Your accountant license can be discontinued.

[Previous Example] [Share This Page] [Back To The Main SHPAMEE Index] [Next Example]

VERY IMPORTANT INFORMATION, READ THIS FIRST: The example and associated information published on this page are subject to the SHPAMEE Terms Of Use. Please familiarise yourself with these terms before viewing or using any information on this page.

Header:

From - Wed Jan 9 23:13:41 2013
X-Account-Key: account6
X-UIDL: x
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
Delivered-To: x
Received: by 10.58.227.227 with SMTP id sd3csp280361vec;
Fri, 7 Dec 2012 11:04:35 -0800 (PST)
Received: by 10.112.44.2 with SMTP id a2mr2912734lbm.131.1354907074782;
Fri, 07 Dec 2012 11:04:34 -0800 (PST)
Return-Path: <dismallern79@bankofdeerfield.com>
Received: from ttxa102.ttx-net.sk (ttxa102.ttx-net.sk. [193.110.186.102])
by mx.google.com with ESMTP id r4si9630928lbz.55.2012.12.07.11.04.33;
Fri, 07 Dec 2012 11:04:34 -0800 (PST)
Received-SPF: fail (google.com: domain of dismallern79@bankofdeerfield.com does not designate 193.110.186.102 as
permitted sender) client-ip=193.110.186.102;
Authentication-Results: mx.google.com; spf=hardfail (google.com: domain of dismallern79@bankofdeerfield.com does not
designate 193.110.186.102 as permitted sender) smtp.mail=dismallern79@bankofdeerfield.com
Received: from apache by bankofdeerfield.com with local (Exim 4.67)
        (envelope-from <<pugnacityq6@luther.k12.wi.us>>)
        id 6027FR-FF3D8M-TA
        for x; Fri, 7 Dec 2012 20:04:33 +0100
To: x
Subject: Your accountant license can be discontinued.
X-PHP-Script: bankofdeerfield.com/sendmail.php for 193.110.186.102
From: "AICPA" <info@aicpa.org>
X-Sender: "AICPA" <info@aicpa.org>
X-Mailer: PHP
X-Priority: 1
MIME-Version: 1.0
Content-Type: multipart/alternative;
        boundary="------------07040600102090106030703"
Message-Id: <x@bankofdeerfield.com>
Date: Fri, 7 Dec 2012 20:04:33 +0100

Body:

You're receiving this message as a Certified Public Accountant and a part of AICPA.
Having difficulties reading this email? Review it in your favorite browser.

Ending of Public Account Status due to tax return fakement

Valued AICPA participant,

We have received a delation about your probable participation in income tax affaire for one of your customers. In accordance with AICPA Bylaw Head # 765 your Certified Public Accountant position can be revoked in case of the fact of presenting of a improper or fraudulent income tax return for your client or employer.

Please find the complaint below below and respond to it within 3 days. The refusal to provide the clarifications within this period would finish in revokation of your CPA license.

Delation.pdf

The American Institute of Certified Public Accountants.

Email: service@aicpa.org
Tel. 888.777.7077
Fax. 800.362.5066

Comments:

Once again the line between malware and phishing e-mails are getting more blurry everyday. The link in this e-mail was already dead when we analysed it but several sources state that it is associated with malware. Perhaps the scammers want to spy on some AICPA members. It could be a potential gold mine for the scammers, especially if they get their hands on sensitive information about a very big and profitable client.

Hopefully AICPA members will spot the flaws of this scam. We highly doubt AICPA will send e-mails with non-standard English words like fakement or typos like affaire.

For a short, but interesting discussion about another fake AICPA membership revocation alert, visit https://isc.sans.edu/diary/Your+CPA+License+has+not+been+revoked/14674

Related Cyber Criminal Profiles:

No related profiles found.

Similar Spam Examples:

Verizon Phishing Scam - Verizon wireless online bill.
INTUIT Phishing Scam - Employer contributions report
Important message from Beneficial about your account
British Airways Phishing Scam - British Airways E-ticket receipts
American Express Account Alert: A Payment Was Received Malware Spam

Related Malware Samples:

No related malware samples found.

[Previous Example] [Share This Page] [Back To The Main SHPAMEE Index] [Next Example]