Phun with Phishing: Thanks Adex Mol!

Status
Not open for further replies.

Qiranworms

Fully Optimized
Messages
1,635
Note: This post is LONG!

For those of you who don't know what Phishing is (not the band, the fraud), it's slang for a type of spam that tries to get hold of your credit card or banking information by saying something like "This is such and such credit card corperation, there has been a problem with your account. Please give the following information and we will attempt to rectify the issue." Naturally, those who fall for it get cleaned out.

From http://www.antiphishing.org/,

What is Phishing?
Phishing attacks use 'spoofed' e-mails and fraudulent websites designed to fool recipients into divulging personal financial data such as credit card numbers, account usernames and passwords, social security numbers, etc. By hijacking the trusted brands of well-known banks, online retailers and credit card companies, phishers are able to convince up to 5% of recipients to respond to them.

I've been getting a lot of spam in general lately, and I recently got a particularly interesting and pathetic phishing attempt. Here posted is an interesting conversation I have had with 'Adex Mol'.

Just a note, my commentary is in this blue I'm using now.

Emails from Adex Mol are in this color.
Emails from me back to him are in this color.
Emails from his "lawyer" are in this color.



mr adex mol
Union Bank of Nig. Plc
REPLY(badmusig@sify.com)
ATTN:

Perhaps, this proposal might come to you as a surprise, since you have
neither met nor
known me before. (note: an example of the bad grammar that is exhibited throughout the entire series of emails)My name is Mr.adex mol, staff of Union Bank of Nigeria.

Some times in 30 January 2000, one of our Bank's esteemed customers
(Mr.mark
orstler) (note: Most Millionaires who have been alive in recent times can be found somewhere on the internet, but Mark Orstler must have kept quiet during his lifetime! I couldn't find him on Google anywhere!)

My client
died of excessve bleedng on admmssion in 1999. Before his sudden death
n the hospital, he was the Chief Executive
and Managing Director of Cross Atlantic Oil Company (note: again, couldn't find it)and he maintained
personal
account; both current and savings with us. As at the time of his death,
he has about
US$35 Million in both accounts. I was his personal Accountant.

After his death, several efforts were made to contact his Next of Kin
without success.
His Country's Embassy in Nigeria (As he is not from Nigeria) was also
contacted, who
after about three months got back to me, saying they could not locate mr
marks relatves. It was at this point a notification was sent to the
Nigerian
Government through the Central Bank and the Federal Finance Ministry
about Mr.
marks' Account and I got direction to place Mr. mark's money in a
special account
with the Central bank of Nigeria (C.B.N).

The Government, last week sent me a letter asking that If dont locate
the next of kin of mr mark is not found the fund will wll be claim by
them
as a matter of urgency,i have to contact anybody (and you chose me? I'm honored!) I can trust abroad to
assist take
this US$35M abroad in the name of Mr. mark's relative. That is why I am
sending you
this mail even though we have neither known nor met ourselves. I want to
present you
as the next of kin (relative to Mr. mark) to the Central Bank of
Nigeria,
so that
the Central Bank of Nigeria will pay the fund to you. Your nationality
does not
matter, as you could be his Uncle, Cousin, etc from either the mother's
side or his
father's side.

Should you accept this proposal, my lawyer is involved and shall send to
you, documents relating to the
transfer of this fund. ALL DOCUMENTS relating to this
transaction/transfer
shall be
sent to you ONLY BY SCAN COPY THROUGH YOUR EMAIL for complete security
reasons so as
to make sure that the documents are safely received only by you to avoid
expose and
theft. So I advise that you please, be the ONLY person who has the
access to your
mailbox and the password. This is because double claim of same fund from
two different
people could be dangerous. (note: but if double claim is dangerous, then why was I able to search your name and find another person who has infact been offered the same thing?) All the documents shall be coming to your
mailboxby my lawyer as the
if you accept pls kindly reply me .
with your full information that will be needed for the process of the
documents that will enable the transfer into your account.
1)your full name and address
2)your phone number and fax number
3)your company name and addres
4)your home address
5)your bank name/address and your bank account numner that the money
will be transfered nto

When you have received the money,i wll travel down to you n your country
and the money will be shared in a manner that will be
satisfactory to both yourself and me.

best regards
adex mol


Well, I had finished all my work, and I was about to hit delete, when I decided to reply for the sake of responding. I stated clearly that I did knew it wasn't real and I even complimented his creativity.

Nice try.
Very creative phishing, but I advise you to find out my name first
before asking me for my banking information. ;-)
Sorry. You're not getting my bank number today.


But apparently he didn't understand, or his English wasn't good enough, or he just decided to persist. He did it in ALL CAPS too, which was a bit annoying.

HELLO MR,
WELL AM HAPPY TO HEAR FROM YOU IT IS A GREAT PLEASURE TO REALLY KNOW WHO
YOU ARE FIRST WELL AM ADEX MOL AS I HAVE SAID IN MY PROPOSAL SO IF YOU
WANT TO KNOW ANY OTHER THING ABOUT ME FEEL FREE TO ASK .SO PLEASE
INTRODUCE YOURSELF FIRST BEFORE WE PROCEED IN THIS PROFITABLE
TRANSACTOIN.
HOPE TO HEAR FROM YOU SOON.
BEST REGARDS
ADEX MOL


you didn't even read my email back...was this reply automatic?
If you have ever been to Zimbobwe you can reply...otherwise, SHUT THE
HELL UP UNLESS YOU CAN PROVE THAT THIS S*** IS REAL!

COME ON!
-Mark Mackenzie Quelz


I pretended two things: to be pissed off, and to be from Zimbobwe. Don't ask me why I wrote a reply like this, but looking back I think it was probably late, I had probably done a lot of work, and was probably very tired. In addition, I coined a new name (including the fact that I spelt my first name which is 'Marc' as 'Mark') for the purpose of these emails. More to the point, one would think that he would have stopped after this. But he really seemed persistant, or he STILL didn't understand. Either way, he replied again soon afterward

HELLO MR MARK,
I KNOW THAT IT IS HARD TO BELIVE BUT I MYSELF AM A BIT SCARED THAT WHEN
THE MONEY IS TRANSFERED TO YOU YOU MIGHT RUN AWAY WITH THE MONEY BUT I
JUST NEED TO TRUST YOU COS IF I DONT THERE WOUNT BE A WAY OUT.(note: if he actually thought I meant that he seriously needs to spend a few years in an English speaking country, or he should start phishing in other languages) I MEAN THE
FUND WILL JUST BE THERE.I NEED TO GET THIS DONE FAST BECAUSE IF I DONT
THE GOVERNMENT WILL CLAIM IT SINCE THE MAN WAS ONCE THE GOVERNMENTS
CONTRACTOR.THATS WHY AM REALLY PLEADING SO THAT THIS WILL BE DONNE
WITHIN FEW WEEKS DEPENDING ON HOW YOU RESPOND TO MY LAWYER WHO IS GOING
TO PROCESS ALL THE NECESSARY DOCUMENTS NEEDED FOR THE TRANSFER OF THE
FUND INTO YOUR ACCOUNT.AND PLEASE MAKE THIS CONFIDENTIAL TO AVOID
IMPLICATION.BELIVE ME ITS REAL.YOU KNOW (do I now?)THAT THIS IS FOR THE BENEFIT OF
THE TWO OF US.
HOPE TO HEAR FROM YOU SOON.
REGARDS
ADEX MOL

DAMN THE ALL CAPS! I CAN'T STAND READING EMAILS LIKE THAT! Anyhow, to continue...


Dude, I don't think you understand me here. You may trust me or not
trust me, but how the hell am I supposed to trust you? Once you have
my bank number and all of my other information, if you are not legit,
I'm screwed! And by the way, where did you get my email or name. On
the other hand, if you are willing to mail the money to a location
that is not my home, I am more then willing to accept it. I can even
mail half or so back if you wish. But you aren't getting any of my
information.

-M. Quelz


when I didn't reply, he wrote again the next day...

HELLO,
AM STILL WAITING TO HEAR FROM YOU SO THAT WE CAN CONTINUE IN THIS
PROFITABLE TRANSACTION.
REGARDS
ADEX MOL

Again I didn't reply. He started a new thread (new email, instead of a reply)

hello man,
why have you not been mailing aint you interested again if you are not
pls let me know cos you are delaying the whole think ok.so pls let me
know if you are still intrested.
regards
adex mol

I finally decided to respond. I decided to provide a small amount of fake information for fun, as well as a small empty threat.

239 092 823333 384
Mark Mackenzie Quelz
52173 Truzetz
Zimbobwe

Try that. By the way, I've succesfully traced these emails (they were
pretty protected too), so I'd better get the money.
(note: of course I hadn't...I have no such skillls to brag about, otherwise I would have located the email in the beginning for the fun of it)

this is nit full info pls

hello man,
am glad you replied but you have not produced all the necessary
information needed by the lawyer so i guess i tell you again so that you
will send the full details ok
1)your full name and address
2)your phone number which you have giving pls send it with this
information again so that i can forward it to the lawyer
3)your company name and address
4)your bank name and your bank address and account number where the
money will be transfered into .
why am asking you for the full details is just cos the lawyer will not
be able to process anything unless the full information so pls dont be
hurt ok.
pls send this immediately so that the lawyer can start this process
latest on monday ok.and pls keep this confidential between me and you
ok.
hope to hear from you soon.
regards

I typed out a lame response and sent it off within a few seconds of recieving the email.
I'm afraid I cannot understand your dialect. What, in English (or
German for that matter), are you trying to say


hello marc,
what am telling you is that the information you sent to me is not
completed.and if it is completed my lawyer will not be able to do
anything.so please send this back to me now.

your full name and address and your phone number
your company name and address
your bank name,address and account number where the money is goin to be
transfered into,please send it to me now so that i can transfer it to my
lawyer to start the process on monday ok.and please keep it
confidential.
regards
adex mol

'if it is completed my lawyer will not be able to do
anything'

That means essentially that if I complete the information, your lawyer
can't do anything. That would imply that if I don't give you the
information, the lawyer does something.

While I know this isn't what you meant, I'm beginning to get confused
and frusterated, as well as impatient.

And you haven't answered my biggest question. How did you get my
email? Why choose me over any other person?


hi marc,
i got your email address from gmail.com while i was send a mail to a
friend so dont get confused or frustrated ok.just lets get down with
business please its getting late.just send it and let me transfer it to
me ok.
regards
adex mol

quote: "i got your email address from gmail.com while i was send a mail to a
friend"

Doesn't make sese

quote: "i got your email address from gmail.com while i was send a mail to a
friend"

I never was...did I say that?

quote: "let me transfer it to
me"

That means that you're transfering it to yourself! 'transfer it to me'???

Is it late? What's my deadline here? I'm having trouble with the
account I was going to use so there may be a few delays...
- Show quoted text -


On Sun, 26 Sep 2004 20:14:36 +0200, adex mol <adexmol@postino.ch> wrote:
> hi marc,
> i got your email address from gmail.com while i was send a mail to a
> friend so dont get confused or frustrated ok.just lets get down with
> business please its getting late.just send it and let me transfer it to
> me ok.
> regards
> adex mol
>
>


--
-->Marc
(I made the mistake of not eliminating my signature, which contains the correct spelling of my name)

hello,
i might make a mistake ok,but i have eplained all to u is am still
waiting

a quick response...he was probably getting impatient at this point...because of how long I had kept him going, he was probably wondering whether he was going to get my infomration or not


Ok. I'm going with my United States info, the Zimbobwe info is too
confidential...and it's where I keep all my used accounts.

Mark M. Quelz
1847 mockingbird Ln.
Texas City, Texas 44331

phone (298) 833-6411 ext. 87825
fax (298) 566-0911 ext. 87826

Company: Blatant Networks Ltd.

Bank: Chincy Savings&Loan
0349 Leaded St.
Texas City, Texas 34988-5609
Acct.# 0921 113 16758 39 password # 457458

Please keep all of this strictly confidential. In the wrong hands, I
could lose one of my identities (I keep about five or so going at a
time...this is one of my more important ones, however). Thank you very
much, and good luck. It was nice doing business with you, M. Mol.

Signed,
-->M. Quelz


I finally gave him his information! well...sort of....
Anyhow, he clearly didn't check it before sending his reply.


hello marc,
am glad to hear from you,l have transfered the information to the lawyer
so he might email you anytime from now so please behave well and
response well to him,and please do anything he tells you to get
everything done well and fast.and please be updating me with everything
that is going on between you and the lawyer ok.and please keep this
confidential pls.
hope to hear from you soon.

regards
adex mol

I recieve a reply from his "lawyer" about ten hours later (providing GMail has accurate timestamps). The email is sent under the name "Fred Krugal".

HELLO MR MARC,
I AM BARISTER FRED, I WAS TOLD BY MR ADEX THAT YOU ARE THE NEXT OF KIN OF MR.MARK.E.ORSLTER,AND I WANT YOU TO KNOW THAT YOUR INFORMATION IS HERE WITH ME AND I HAVE TRANSFERED IT TO MY CHAMBER FOR FURTHER PROCESS.SO IT IS SAFE.THE FIRST DOCUMENT I AM GOING TO GET THAT WILL EFFECT THE OTHER DOCUMENTS IS THE DEATH CERTIFICATE OF MR MARK.E.ORSTLER WITH THE PICTURE TO SEE FOR YOURSELF.I WILL SCAN IT AND SEND IT TO YOU,SO ALL THE DOCUMENTS THAT I WILL BE PROCESSING ON YOUR BEHALF HERE I WILL BE SCANNING IT AND SEND IT TO YOU,I AM A VERY BUSY MAN SO I MIGHT NOT HAVE TIME CALLING YOU BUT I WILL BE TRYING TO BE MAILING YOU AS THE PROCESS IS GOING ON.AND PLEASE TO GET YOUR MONEY AS THE NEXT OF KIN(BENEFICIARY) OF MR MARK.E.ORSTLER I NEED YOU FULL CO-OPERATION TO GET IT DONE.SO TOMMORROW MONEY I WILL GO TO THE HOSPITAL THAT HE DIED TO GET HID DEATH CERTIFICATE AND THE PICTURE SO IT MIGHT TAKE ME TIME BUT JUST BEAR WITH ME,IF YOUR FULL CO-OPERATION IS RENDERED YOU WILL GET YOUR MONEY UNDER WEEKS OR SO BUT ALSO DEPENDING ON HOW THE DOCUMENTS IS BE PROCESSED.
REPLY ME IMMEDIATELY AS YOU RECEIVE THE MESSAGE FOR FUTHER INFORMATION.
REGARDS
BARISTER FRED


ALL CAPS AGAIN! DAMN IT! Anyhow, near-proof that it is the same person lies in the fact that he addressed me as 'Mr. Marc", not "Mr. Mark". When sending Adex Mol the "information", I put my full name as "Mark Mackenzie Quelz", which must mean this lawyer who is such a "VERY BUSY MAN" either had the time to read Adex Mol's emails, or is in fact Adex Mol himself, the latter being more likely given the situation. Another likely possibility is that there are two friends who have been doing this together since the beginning. Either way it's not important.

I responded with this:


Ok. Excellent. Just for my personal protection, do not include a
return address on any mail you send out to me. Thank you very much. A
pleasure doing business with you.

-M. Quel


I haven't recieved a response since. I'm not sure if he/they were stupid enough to try and get my account (if he/they did, it must have been embarassing to find out that there was no client called "Mark Mackenzie Quelz", let alone a bank by the given name to find such a client at).

If two days pass without me hearing anything from them, I'm going to send an email asking where my money is.
 
Wow, i've only gotten a few of those kind of emails, and I've never replied to any of them. Kudos to you for braving that out, man. :eek:
 
I get these emails all the time and i have recently had a lot of those fake ones where you go to the site and it is a replica of a banks home page... the email tells you that you must log in to your account and verify your details... of course they just steal your account no, password and details... I have had about 4 of these and each time I have got in touch with the banks to warn them, have I had a single thankyou? well one out of four... but the others just ask me to email the message to them as an attachment and then I never hear anything again...

but I dont let them know to protect the corporation, I do it to protect the customers... after all some of my family and friends are stupid when it comes to things like that and I want the banks to properly warn people so that they dont fall for these tricks.

Phishing is evil and I dont mind forwarding the messages on if there is a slim hope I am helping to stop people falling for the scams.


On another note. I remember a while back in the UK a similar email to the one you recieved... from nigeria, however this is very sinister. A business man, who was greedy answered the email and through correspondance was asked to supply £1000 for the lawyers fees involved... he saw the potential returns from this (what is £1000 compared to the millions he would get back). Well he was later asked for a bit more cash, which he provided and lo and behold he was told his money was available for collection, but he would have to go to nigeria to collect it. He turned up in nigeria and was kidnapped and held to ransom, as the kidnappers had established he must be rich to have paid the fees they asked.. I remember this being in the paper around the time i first recieved the email, I will have to dig up the article.
 
hygor said:
I remember this being in the paper around the time i first recieved the email, I will have to dig up the article.

Wow...please do dig. I'd definitely like to see that. Maybe I'll google it.

Anyhow, I've gotten a few more emails.

From Adex Mol:

hi marc,
how are you doin i just want to know if you have heard from the
lawyer.please update me with what is going on between you and the lawyer
ok.
regards
adex mol.



From his "lawyer":

hello mr.marc,
i am sorry for not send you the death certificate yesterday it was due to my stress but i have gotten it yesterday morning and i have gotten the next of kin agreement letter today so i will send it to you now.the death certificate and the agreement letter.what you need to do with the agreement letter print it out immediately and fill it then scan it and send it back to me immediately for further process.
regards
barister fred


And later:

hello mr marc,
this is the first one i got from the hospital and the picture.

(attached were the following)
pic.jpg

In addition, the death certificate was there, which I decided not to display because of size.

The even later:

just fill it and send it back immediately.
regards

_____________________________________________________________
Sign up for FREE email from MMAIL.com at http://www.mmail.com






NEXT OF KIN AGREEMENT





This agreement, dated _________, by and between _____________________________________, whose address is ________________________________________________________________

(hereinafter referred to as the "Patient") and ______________________________, whose address is _____________________________________________________________________________,

(hereinafter referred to as the "Next of Kin"):



WHEREAS, the Next of Kin may have some involvement in the disposition of the Patient's body upon the Patient's death;



In consideration of the family relationship between the Patient and the Next of Kin, and for $1.00 and other valuable considerations, receipt of which is acknowledged by the Next of Kin, the Next agrees to the following:



1. The Next of Kin hereby assigns to the Cryonics Institute (a Michigan nonprofit corporation, hereinafter "CI") all his rights to and interest in the control of the disposition of the Patient's body after the Patient's death.



2. The Next of Kin shall take all actions reasonably necessary to permit, and shall forgo all actions which might interfere with, the cryonic suspension of the Patient in accordance with the terms of the Contract, including, without limitation, any additional documentary designations of CI to receive the Patient's body immediately upon the Patient's death as deemed desirable by CI and the execution of all documents provided by CI to make such designations effective.



3. The Next of Kin intends that CI shall be a third party beneficiary of this Agreement, and agrees that CI shall have the right to enforce this Agreement in a court of law.



4. The Next of Kin acknowledges that its breach of this Agreement would cause irreparable injury to the Patient and CI, and agrees that upon a breach of this agreement, CI may obtain, without bond, preliminary and permanent injunctions prohibiting any breaches of this Agreement by the Next of Kin, whether such breaches are by way of action or omission.



5. The Next of Kin agrees that this Agreement is reasonably related to the State of Michigan, and that the provisions of this Agreement are to be interpreted and enforced according to the provisions of

Michigan law. Any lawsuit brought concerning the interpretation or enforcement of the Agreement or the Next of Kin's actions with respect to the disposition of the Patient's body shall be brought in a state or federal court in Wayne or Oakland County, Michigan.



Signed this ________ day of_______________, ___________.



Signature of Patient _______________________________________________



Signature of Next of Kin ____________________________________________



Signature of first witness ___________________________________________



Signature of second witness _________________________________________



I haven't responded to any of them yet.
Oh...and thanks Mac. :cool:
 
The death certificate is funny, makes it out to sound like he died in a horrible car accident :) "internal bleeding and multiple fractures" LoL :laughing: it also said he was suffering from "complicated causes"... Haha :) It's very strange to see the lengths these people will go to just to make a buck :rolleyes:
 
mac_mogul said:
It's very strange to see the lengths these people will go to just to make a buck :rolleyes:

Yeah...eh? Couldn't they put that effort into some sort of legitimate career? Of course, perhaps scamming is more fun...

damn, these guys definately have no life.. man, good investigating!

Thanks...but I really didn't investigate at all. I just replied and posted. They provided me with all info I have :p

notice how he asks for the info differently avery time.

Every aspect is inconsistant. Look at how he addresses me...sometimes it's 'Mr. Marc', other times it's 'Mr. Mark'. His client is initially Orstler, but by the time he makes it to the death certificate, it's Ostler. And so on, and so forth.
 
Status
Not open for further replies.
Back
Top Bottom