[ale] ATT email about some RIAA stuff

Lightner, Jeff JLightner at water.com
Fri Feb 14 13:19:49 EST 2014


Just an example.   The email I got from "Unicef Australia:

From: Unicef Australia [mailto:unicefservices at excite.fr]
Sent: Thursday, February 13, 2014 10:29 PM
To: Lightner, Jeff
Subject: job offer

Join International Programs For Charity by working directly from your computer as Charity Donation Officer with $3,000 monthly.
Send Your Full Name, Address, Date of Birth and phone number by email: unicefaustralia at in.com or Click here to Apply online: http://www.keeclinic.com/bbs//data/employ/

Kelly Scott Mullen
HR Manager
International Programs For Charity
Unicef Donations
Headers for the Unicef email:
^^^END OF EMAIL^^^

Notice that in the above Unicef Australia is supposedly sending from an Excite email in France?
Moreover the reply email address they list is at in.com.
And to cap it they have the online application at something called Keeclinic.com.   3 different visible domains in the email itself WITHOUT looking at the full headers?

By the way in many emails links embedded might show one thing (e.g. unicefaustralia at in.com)  but when you hover over the link you'll see it is pointing to something quite different.  This email wasn't smart enough even to do that.

Then when I do look at full headers of the email I see that the email actually claimed to come originally from Brazil.

Those Unicef folks from Oz sure get around don't they?

Received: from <our internal mail server - I obfuscated here>
 <internal IP obfuscated> with Microsoft SMTP Server (TLS) id 14.1.355.2; Thu, 13 Feb 2014
 22:29:14 -0500
Received: from sec23.secrel.com.br (201.49.18.84) by webmail.water.com
 <internal IP obfuscated> with Microsoft SMTP Server id 14.1.355.2; Thu, 13 Feb 2014
 22:28:37 -0500
Received: from secg71.secrel.com.br (secg71.secrel.com.br [200.233.70.101])     by
 sec23.secrel.com.br (Postfix) with ESMTP id F0907E2965 for
 <jlightner at water.com>; Fri, 14 Feb 2014 00:26:09 -0300 (BRT)
Received: by secg71.secrel.com.br (Postfix, from userid 1021)   id E856A11DE4B;
 Fri, 14 Feb 2014 00:25:12 -0300 (BRT)
To: <jlightner at water.com>
Subject: job offer
From: Unicef Australia <unicefservices at excite.fr>
Message-ID: <1307461111.823 at excite.fr>
MIME-Version: 1.0
Content-Type: text/html
Content-Transfer-Encoding: 8bit
Date: Fri, 14 Feb 2014 00:25:12 -0300
Return-Path: avipecftp at secg71.secrel.com.br

Don't get me wrong some marketing/survey fluff will have various things in the visible portion of the mail because companies use 3rd parties for marketing email and surveys but usually you don't see the kind of variation this one had to this degree just in the visible portion of the email and it will NOT usually be so at variance with the full headers.

Of course those 3rd parties will tell you they are "legitimate" rather than spam.  In my view they're not phishing like the above but they are still "spam" if I didn't ask for the marketing.  It amuses me how often one of these 3rd party marketing mailers will try to convince us that they shouldn't be blocked in our spam filters.  Just because they WANT to sell something and Congress allows "people you do business with" to  SEND "marketing" to you is no reason you have to ACCEPT the spam.






-----Original Message-----
From: ale-bounces at ale.org [mailto:ale-bounces at ale.org] On Behalf Of Jay Lozier
Sent: Friday, February 14, 2014 12:54 PM
To: ale at ale.org
Subject: Re: [ale] ATT email about some RIAA stuff

Googling the six strikes I found the following two articles discussing the typical form email sent by Comcast and Time Warner:

http://torrentfreak.com/comcasts-six-strikes-email-with-infringement-details-surfaces-130303/
http://torrentfreak.com/six-strikes-copyright-alert-warns-subscribers-for-dangerous-p2p-software-130617/

Neither letter mentions a $35 fee for anyone to snoop on your computer.

Jay

On 02/14/2014 12:34 PM, Greg Clifton wrote:
> I'm with JL on this. Most likely a spam/phishing email. Paying an
> unknown entity $35 to snoop your computer seems like a monumentally
> dumb thing for anybody on this list to submit to.
>
>
> On Fri, Feb 14, 2014 at 12:25 PM, Jeff Hubbs <jhubbslist at att.net
> <mailto:jhubbslist at att.net>> wrote:
>
>     Just in the last week I've gotten three emails for what I think
>     are fake jobs - real companies (Norfolk Southern, Aflac, Adecco)
>     but sketchy premises. I did apply for an NS job in December and
>     the email I got looked similar to the acknowledgement email I'd
>     gotten, but it wanted me to go to a non-NS site to do an "online
>     assessment" so I sent a message to the HR help desk asking if this
>     were legit.
>
>
>     On 2/14/14, 8:31 AM, Lightner, Jeff wrote:
>>
>>     You might also want to examine the headers of the email to verify
>>     it actually came from AT&T.
>>
>>     Any email that tells me I have a problem I didn't know I had and
>>     then suggests I can fix it by paying a fee to someone immediately
>>     makes me think it is spam/phishing.
>>
>>     Speaking of which - Unicef Australia is offering to pay me
>>     $3000/month to process charity payments. I'll be rich soon...
>>
>>     *From:*ale-bounces at ale.org <mailto:ale-bounces at ale.org>
>>     [mailto:ale-bounces at ale.org] *On Behalf Of *dev null zero two
>>     *Sent:* Thursday, February 13, 2014 11:15 PM
>>     *To:* Atlanta Linux Enthusiasts
>>     *Subject:* Re: [ale] ATT email about some RIAA stuff
>>
>>     ignore it. it's the Copyright Alert System. you'll only run into
>>     issues if it's your 5th or 6th strike.
>>
>>     Sent from my mobile. Please excuse the brevity, spelling, and
>>     punctuation.
>>
>>     On Feb 13, 2014 11:03 PM, "Narahari 'n' Savitha"
>>     <savithari at gmail.com <mailto:savithari at gmail.com>> wrote:
>>
>>     Friends:
>>
>>     I received an email from ATT saying that some RIAA guy thinks I
>>     am sharing some program especially some.mp3 file.
>>
>>     I searched my Mac, my daughter's Dell laptop and my spouse's
>>     laptop for that file. I found nothing with that name.
>>
>>     I searched multiple times but nothing.
>>
>>     We dont do any kind of P2P software (not knowingly atleast) but
>>     they are sending us this.
>>
>>     What are my options ?
>>
>>     Take the tutorial as ATT suggests, I dont like this.
>>
>>     Do the independent review as said in the email, but costs me $35
>>     and I am not sure what this gets me.
>>
>>     Leave ATT and go to Comcast (they are the only two providers in
>>     my area)
>>
>>     Choose a Cell Phone provider based SIM kind of an internet access
>>     over 4G I guess.
>>
>>     Use a dialup based connection but I dont have phone connection at
>>     home.
>>
>>     Any other ideas, are welcome.
>>
>>     Please help.
>>
>>     -Narahari
>>
>>
>>     _______________________________________________
>>     Ale mailing list
>>     Ale at ale.org <mailto:Ale at ale.org>
>>     http://mail.ale.org/mailman/listinfo/ale
>>     See JOBS, ANNOUNCE and SCHOOLS lists at
>>     http://mail.ale.org/mailman/listinfo
>>
>>     Athena(r), Created for the Cause(tm)
>>
>>     Making a Difference in the Fight Against Breast Cancer
>>
>>     *How and Why I Should Support Bottled Water!
>>     *Do not relinquish your right to choose bottled water as a
>>     healthy alternative to beverages that contain sugar, calories,
>>     etc. Your support of bottled water will make a difference! Your
>>     signatures count! Go to
>>     http://www.bottledwatermatters.org/luv-bottledwater-iframe/dswaters
>>     and sign a petition to support your right to always choose
>>     bottled water. Help fight federal and state issues, such as
>>     bottle deposits (or taxes) and organizations that want to ban the
>>     sale of bottled water. Support community curbside recycling
>>     programs. Support bottled water as a healthy way to maintain
>>     proper hydration. Our goal is 50,000 signatures. Share this
>>     petition with your friends and family today!
>>
>>     ---------------------------------
>>     CONFIDENTIALITY NOTICE: This e-mail may contain privileged or
>>     confidential information and is for the sole use of the intended
>>     recipient(s). If you are not the intended recipient, any
>>     disclosure, copying, distribution, or use of the contents of this
>>     information is prohibited and may be unlawful. If you have
>>     received this electronic transmission in error, please reply
>>     immediately to the sender that you have received the message in
>>     error, and delete it. Thank you.
>>     ----------------------------------
>>
>>
>>
>>     _______________________________________________
>>     Ale mailing list
>>     Ale at ale.org  <mailto:Ale at ale.org>
>>     http://mail.ale.org/mailman/listinfo/ale
>>     See JOBS, ANNOUNCE and SCHOOLS lists at
>>     http://mail.ale.org/mailman/listinfo
>
>
>     _______________________________________________
>     Ale mailing list
>     Ale at ale.org <mailto:Ale at ale.org>
>     http://mail.ale.org/mailman/listinfo/ale
>     See JOBS, ANNOUNCE and SCHOOLS lists at
>     http://mail.ale.org/mailman/listinfo
>
>
>
>
> _______________________________________________
> Ale mailing list
> Ale at ale.org
> http://mail.ale.org/mailman/listinfo/ale
> See JOBS, ANNOUNCE and SCHOOLS lists at
> http://mail.ale.org/mailman/listinfo

--
Jay Lozier
jslozier at gmail.com

_______________________________________________
Ale mailing list
Ale at ale.org
http://mail.ale.org/mailman/listinfo/ale
See JOBS, ANNOUNCE and SCHOOLS lists at
http://mail.ale.org/mailman/listinfo




Athena(r), Created for the Cause(tm)
Making a Difference in the Fight Against Breast Cancer

---------------------------------
CONFIDENTIALITY NOTICE: This e-mail may contain privileged or confidential information and is for the sole use of the intended recipient(s). If you are not the intended recipient, any disclosure, copying, distribution, or use of the contents of this information is prohibited and may be unlawful. If you have received this electronic transmission in error, please reply immediately to the sender that you have received the message in error, and delete it. Thank you.
----------------------------------




More information about the Ale mailing list