Hier hatte ich es schon vorhergesagt: [Link nur für registrierte Mitglieder sichtbar. ]

Es hat ein paar Monate gedauert.
Die hier vorgestellte Mail, kommt aber nicht aus der Mugu-Fraktion.

Sondern aus Ungarn, respektive Osteuropa als eine verseuchte Mail!
[Link nur für registrierte Mitglieder sichtbar. ]

As you can see from the image supplied by Sophos, the subject line of the typical email reads
“Fw: AFP Photo News: Bloody Photos: Libya dictator Moammar Gaddafi’s Death.,”
and the body has a short statement about Gaddafi having been killed.
Attached to the email, and the source of problems for any PC user who opens the file, is a .rar file,
typically named Bloody Photos_Gadhafi_Death.rar.


LATE Muammar Gaddafi DEAD BODY PICS
Friday, 21 October, 2011 2:39 PM
From: "Libya TRANSITION Council" < [Link nur für registrierte Mitglieder sichtbar. ]>
To: undisclosed-recipients
Message contains attachments
1 File (758KB) |GADAHFI.rar

--
WATCH IT NOW!

LATE MUAMMAR GADDAFI----- Death pictures Exposed!
OPEN ATTACHMENT!

NATIONAL TRANSITION COUNCIL OF LIBYA
vvvvvv.bbc.co.uk/news/world-africa-xxxxxxx

( [Link nur für registrierte Mitglieder sichtbar. ])
header:
01: LATE Muammar Gaddafi DEAD BODY PICS
02: Friday, 21 October, 2011 2:39 PM
03: From Libya TRANSITION Council Thu Oct 20 xx:xx:xx 2011
04: X-Apparently-To: xxxxg1 [at] yahoo.com.au via 98.139.211.89; Thu, 20 Oct 2011
05: xx:xx:xx -0700
06: Return-Path: <libya [at] nationaltransitioncouncil.com>
07: X-YahooFilteredBulk: 91.82.249.34
08: Received-SPF: none (domain of nationaltransitioncouncil.com does not designate
09: permitted sender hosts)
10: X-Originating-IP: [91.82.249.34]
11: Authentication-Results: mta1077.mail.ac4.yahoo.com from=nationaltransitioncouncil.com;
12: domainkeys=neutral (no sig); from=nationaltransitioncouncil.com; dkim=neutral (no sig)
13: Received: from 127.0.0.1 (EHLO mail.archi-host.net) (91.82.249.34) by
14: mta1077.mail.ac4.yahoo.com with SMTP; Thu, 20 Oct 2011 xx:xx:xx -0700
15: Received: from localhost (localhost [127.0.0.1]) by mail.archi-host.net
16: (Postfix) with ESMTP ID: [ID filtered]
17: X-Virus-Scanned: Debian amavisd-new at mail.archi-host.net
18: Received: from mail.archi-host.net ([127.0.0.1]) by localhost
19: (mail.archi-host.net [127.0.0.1]) (amavisd-new, port 10024) with ESMTP ID: [ID
20: filtered]
21: Received: from webmail.archi-host.net (localhost [127.0.0.1]) by
22: mail.archi-host.net (Postfix) with ESMTP ID: [ID filtered]
23: MIME-Version: 1.0
24: Date: Fri, 21 Oct 2011 xx:xx:xx +0200
25: From: Libya TRANSITION Council <libya [at] nationaltransitioncouncil.com>
26: To: undisclosed-recipients:;
27: Subject: LATE Muammar Gaddafi DEAD BODY PICS
28: Reply-To: no-reply [at] nationaltransitioncouncil.com
29: Message-ID: [ID filtered]
30: X-Sender: libya [at] nationaltransitioncouncil.com
31: User-Agent: RoundCube Webmail/0.2
32: Content-Type: multipart/mixed; boundary="=_05ca31bc0c9b5d0ee33f9fab56174dec"