Password phishing emails originating from West Africa

[FrumpyBB]

Dear Account User,
We require you to verify your YAHOO! account, because we are about to close some email registered under yahoo which are causing our system to malfunction due to none usage of these emails. To avoid YAHOO! closing your email, do verify your email below.

For immediate access to verification, please click on the link below:


Click Here To Upgrade

This is to improve our service quality. We are sorry for inconveniences
Case number: 894162450
Property: Account Security
Copyright 2014 Yahoo! Inc. All rights reserved.



From: "Yahoo! Alert"<landsurvey@suddenlinkmail.com>
To: me
Subject: Verification!

[FrumpyBB]

Dear Account User,
We require you to verify your YAHOO! account, because we are about to close some email registered under yahoo which are causing our system to malfunction due to none usage of these emails. To avoid YAHOO! closing your email, do verify your email below.

For immediate access to verification, please click on the link below:


Click Here To Upgrade

This is to improve our service quality. We are sorry for inconveniences
Case number: 894162450
Property: Account Security
Copyright 2014 Yahoo! Inc. All rights reserved.



Received: from brandex ([191.234.48.108]) by txofep01.suddenlink.net
From: "Yahoo! Tech"<dgalbert@suddenlink.net>
Subject: Verification!
X-Mailer: Microsoft Outlook Express 6.00.2600.0000

[FrumpyBB]

Your Account Would be Blocked!
Your account Would be Temporary Blocked due to system error CODE: YB261729285.
If you would like to continue using your Email Address,
Verify Your Account Now
YOU WILL COMPLETELY LOSE YOUR EMAIL ADDRESS IF NO ACTION IS TAKEN.
Sincerely,
Yahoo! Inc ©2014 All Rights Reserved

From: "Yahoo!"<chcollier@suddenlink.net>
Subject: Warning!

[FrumpyBB]

same text, from

From: "Yahoo!"<Bryangreenwood@suddenlink.net>
Subject: Warning!

[FrumpyBB]

same text, from

From: "Yahoo!"<billcarl@suddenlink.net>
Subject: Warning!

[FrumpyBB]

Dear Account User,
We require you to verify your YAHOO! account, because we are about to close some email registered under yahoo which are causing our system to malfunction due to none usage of these emails. To avoid YAHOO! closing your email, do verify your email below.

For immediate access to verification, please click on the link below:


Click Here To Upgrade

This is to improve our service quality. We are sorry for inconveniences
Case number: 894162450
Property: Account Security
Copyright 2014 Yahoo! Inc. All rights reserved.


From: "Yahoo!"<joe_doucet@suddenlink.net>
Subject: Confirmation!

[FrumpyBB]

Dear user Click here to secure your account from fraudulent activity.

YOU WILL COMPLETELY LOSE YOUR EMAIL ADDRESS IF NO ACTION IS TAKEN.

Sincerely,
Yahoo! Inc ©2014 All Rights Reserved


Received: from s8610 ([191.238.243.19]) by txofep01.suddenlink.net
From: "Yahoo! Tech"<broomea@suddenlink.net>
To: me
Subject: Last Warning!!!

[JulieNP]

I think my last baited scammer is still feeling the effects

IMPORTANT - Customer Service Message
From Fifth Third Bank jaimee36@gmail.com hide details
Bcc
We have currently terminated your access to the Fifth Third Internet Banking.

Reason: You tried logging in several times with a wrong password.
If you believe this is an error, please verify your informations immediately by clicking on the 'Log In' button below to fix the problem.


If you have any issues/questions please contact our customer service!

Visit our Help/Security page for more security advice(s)

[FrumpyBB]

I tried sending you this document earlier but noticed the failure delivery so I had to re-send via Google doc attachment.

Click here to view the file document. => siteflippingriches.net/doc/graph/index.htm >=evil linky!

Thank You


X-Rocket-Received: from GOLD (natewright35@41.138.175.163 with plain [98.138.105.21])
From: "Nate" <natewright35@yahoo.com>
Subject: I HAVE AN IMPORTANT MESSAGE FOR YOU

IP: 41.138.175.163
Country: Nigeria
City: Lagos

[FrumpyBB]

Dear user Click here to secure your account from fraudulent activity.

YOU WILL COMPLETELY LOSE YOUR EMAIL ADDRESS IF NO ACTION IS TAKEN.

Sincerely,
Yahoo! Inc ©2014 All Rights Reserved


Received: from svrfenomax ([69.70.248.90])
From: "Yahoo! Inc"<crhelms@suddenlink.net>
To: me
Subject: Last Warning!!

[spanky]

Received this ChristianMingle fakey email with 3 links to 3 different dating sites on it. Links are login phishing links for ChristianMingle, BBPeopleMeet and LDSPlanet. The email was addressed to 7 men and 9 women. Careless mugu(s) because the incomplete text at the bottom of the email states that this was received due to being a subscriber to Senior People Meet (not so) and why coming from fake ChristianMingle email address? Mugus are such Morons!!!

------------------------------------

From: christian minglesuppot <christianminglesuppott@hotmail.com> <--
Date: Wed, 18 Jun 2014

You have a New Message:

Find out who sent you a new message and is waiting for your response.

BBPeopleMeet.com - Take a look at all the BBW profiles on BBPeopleMeet! At this site, there's someone for everyone.Look Today

LDSPlanet.com - Date within the faith! Find a good Mormon woman at LDSPlanet.com.Look Today

You have received this email because you are a registered SeniorPeopleMeet. com dating site subscriber. You have agreed under member terms and conditions to accept emails from our service regarding offers and service updates. 

You can change your email delivery options or unsubscribe at anytime if you click here and follow the instructions. Or log into your account and click on "Alerts" and  (and what, mugu??? )

------------------------------------

1) ChristianMingle phishing link reads as follows:

shakibaielts.ir/fa/wp-includes/images/smilies/Untitled-2.html?

2) BBPeopleMeet phishing link reads as follows:

bbpeoplemeet.com/convert/index.cfm?sid=182&tsid=21&cu=AD59383951X105&EmailGUID=566cb754-06c6-41d4-97cd-46d503e7e211?

3) LDS phishing link reads as follows:

ldsplanet.com/convert/index.cfm?sid=182&tsid=21&cu=AD59383951X105&EmailGUID=566cb754-06c6-41d4-97cd-46d503e7e211?

[FrumpyBB]

Dear user Click here to secure your account from fraudulent activity.

YOU WILL COMPLETELY LOSE YOUR EMAIL ADDRESS IF NO ACTION IS TAKEN.

Sincerely,
Yahoo! Inc ©2014 All Rights Reserved


Received: from svrfenomax ([69.70.248.90])
From: "Yahoo! Inc"<d.rainbow@suddenlinkmail.com>
Subject: Last Warning!

[FrumpyBB]

Dear user Click here to secure your account from fraudulent activity.

YOU WILL COMPLETELY LOSE YOUR EMAIL ADDRESS IF NO ACTION IS TAKEN.

Sincerely,
Yahoo! Inc ©2014 All Rights Reserved


Received: from svrfenomax ([69.70.248.90])
From: "Yahoo! Inc"<gttfarms@suddenlink.net>
To: me

[FrumpyBB]

You would be blocked from sending and receiving emails if not confirmed within 24hrs of receiving this automated mail.

You are required to update through the link below.

UPDATE

Thanks for using Yahoo!
Yahoo Team.


From: "Email Services" <caldwellphillip2000@yahoo.com>
Subject: Account Upgrade

[FrumpyBB]

Yahoo!

Dear User,

Our Technical service has noticed suspicious activities on your email account and put a block on it,

For Immediate access Click Here To protect and reactivation of your email.



Received: from Mason-TS ([66.183.171.95])
From: "Yahoo! Inc"<carter6@suddenlink.net>
To: me
Subject: Warning!!!