Fraud Alert: “CITIBANK” and “BofA”

Dangerous Spam, Spam Sources

Update: Fraud Alert

Subject: Your transaction is completed
Supposedly from : Bank of America, N.A. Member FDIC. Equal Housing Lender Opens

Transaction is completed. $48452921 has been successfully transferred.
If the transaction was made by mistake please contact our customer service.
Payment receipt is attached.

*** This is an automatically generated email, please do not reply ***
Bank of America, N.A. Member FDIC. Equal Housing Lender Opens in new window
© 2013 Bank of America Corporation. All rights reserved
These emails are NOT from Citibank OR Bank of America!

Do not open the attachment!

From: “CITIBANK”
Sent: Thu, 9 May 2013 10:03:11 +0700
Subject: Merchant Statement

Enclosed DOC is your Citibank Paymentech electronic Merchant Billing Statement. If you need help, please contact your Account Executive or call Merchant Services at the telephone number listed on your statement. PLEASE DO NOT RESPOND BY USING REPLY. This email is sent from an unmonitored email address, and your response will not be received by Citibank Paymentech. Citibank Paymentech will not be responsible for any liabilities that may result from or relate to any failure or delay caused by Citibank Paymentech’s or the Merchant’s email service or otherwise. Citibank Paymentech recommends that Merchants continue to monitor their statement information regularly. ———- Learn more about Citibank Paymentech Solutions, LLC payment processing services at Citibank. ———- THIS MESSAGE IS CONFIDENTIAL. This e-mail message and any attachments are proprietary and confidential information intended only for the use of the recipient(s) named above. If you are not the intended recipient, you may not print, distribute, or copy this message or any attachments. If you have received this communication in error, please notify the sender by return e-mail and delete this message and any attachments from your computer.

The emails contain a Word Document attachment DELETE IT!

Update:
We have blocked the following ranges sending this email:
187.162.10.40-187.162.10.47
178.88.32.0-178.88.63.255
181.64.87.248-181.64.87.255
175.139.0.0-175.139.255.255
195.14.160.0-195.14.191.255
14.160.0.0-14.191.255.255
123.2.191.192-123.2.191.199
203.217.144.0-203.217.147.255
193.83.0.0-193.83.255.255
46.251.216.0-46.251.219.255
183.64.0.0-183.71.255.255
5.248.0.0-5.248.127.255
195.14.160.0-195.14.191.255
178.88.32.0-178.88.63.255
180.94.64.0-180.94.95.255
213.238.8.0-213.238.11.255
91.198.185.0-91.198.185.255

more (blocked) countries sending:
2113-05-14 Romania - giant attachment spam 2013-05-14 95.76.0.0/15
2113-05-14 Kazakhstan - giant phishing attachments 2013-05-14 147.30.0.0-147.30.31.255
2113-05-14 Albania - giant attachment phishing spam 2013-05-14 79.106.0.0-79.106.255.255
2113-05-14 Kazakhstan - giant phishing attachments 2013-05-14 37.99.108.0-37.99.109.255
2113-05-14 Malaysia - large attachment spam 2013-05-14 120.140.0.0-120.141.255.255
2113-05-14 Vietnam giant phishing spam 2013-05-14 42.119.64.0-42.119.79.255
2113-05-14 Ukraine phishing large attachments 2013-05-14 195.177.124.0-195.177.127.255
2113-05-14 Bulgaria large attachment phishing spam 2013-05-14 46.10.0.0-46.10.255.255
2113-05-14 Sri Lanka - attachment spam 2013-05-14 112.135.205.0-112.135.205.255
2113-05-13 Kazakhstan 2013-05-13 178.90.8.0-178.90.15.255
2113-05-13 India giant phishing spam 2013-05-13 49.248.128.0-49.248.191.255
2113-05-13 Kazakhstan - giant phishing attachments 2013-05-13 5.34.46.0-5.34.47.255
2113-05-13 Armenia large attachment phishing spam 2013-05-13 46.130.0.0-46.130.63.255
2113-05-13 Philippines large phishing spam attachment 2013-05-13 203.215.64.0-203.215.127.255
2113-05-13 Kazakhstan - giant phishing attachments 2013-05-13 37.99.108.0-37.99.109.255
2113-05-13 Cambodia 2013-05-13 belswick 103.246.144.0-103.246.147.255
2113-05-13 Kazakhstan - giant phishing attachments 2013-05-13 178.91.235.0-178.91.250.255
2113-05-13 Bulgaria large attachment phishing spam 2013-05-13 130.204.0.0/16
2113-05-13 Serbia giant phishing spam 2013-05-13 82.208.192.0/19, 82.208.220.0-82.208.220.255 2113-05-13 2113-05-13
2113-05-13 Vietnam giant phishing spam 2013-05-13 183.80.96.0-183.80.111.255
2113-05-13 Hungary - spam scanning 2013-05-13 195.56.0.0-195.56.255.255
2113-05-13 Mexico - large attachment spam 2013-05-13 187.233.0.0/16
2113-05-13 Ukraine phishing large attachments 2013-05-13 188.0.128.0-188.0.159.255
2113-05-13 Armenia large attachment phishing spam 2013-05-13 37.157.216.0-37.157.223.255
2113-05-13 India giant phishing spam 2013-05-13 120.56.0.0-120.63.255.255
2113-05-13 India giant phishing spam 2013-05-13 122.165.128.0-122.165.255.255
2113-05-13 India giant phishing spam 2013-05-13 59.176.0.0-59.185.255.255
2113-05-13 Kyrgyzstan - giant attachment spam 2013-05-13 212.42.105.0-212.42.105.255,
2113-05-13 Peru large attachment spam phishing 2013-05-13 181.65.0.0/17
2113-05-13 Vietnam giant phishing spam 2013-05-13 42.119.208.0-42.119.223.255
2113-05-13 Ukraine phishing large attachments 2013-05-13 193.8.78.0-193.8.79.255
2113-05-13 Malaysia - large attachment spam 2013-05-13 219.92.0.0-219.92.255.255
2113-05-13 Pakistan - large attachment phishing spam 2013-05-13 111.68.96.0/20
2113-05-13 Emirates - giant attachment spam 2013-05-13 2.50.20.0-2.50.27.255
2113-05-13 Kazakhstan - giant phishing attachments 2013-05-13 176.222.184.0-176.222.187.255
2113-05-13 Peru large attachment spam phishing 2013-05-13 181.64.192.0/19
2113-05-13 Vietnam giant phishing spam 2013-05-13 42.115.0.0-42.115.15.255
2113-05-13 Turkey - huge attachment spam 2013-05-13 95.65.128.0/17, 95.65.224.0-95.65.227.255
2113-05-13 Saudi Arabia 2013-05-13 91.102.16.0/21
2113-05-13 Croatia - phishing attachment spam 2013-05-13 188.129.64.0-188.129.127.255
2113-05-13 Mexico - large attachment spam 2013-05-13 200.77.0.0/17
2113-05-13 China - phishing attachment spam 2013-05-13 116.224.0.0-116.239.255.255
2113-05-13 Serbia giant phishing spam 2013-05-13 178.148.0.0-178.148.255.255
2113-05-13 Jordan - phishing attachment spam 2013-05-13 213.139.32.0/19,213.139.60.0-213.139.60.255
2113-05-13 Serbia giant phishing spam 2013-05-13 178.148.0.0-178.148.255.255
2113-05-13 Moldova - lareg phishing spam attachments 2013-05-13 178.168.0.0/17
2113-05-13 Ukraine phishing large attachments 2013-05-13 77.122.128.0-77.122.255.255
2113-05-13 Bulgaria large attachment phishing spam 2013-05-13 92.247.192.0/18,
2113-05-13 Malaysia - large attachment spam 2013-05-13 1.9.0.0-1.9.255.255
2113-05-13 Mexico - large attachment spam 2013-05-13 148.244.0.0/16
2113-05-13 Sudan large attachment phishing spam 2013-05-13 105.238.0.0-105.238.255.255
2113-05-13 Russia giant phishing spam 2013-05-13 89.189.184.0-89.189.191.255
2113-05-13 India giant phishing spam 2013-05-13 202.191.128.0-202.191.255.255
2113-05-13 Kazakhstan - giant phishing attachments 2013-05-13 5.34.120.0-5.34.123.255
2113-05-13 Philippines attachment spam 2013-05-13 180.194.7.0-180.194.7.255
2113-05-13 Poland - giant attachment spam 2013-05-13 91.196.12.0-91.196.15.255
2113-05-13 Thailand attachment spam 2013-05-13 202.28.0.0-202.29.255.255
2113-05-13 Armenia large attachment phishing spam 2013-05-13 188.115.224.0-188.115.255.255
2113-05-13 Serbia giant phishing spam 2013-05-13 93.86.0.0/15
2113-05-13 Bulgaria large attachment phishing spam 2013-05-13 130.185.240.0-130.185.247.255
2113-05-13 Peru large attachment spam 2013-05-13 181.64.128.0/18
2113-05-13 Ukraine phishing 2013-05-13 193.26.13.0-193.26.13.255
2113-05-13 Albania - giant attachment phishing spam 2013-05-13 37.26.80.0-37.26.81.255
2113-05-12 Poland - giant attachment spam 2013-05-12 89.161.0.0-89.161.31.255
2113-05-12 Ukraine 2013-05-12 91.193.232.0-91.193.235.255
2113-05-12 India giant phishing spam 2013-05-12 115.69.247.0-115.69.247.255
2113-05-12 Kazakhstan - giant phishing attachments 2013-05-12 212.76.19.0-212.76.19.255
2113-05-12 Emirates - giant attachment spam 2013-05-12 2.50.28.0-2.50.63.255
2113-05-12 India giant phishing spam 2013-05-12 203.109.96.0-203.109.111.255
2113-05-12 Iran - giant phishing spam 2013-05-12 80.250.192.0-80.250.207.255
2113-05-12 Slovakia - gian attachment phishing spam 2013-05-12 217.12.48.0/20
2113-05-12 Kazakhstan - giant phishing attachments 2013-05-12 85.29.191.0-85.29.191.255
2113-05-12 Brazil 2013-05-12 187.110.226.0/24
2113-05-12 Israel investing spam 2013-05-12 209.2.0.0-209.2.255.255
2113-05-12 Phishing plus large attachments Dzhezkazgan 2013-05-12 85.29.191.0-85.29.191.255
2113-05-12 Serbia giant phishing spam 2013-05-12 178.149.0.0-178.149.255.255
2113-05-12 Kazakhstan - giant phishing attachments 2013-05-12 82.200.160.0/20
2113-05-12 China 2013-05-12 117.80.0.0-117.95.255.255
2113-05-12 Colombia - giatn phishing spam 2013-05-12 186.30.0.0/16

This list is not complete!