail-Whitelisted: Yes
> >>
> >> Hi,
> >> Due to a recent compromise of our servers by some chinese hackers, It
> >> has been mandated that we carry out an integrity check to isolate and
> >> disable all suspicious accounts. For now we have already placed a red
> >> flag on several accounts thereby preventing them from carrying out
> >> any financial transactions whatsoever.
> >> To ensure that your account was not compromised, you are required to
> >> ascertain your identity, failure to do this within 24 hours will lead
> >> to account service suspension.
> >> Login and Ascertain Your Identity
> >> Thanks for your anticipated co-operation and understanding.
> >> The Accounts Team,
> >> For Chase Online
> >> ______________________________________________________________
> >> Tower-Speak mailing list
> >> Home: http://mailman.qth.net/mailman/listinfo/tower-speak
> >> Help: http://mailman.qth.net/mmfaq.htm
> >> Post: mailto:Tower-Speak at mailman.qth.net
> >>
> >> This list hosted by: http://www.qsl.net Please help support this
> >> email list: http://www.qsl.net/donate.html
> >
> > _______________________________________________
> >
> >
> >
> > _______________________________________________
> > TowerTalk mailing list
> > TowerTalk at contesting.com
> > http://lists.contesting.com/mailman/listinfo/towertalk
>
> _______________________________________________
>
>
>
> _______________________________________________
> TowerTalk mailing list
> TowerTalk at contesting.com
> http://lists.contesting.com/mailman/listinfo/towertalk
>
> _______________________________________________
>
>
>
> _______________________________________________
> TowerTalk mailing list
> TowerTalk at contesting.com
> http://lists.contesting.com/mailman/listinfo/towertalk
>
> _______________________________________________
>
>
>
> _______________________________________________
> TowerTalk mailing list
> TowerTalk at contesting.com
> http://lists.contesting.com/mailman/listinfo/towertalk
>