Eniac
29.06.2003, 18:24
Neulich bekam ich mal wieder Post aus Afrika, diesmal Ghana, in denen es um 3 geheimnisvolle Kisten geht, die Saddams Schergen aus dem Irak nach Ägypten verschieben wollten. Seltsamerweise wurden diese Kisten über den Seeweg nach Accra/Ghana verschifft, wo sie der wackere AKEEM KAMAL, Beamter der dortigen Hafenbehörde, erstmal sicherstellte:
DEAR FRIEND,
I AM MAKING THIS CONTACT BASED ON MY PRESUMED RELIANCE, AFTER GOING
THROUGH A BRIEF PROFILE OF YOUR COMPANY.
I AM ALHAJI AKEEM KAMAL FROM WEST-AFRICA (A GHANAIAN). I AM A CUSTOMS
SUPERINTENDENT OFFICER ATTACHE TO THE GHANA PORTS AND HARBOURS
AUTHORITY.
TEMA, AND I AM CONTACTING YOU TO ESTABLISH THIS RELATIONSHIP WITH YOU
IN BENEVOLENT SPIRIT AS TO ENHANCE IMMEDIATE RESOLUTION TO AN OPPORTUNITY
RIGHTLY AT HAND.
IT WAS MORE LIKE A DREAM WHEN TWO OF MY COLLEAGUES I INTERCEPTED THREE
(3) GIGANTIC TRUNK BOXES AT OUR SEA PORT IN THE EARLY HOURS OF 2ND
APRIL, 2003 ON TRANSIT TO CAIRO, EGYPT.
SUBSEQUENTLY, THE OWNERS WHOM ACCORDING TO OUR INVESTIGATIONS WERE
ARABIANS FROM THE GULF REGION (SOME OF THE SADAM HUSSAIN`S ENTOURRAGE)
WITHDREW FROM THE OPERATION SINCE THEY OBVIOUSELY STAND NO CHANCE OF
DEFENDING THE SOURCE OF THE CONTENT OF THESE BOXES.
ALSO, AS A MATTER OF FACT THAT THIS SAME PEOPLE ARE ACCORDING TO OUR
INVESTIGATION FACING CHARGES OF LOOTS AND HUMAN-RIGHT ABUSES IN IRAQ.
AFETR DUE INVESTIGATIONS AND CLEARIFICATIONS, WE HAVE DECIDED TO OWN
THESE BOXES WHICH`S CONTENT I CANNOT DISCLOSE NOW FOR SECURITY REASONS,
TO OURSELVES. SINCE WE HAVE EARLIER DECIDED NOT TO OFFCIALLY ANNOUNCE
THIS INTERCEPTION FOR ABVIOUS REASON
WE URGENTLY NEED AN INTERNATIONAL ASSISTANCE AS TO ENABLE US TRANSFER
THESE BOXES AND THEIR CONTENTS ABROAD. MEANWHILE, I AM ONLY SENDING
THIS PROPOSAL TO ASCERTAIN YOUR INTREST AND ONCE POSITIVE RESPONCE IS
RECIEVED FROM YOU, ASSURING ME OF YOUR UTMOST COOPERATION, SINCERITY
AND CONFIDENTIALITY, I WILL PROCEED TO FURNISH YOU WITH ALL DETAILS AND HOW
WE INTEND TO CARRY OUT THIS RISK FREE TRANSACTION WITHOUT FURTHER DELAY.
THANKS FOR YOUR ANTICIPATED COOPERATION.
ALHAJI AKEEM KAMAL.
Drei grosse Schatztruhen? Das macht meinen alten Freund und Kupferstecher Eduard Bauernfänger, seines Zeichens Eigentümer der Nepper & Schlepper GmbH & Co. KG und mit der wohlklingenden mail-domain `betriebsdirektor.de` ausgestattet (gmx-Fundomain), latürnich äusserst (neu)gierig:
Dear Mr. Kamal,
your interesting email made me very courious, what can I do for you? Please
send me further details.
kind regards
Euduard Bauernfänger
Die Antwort lässt nicht lange auf sich warten:
DEAR BROTHER,
THANK YOU VERY MUCH FOR YOUR PROMPT RESPONSE TO MY BUSINESS PROPOSAL. I
APPRECIATE THE BRIEF CONTENT OF YOUR MAIL, WHICH CLEARLY INDICATE YOUR
WILLINGNESS TO ASSIST US EFFECTIVELY IN REALIZING THIS GOLDEN OPPORTUNITY.
I HAVE PRAYED AND COMMITTED THIS TRANSACTION INTO THE HANDS OF GOD
ALMIGHTY AND I STRONGLY BELIEVE THAT THIS RELATIONSHIP I AM ESTABLISHING
WITH YOU ON TRUST AND IN BENEVOLENT SPIRIT WILL NOT LEAD TO JEOPARDY, RATHER, YOUR
UTMOST COOPERATION, SINSERITY AND CONFIDENTIALITY WILL BE GIVEN TO ME IN
COURSE OF THIS TRANSACTION AS YOU CLEARLY INDICATED IN YOUR MAIL.
THERE WILL BE NEED FOR YOU TO COME OVER TO ACCRA GHANA IMMEDIATELY FOR WE
TO MEET AND DISCUSS OUR HEARTS AND ALL MODALITIES, ENHANCING IMMEDIATE
COMMENCEMENT OF THIS TRANSACTION.
IN CONFIDENCE, I AM REVEALING TO YOU THAT WHAT WE HAVE INTERCEPTED IS
THREE (3) METAL BOXES FULL OF UNITED STATES PROOF MINT NOTES IN HUNDRED
BILLS, AMOUNTING TO $168 MILLION. WE HAVE CAREFULLY CONDUCTED OUR INVESTIGATION
AND FOUND OUT THAT THE OWNERS (ARABIANS FROM THE GULF REGION) HAVE
WITHDRAWN SINCE THEY ARE AWARE OF THE IMPLECATION OF THEIR DEEDS. HENCE, WE DECIDED
NOT TO OFFICIALLY ANNOUNCE IT AS TO ENRICH OURSELVES WITH THESE FUNDS. MY
BROTHER, WE HAVE SUCCEEDED IN DEPOSITING THE BOXES WITH A REPUTABLE
SECURITY FIRM OVER HERE AND WE SHALL PROCEED TO CLEAR THEM ON YOUR ARRIVAL TO
ACCRA.
WE INTEND TO INVEST THESE FUNDS ABROAD THROUGH YOUR ASSISTANCE AND WE HAVE
AGREED TO GIVE YOU 25% OF THE TOTAL VALUE.
IT IS THEREFORE NECESSARY AT THIS STAGE THAT WE SPEAK OVER THE PHONE, AT
LEAST TO ENHANCE MUTUAL TRUST AND PROPER UNDERSTANDING. I WILL EXPECT YOUR
URGENT CALL ON: + 871 763593940. IT IS A SATTLITE PHONE AQUIRED PURPOSELY
FOR THIS TRANSACTION AS TO ENSURE SECURITY.
PLEASE CALL IMEEDIATELY AS TO ENABLE ME FURNISH YOU WITH MORE ELABORATE
DETAILS.
THANKS.
Akeem.
+871 763593940.
168 MILLIONEN US$? Dagegen sind die üblichen 20 - 35 Mio. echter Kinderkram. Eduard ist überwältigt und wünscht sofortigen Kontakt:
Dear Mr. Kamal,
I am very very m excited about the huge sum of 168,000,000 US$, that will be
42 Million Dollars for me if our deal succeeds! In my wildest dreams I never
expected to get rich so easily and I nearly got a heart attack!
You can be sure that everything will be handled with absolute discretion and
reliability.
Please allow me to introduce myself, I`m a man of wealth and taste.
I am Eduard Bauernfaenger, 45 years old owner and chairman of the Nepper &
Schlepper Pharmaceuticals GmbH & Co. KG in Hamburg-Georgswerder/Germany, a
very respected mID: [ID filtered]
I am very much interested in that deal because my company wants to make a
big investment in a Trollium mine in the former german colony Togo. Trollium
is an important mineral for the production of the Merkerit[TM] brain activity
enhancer, one of our major products. Therefore I will travel to Lome, the
capital of Togo within the next 10 days. From there it is not far from Ghana, so
we can arrange a meeting soon.
Despite other financial markets the rates for investment credits in Germany
are quite high and government grants and loans are very poor. It is just the
right time for your proposal, so please send me the further details ASAP.
Before we start discussing the details of the transaction I need of course
first some confirmation about your identity. Please send me a few documents
proving your identity and position at the Accra harbour authority.
Please fax the documents to the number listed below and email them as
attachments to me.
FAX +49-40-65492716 Faxnummer des "Democratic Movement of Ghana" in HH
Please keep the files small because there is only very limited space on the
email account.
There seems to be a problem while trying to contact you on your sattelite
phone, I always get errors like "net overloaded" or "net unreachable" on my GSM
cell phone.
Maybe it`s better that you contact me, please use this mobile number:
PHONE +49-173-7968297 siehe: http://210112.antispam.de/topic.php?&boa...&forum=11731516 (http://210112.antispam.de/topic.php?&board=210112&id=315287&forum=11731516)
I`m looking forward to your answer.
Yours sincerely
Eduard Bauernfaenger
Diese ewigen Telefonprobleme! Akeem meldete sich eine ganze Weile nicht, das macht Eduard echt nervös:
Dear Mr. Kamal,
have you received my email? Please respond ASAP.
Yours
Eduard Bauernfänger
Da, endlich eine Nachricht:
Dear Friend,
How are you,I am still trying to reach you,but your phone has been switch off,please let me have another number which i can reach you or please give me a call,i will be waiting to hear from you.
Akeem
Unser armer Akeem hat sich wohl die Fingerchen wund tefloniert und keiner ging ran. Selbstverständlich gibt es für alles eine vernünftige Erklärung und Alternativen:
Dear Mr. Kemal,
Do you feel good?
I am very sorry that you could not reach me, but I am at an important
pharmacological congress in Berlin. I was in hurry so I forgot my cell phone at
home.
A member of my staff who attended me gave me his, the numer of that phone
is: +49-172-121720. Vodafone Stars http://210112.antispam.de/topic.php?&board=210112&id=301628&forum=11731516
Here in Berlin I stay at the famous Stunden Hotel, my rooms
phone/fax numer is: +49 - 30 - 4 47 90 53. Faxgerät der Ghanaischen Botschaft
I`ll be there not before late afternoon. Have you send me the demanded
documents of your identity and position? If not, you may send them to hotels fax
number and my email adress.
I have attached you some pictures of me and a copy of my passport to this
email. You can then easily recognize me when I come to Accra.
Yours faithfully
Eduard Bauerfänger
Die Bilderchen sind nur willkürlich aus den System-Verzeichnis zusammengeklaubte DLLs, die mit sprechenden Namen und der merkwürdigen Endung ".ppp" versehen wurden. Natürlich kann Mr. Kamal wenig damit anfangen, dafür schrub er gleich 3 Mal:
Dear Brother,
I have tried many times again to reach you but to no avail. However, Iwill continue till I get through. Unfortunately I cannot open your picture attachments. Maybe, you can change the programme you use in saving them.
Mr. Eduard, I have decided with utmost trust to give you the site of the Security Company where the consignments are kept so that you can access the details by yourself. The site is: http://www.goldcoastvaults.com Clickon enter to take you to the second page where you will need the NAME and PIN to access the account details. The NAME is (Akeem) and the PIN is 042/ak/vd/04-03.
Please check the details and get back to me. You can call me with your hotel number but not amobile phone.
Thanks.
Akeem.
Wie immer ist Ede um Ausreden nicht verlegen. Leider funktioniert aber auch der versprochene Zugang nicht:
Dear Mr. Kamal,
how are you?
The pictures I sent to you are in proprietary Pixy Picture Publisher (.ppp)
format, this is the only available format of my laptops handscanner and I am
incapable of converting them before I be back in my office.
Sorry, I dID: [ID filtered]
a special viewer programm in this email so you can view them instant.
Mr. Kamal thank you for your great trust in me, I just visited the security
companys website.
I clicked on `login` and then filled the first form (Deposit Details) with
the Client Name (Akeem) and Client PIN# (042/ak/vd/04-03) you gave me, but it
dID: [ID filtered]
Webpage saID: [ID filtered]
greetings
Eduard Bauernfänger
Hilfsbereit wie er nun mal ist, hat Ede gleich ein passendes Progrämmchen an die mail gehängt. Der "PictureViewer.exe" ist aber nichts anderes als ein IBS Dialer, dem mit Hilfe des Ressource Hacker Tools ein anderes Programmicon und ein passender splash screen anstelle des anzüglichen Originals untergeschoben wurde. Wird Akeem darauf reinfallen? Warum will er unbedingt mit Ede telefonieren?
Dear Mr. Eduard,
Hope all is well with you and your entire business. I am sorry I was not with my file when I gave you the details of the consignemnt. Please go back on the site: http://www.goldcoastvaults.com and use the name (AKEEM KAMAL) and PIN (04242003) to access our details.
Please confirm as soon as you get through so that we can move on next line of action.
Thanks.
A. Kamal.
Schade, er lässt sich zumindest nichts anmerken. Schauen wir uns dafür aber mal die "Security Company" im Detail an. Der whois-eintrag sieht nicht ganz koscher aus:
Registrant:
Bayo Lawal
12 Adeola Odeku Street
off Admirality Way
Lekki, 0000
United Kingdom
Registered through: NewDomainReg
Domain Name: GOLDCOASTVAULTS.COM
Created on: 17-Jun-03
Expires on: 17-Jun-04
Last Updated on: 19-Jun-03
Administrative Contact:
Lawal, Bayo poor [at] spamvictim.tld
12 Adeola Odeku Street
off Admirality Way
Lekki, 0000
United Kingdom
00234 000 Fax --
Hm, noch nicht einmal 14 Tage alt, diese Firma.
Die Vorwahl 00234 ist AFAIK Nigeria.
Ob es in England wohl eine Stadt namens "Lekki" gibt, mit der "Adeola Odeku Street"?
Ich glaube nicht...
Aber Ede lässt sich von solchen Kleinigkeiten nicht beirren, schliesslich winkt die ganz grosse Kohle:
Dear. Mr. Kamel,
everything is fine with me and my business. The congress brought me a big order from the Bundesamt für Merkbefreiung (BafMbf) for 50,000 units Merkerit[tm], so I am very satisfied.
Hope you also feel fine.
I just visited security companys website, now it works. Everything is looking very good, the company seems to be very trustworthy.
Do you have any photos of the trunks? What will be our next steps?
kind regards
Eduard
--
»Bedeutet der Smiley jetzt, daß Du es verstanden hast und Dich darüber freust oder daß Du debil grinst, weil Du den Unterschied nicht kapierst?«
Peter Brülls zu Mathias Gabel in <5ila2v$9hb [at] news.Informatik.Uni-Oldenburg.DE>
DEAR FRIEND,
I AM MAKING THIS CONTACT BASED ON MY PRESUMED RELIANCE, AFTER GOING
THROUGH A BRIEF PROFILE OF YOUR COMPANY.
I AM ALHAJI AKEEM KAMAL FROM WEST-AFRICA (A GHANAIAN). I AM A CUSTOMS
SUPERINTENDENT OFFICER ATTACHE TO THE GHANA PORTS AND HARBOURS
AUTHORITY.
TEMA, AND I AM CONTACTING YOU TO ESTABLISH THIS RELATIONSHIP WITH YOU
IN BENEVOLENT SPIRIT AS TO ENHANCE IMMEDIATE RESOLUTION TO AN OPPORTUNITY
RIGHTLY AT HAND.
IT WAS MORE LIKE A DREAM WHEN TWO OF MY COLLEAGUES I INTERCEPTED THREE
(3) GIGANTIC TRUNK BOXES AT OUR SEA PORT IN THE EARLY HOURS OF 2ND
APRIL, 2003 ON TRANSIT TO CAIRO, EGYPT.
SUBSEQUENTLY, THE OWNERS WHOM ACCORDING TO OUR INVESTIGATIONS WERE
ARABIANS FROM THE GULF REGION (SOME OF THE SADAM HUSSAIN`S ENTOURRAGE)
WITHDREW FROM THE OPERATION SINCE THEY OBVIOUSELY STAND NO CHANCE OF
DEFENDING THE SOURCE OF THE CONTENT OF THESE BOXES.
ALSO, AS A MATTER OF FACT THAT THIS SAME PEOPLE ARE ACCORDING TO OUR
INVESTIGATION FACING CHARGES OF LOOTS AND HUMAN-RIGHT ABUSES IN IRAQ.
AFETR DUE INVESTIGATIONS AND CLEARIFICATIONS, WE HAVE DECIDED TO OWN
THESE BOXES WHICH`S CONTENT I CANNOT DISCLOSE NOW FOR SECURITY REASONS,
TO OURSELVES. SINCE WE HAVE EARLIER DECIDED NOT TO OFFCIALLY ANNOUNCE
THIS INTERCEPTION FOR ABVIOUS REASON
WE URGENTLY NEED AN INTERNATIONAL ASSISTANCE AS TO ENABLE US TRANSFER
THESE BOXES AND THEIR CONTENTS ABROAD. MEANWHILE, I AM ONLY SENDING
THIS PROPOSAL TO ASCERTAIN YOUR INTREST AND ONCE POSITIVE RESPONCE IS
RECIEVED FROM YOU, ASSURING ME OF YOUR UTMOST COOPERATION, SINCERITY
AND CONFIDENTIALITY, I WILL PROCEED TO FURNISH YOU WITH ALL DETAILS AND HOW
WE INTEND TO CARRY OUT THIS RISK FREE TRANSACTION WITHOUT FURTHER DELAY.
THANKS FOR YOUR ANTICIPATED COOPERATION.
ALHAJI AKEEM KAMAL.
Drei grosse Schatztruhen? Das macht meinen alten Freund und Kupferstecher Eduard Bauernfänger, seines Zeichens Eigentümer der Nepper & Schlepper GmbH & Co. KG und mit der wohlklingenden mail-domain `betriebsdirektor.de` ausgestattet (gmx-Fundomain), latürnich äusserst (neu)gierig:
Dear Mr. Kamal,
your interesting email made me very courious, what can I do for you? Please
send me further details.
kind regards
Euduard Bauernfänger
Die Antwort lässt nicht lange auf sich warten:
DEAR BROTHER,
THANK YOU VERY MUCH FOR YOUR PROMPT RESPONSE TO MY BUSINESS PROPOSAL. I
APPRECIATE THE BRIEF CONTENT OF YOUR MAIL, WHICH CLEARLY INDICATE YOUR
WILLINGNESS TO ASSIST US EFFECTIVELY IN REALIZING THIS GOLDEN OPPORTUNITY.
I HAVE PRAYED AND COMMITTED THIS TRANSACTION INTO THE HANDS OF GOD
ALMIGHTY AND I STRONGLY BELIEVE THAT THIS RELATIONSHIP I AM ESTABLISHING
WITH YOU ON TRUST AND IN BENEVOLENT SPIRIT WILL NOT LEAD TO JEOPARDY, RATHER, YOUR
UTMOST COOPERATION, SINSERITY AND CONFIDENTIALITY WILL BE GIVEN TO ME IN
COURSE OF THIS TRANSACTION AS YOU CLEARLY INDICATED IN YOUR MAIL.
THERE WILL BE NEED FOR YOU TO COME OVER TO ACCRA GHANA IMMEDIATELY FOR WE
TO MEET AND DISCUSS OUR HEARTS AND ALL MODALITIES, ENHANCING IMMEDIATE
COMMENCEMENT OF THIS TRANSACTION.
IN CONFIDENCE, I AM REVEALING TO YOU THAT WHAT WE HAVE INTERCEPTED IS
THREE (3) METAL BOXES FULL OF UNITED STATES PROOF MINT NOTES IN HUNDRED
BILLS, AMOUNTING TO $168 MILLION. WE HAVE CAREFULLY CONDUCTED OUR INVESTIGATION
AND FOUND OUT THAT THE OWNERS (ARABIANS FROM THE GULF REGION) HAVE
WITHDRAWN SINCE THEY ARE AWARE OF THE IMPLECATION OF THEIR DEEDS. HENCE, WE DECIDED
NOT TO OFFICIALLY ANNOUNCE IT AS TO ENRICH OURSELVES WITH THESE FUNDS. MY
BROTHER, WE HAVE SUCCEEDED IN DEPOSITING THE BOXES WITH A REPUTABLE
SECURITY FIRM OVER HERE AND WE SHALL PROCEED TO CLEAR THEM ON YOUR ARRIVAL TO
ACCRA.
WE INTEND TO INVEST THESE FUNDS ABROAD THROUGH YOUR ASSISTANCE AND WE HAVE
AGREED TO GIVE YOU 25% OF THE TOTAL VALUE.
IT IS THEREFORE NECESSARY AT THIS STAGE THAT WE SPEAK OVER THE PHONE, AT
LEAST TO ENHANCE MUTUAL TRUST AND PROPER UNDERSTANDING. I WILL EXPECT YOUR
URGENT CALL ON: + 871 763593940. IT IS A SATTLITE PHONE AQUIRED PURPOSELY
FOR THIS TRANSACTION AS TO ENSURE SECURITY.
PLEASE CALL IMEEDIATELY AS TO ENABLE ME FURNISH YOU WITH MORE ELABORATE
DETAILS.
THANKS.
Akeem.
+871 763593940.
168 MILLIONEN US$? Dagegen sind die üblichen 20 - 35 Mio. echter Kinderkram. Eduard ist überwältigt und wünscht sofortigen Kontakt:
Dear Mr. Kamal,
I am very very m excited about the huge sum of 168,000,000 US$, that will be
42 Million Dollars for me if our deal succeeds! In my wildest dreams I never
expected to get rich so easily and I nearly got a heart attack!
You can be sure that everything will be handled with absolute discretion and
reliability.
Please allow me to introduce myself, I`m a man of wealth and taste.
I am Eduard Bauernfaenger, 45 years old owner and chairman of the Nepper &
Schlepper Pharmaceuticals GmbH & Co. KG in Hamburg-Georgswerder/Germany, a
very respected mID: [ID filtered]
I am very much interested in that deal because my company wants to make a
big investment in a Trollium mine in the former german colony Togo. Trollium
is an important mineral for the production of the Merkerit[TM] brain activity
enhancer, one of our major products. Therefore I will travel to Lome, the
capital of Togo within the next 10 days. From there it is not far from Ghana, so
we can arrange a meeting soon.
Despite other financial markets the rates for investment credits in Germany
are quite high and government grants and loans are very poor. It is just the
right time for your proposal, so please send me the further details ASAP.
Before we start discussing the details of the transaction I need of course
first some confirmation about your identity. Please send me a few documents
proving your identity and position at the Accra harbour authority.
Please fax the documents to the number listed below and email them as
attachments to me.
FAX +49-40-65492716 Faxnummer des "Democratic Movement of Ghana" in HH
Please keep the files small because there is only very limited space on the
email account.
There seems to be a problem while trying to contact you on your sattelite
phone, I always get errors like "net overloaded" or "net unreachable" on my GSM
cell phone.
Maybe it`s better that you contact me, please use this mobile number:
PHONE +49-173-7968297 siehe: http://210112.antispam.de/topic.php?&boa...&forum=11731516 (http://210112.antispam.de/topic.php?&board=210112&id=315287&forum=11731516)
I`m looking forward to your answer.
Yours sincerely
Eduard Bauernfaenger
Diese ewigen Telefonprobleme! Akeem meldete sich eine ganze Weile nicht, das macht Eduard echt nervös:
Dear Mr. Kamal,
have you received my email? Please respond ASAP.
Yours
Eduard Bauernfänger
Da, endlich eine Nachricht:
Dear Friend,
How are you,I am still trying to reach you,but your phone has been switch off,please let me have another number which i can reach you or please give me a call,i will be waiting to hear from you.
Akeem
Unser armer Akeem hat sich wohl die Fingerchen wund tefloniert und keiner ging ran. Selbstverständlich gibt es für alles eine vernünftige Erklärung und Alternativen:
Dear Mr. Kemal,
Do you feel good?
I am very sorry that you could not reach me, but I am at an important
pharmacological congress in Berlin. I was in hurry so I forgot my cell phone at
home.
A member of my staff who attended me gave me his, the numer of that phone
is: +49-172-121720. Vodafone Stars http://210112.antispam.de/topic.php?&board=210112&id=301628&forum=11731516
Here in Berlin I stay at the famous Stunden Hotel, my rooms
phone/fax numer is: +49 - 30 - 4 47 90 53. Faxgerät der Ghanaischen Botschaft
I`ll be there not before late afternoon. Have you send me the demanded
documents of your identity and position? If not, you may send them to hotels fax
number and my email adress.
I have attached you some pictures of me and a copy of my passport to this
email. You can then easily recognize me when I come to Accra.
Yours faithfully
Eduard Bauerfänger
Die Bilderchen sind nur willkürlich aus den System-Verzeichnis zusammengeklaubte DLLs, die mit sprechenden Namen und der merkwürdigen Endung ".ppp" versehen wurden. Natürlich kann Mr. Kamal wenig damit anfangen, dafür schrub er gleich 3 Mal:
Dear Brother,
I have tried many times again to reach you but to no avail. However, Iwill continue till I get through. Unfortunately I cannot open your picture attachments. Maybe, you can change the programme you use in saving them.
Mr. Eduard, I have decided with utmost trust to give you the site of the Security Company where the consignments are kept so that you can access the details by yourself. The site is: http://www.goldcoastvaults.com Clickon enter to take you to the second page where you will need the NAME and PIN to access the account details. The NAME is (Akeem) and the PIN is 042/ak/vd/04-03.
Please check the details and get back to me. You can call me with your hotel number but not amobile phone.
Thanks.
Akeem.
Wie immer ist Ede um Ausreden nicht verlegen. Leider funktioniert aber auch der versprochene Zugang nicht:
Dear Mr. Kamal,
how are you?
The pictures I sent to you are in proprietary Pixy Picture Publisher (.ppp)
format, this is the only available format of my laptops handscanner and I am
incapable of converting them before I be back in my office.
Sorry, I dID: [ID filtered]
a special viewer programm in this email so you can view them instant.
Mr. Kamal thank you for your great trust in me, I just visited the security
companys website.
I clicked on `login` and then filled the first form (Deposit Details) with
the Client Name (Akeem) and Client PIN# (042/ak/vd/04-03) you gave me, but it
dID: [ID filtered]
Webpage saID: [ID filtered]
greetings
Eduard Bauernfänger
Hilfsbereit wie er nun mal ist, hat Ede gleich ein passendes Progrämmchen an die mail gehängt. Der "PictureViewer.exe" ist aber nichts anderes als ein IBS Dialer, dem mit Hilfe des Ressource Hacker Tools ein anderes Programmicon und ein passender splash screen anstelle des anzüglichen Originals untergeschoben wurde. Wird Akeem darauf reinfallen? Warum will er unbedingt mit Ede telefonieren?
Dear Mr. Eduard,
Hope all is well with you and your entire business. I am sorry I was not with my file when I gave you the details of the consignemnt. Please go back on the site: http://www.goldcoastvaults.com and use the name (AKEEM KAMAL) and PIN (04242003) to access our details.
Please confirm as soon as you get through so that we can move on next line of action.
Thanks.
A. Kamal.
Schade, er lässt sich zumindest nichts anmerken. Schauen wir uns dafür aber mal die "Security Company" im Detail an. Der whois-eintrag sieht nicht ganz koscher aus:
Registrant:
Bayo Lawal
12 Adeola Odeku Street
off Admirality Way
Lekki, 0000
United Kingdom
Registered through: NewDomainReg
Domain Name: GOLDCOASTVAULTS.COM
Created on: 17-Jun-03
Expires on: 17-Jun-04
Last Updated on: 19-Jun-03
Administrative Contact:
Lawal, Bayo poor [at] spamvictim.tld
12 Adeola Odeku Street
off Admirality Way
Lekki, 0000
United Kingdom
00234 000 Fax --
Hm, noch nicht einmal 14 Tage alt, diese Firma.
Die Vorwahl 00234 ist AFAIK Nigeria.
Ob es in England wohl eine Stadt namens "Lekki" gibt, mit der "Adeola Odeku Street"?
Ich glaube nicht...
Aber Ede lässt sich von solchen Kleinigkeiten nicht beirren, schliesslich winkt die ganz grosse Kohle:
Dear. Mr. Kamel,
everything is fine with me and my business. The congress brought me a big order from the Bundesamt für Merkbefreiung (BafMbf) for 50,000 units Merkerit[tm], so I am very satisfied.
Hope you also feel fine.
I just visited security companys website, now it works. Everything is looking very good, the company seems to be very trustworthy.
Do you have any photos of the trunks? What will be our next steps?
kind regards
Eduard
--
»Bedeutet der Smiley jetzt, daß Du es verstanden hast und Dich darüber freust oder daß Du debil grinst, weil Du den Unterschied nicht kapierst?«
Peter Brülls zu Mathias Gabel in <5ila2v$9hb [at] news.Informatik.Uni-Oldenburg.DE>