Picasa Phishing Email Spam

I checked the IP addresses this email spam dropped in from and found to my surprise that one of them belongs to Google.

Here are the details:

Return-Path: picasawebalbums-noreply at google.com
Received: (qmail 21195 invoked from network); 14 Jul 2007 10:50:53 -0000
Received: from (My ISP.......) ([64.233.162.182])
Received: from nz-out-1112.google.com ([64.233.162.182])
Received: by nz-out-1112.google.com with SMTP id l56so7722335nzh
Message-ID:
Date: Sat, 14 Jul 2007 03:50:45 -0700 (PDT)
From: Picasa Web Albums
Reply-To: ATM PAYMENT
Subject: ATM CARD PAYMENT FOR FUND BENEFICIARIES

The message body says all in caps:

View Picasa's Gallery (Text link aims at http://picasaweb dot google.com/picasateam)
Message from ATM PAYMENT:
ATM CARD PAYMENT FOR FUND BENEFICIARIES
OFFICE OF THE DIRECTOR OF OPERATIONS
INTERNATIONAL CREDIT SETTLEMENT
CENTRAL BANK OF NIGERIA.

ATTENTION BENEFICIARY:

THIS IS TO OFFICIALY INFORM YOU THAT WE HAVE VERIFIED YOUR CONTRACT /INHERITANCE FILE AND FOUND OUT THAT WHY YOU HAVE NOT RECEIVED YOUR PAYMENT IS BECAUSE YOU HAVE NOT FUFILLED THE OBLIGATIONS GIVEN TO YOU IN RESPECT OF YOUR CONTRACT / INHERITANCE PAYMENT.

SECONDLY WE HAVE BEEN INFORMED THAT YOU ARE STILL DEALING WITH THE NONE OFFICIALS IN THE BANK ALL IN YOUR ATTEMPT TO SECURE THE RELEASE OF THE FUND TO YOU. WE WISH TO ADVIVE YOU THAT SUCH AN ILEGAL ACT LIKE THIS HAVE TO STOP IF YOU WISHES TO RECEIVE YOUR PAYMENT SINCE WE HAVE DECIDED TO BRING A SOLUTION TO YOUR PROBLEM. RIGHT NOW WE HAVE ARRANGED YOUR PAYMENT THROUGH OUR SWIFT CARD PAYMENT CENTER ASIA PACIFIC, THAT IS THE LATEST INSTRUCTION BY THE PRESIDENT UMARU MUSA YAR'RADUA (GCFR) FEDERAL REPUBLIC OF NIGERIA.

THIS CARD CENTER WILL SEND YOU AN ATM CARD WHICH YOU WILL USE TO WITHDRAW YOUR MONEY IN ANY ATM MACHINE IN ANY PART OF THE WORLD, BUT THE MAXIMUM IS TWO THOUSAND DOLLARS PER DAY, SO IF YOU LIKE TO RECIEVE YOUR FUND THIS WAY PLEASE LET US KNOW BY CONTACTING THE CARD PAYMENT CENTER AND ALSO SEND THE FOLLOWING INFORMATION:

1.YOUR FULL NAME
2. PHONE AND FAX NUMBER,
3. ADDRESS WERE YOU WANT THEM TO SEND THE ATM CARD TO(P.O BOX NOT ACCEPTABLE)
4. YOUR AGE AND CURRENT OCCUPATION
5. A COPY OF YOUR IDENTITY

CONTACT PERSON:

DR.PATRICK AZZIZA
INTEGRATED PAYMENT DEPARTMENT
TEL:+234-80-34865543
EMAIL: (atmpayment_office811 at yahoo.com)

THE ATM CARD PAYMENT CENTER HAS BEEN MANDATED TO ISSUE OUT $8,300,000.00 AS PART PAYMENT FOR THIS FISCAL YEAR 2006. ALSO FOR YOUR INFORMATION YOU HAVE TO STOP ANY FURTHER COMMINUCATION WITH ANY OTHER PERSON(S) OR OFFICE(s). THIS IS TO AVOID ANY HITCHES IN FINALIZING YOUR PAYMENT.

EMAIL BACK AS SOON AS YOU RECEIVE THIS IMPORTANT MESSAGE FOR FURTHER DIRECTION IN THIS REGARDS AND ALSO UPDATE ME ON ANY DEVLOPMENT FROM THE ABOVE MENTIONED OFFICE.

NOTE: THAT BECAUSE OF IMPOSTORS, WE HEREBY ISSUED YOU OUR CODE OF CONDUCT, WHICH IS (811) SO YOU HAVE TO INDICATE THIS CODE WHEN CONTACTING THE CARD CENTER.

(MR. SADIQ ALMAN)
CHIEF AUDITOR TO THE PRESIDENT
FEDERAL REPUBLIC OF NIGERIA
ATM CARD PAYMENT FOR FUND BENEFICIARIES
If you are having problems viewing this email, copy and paste the following into your browser:
http://picasaweb dot google dot com/picasateam
To share your photos or receive notification when your friends share photos, get your own free Picasa Web Albums account (Text link aims at http://picasaweb dot google.com/).

This is an example of those spammers who are using well known companies to spam people.

Blogger
http://www.ezine-act-politics-business-and-love.com/IP-address.html

Logos Email Spam

I wanted to read this email scam but couldn't as it use high complicated technology to hide things. I know only simple ways to read back links and paths in email spam. I thought this spam something will soon be "real" something.

The following email spam is nonsense too. It doesn't speak about logo design or something like that as it appears from the subject line. It speaks its language to promote some sexual products no one needs.

Here it goes:

My profile rights reserved terms trademarks. Context dropdown, list, boxalttab another.

Moving properties objectto copy? Logom allwindows, logof logoe files logod minimizes.

When notepad find dialog box displayed altf switches.

Seconds filterkeys num lock togglekeys offleft. Or esc selects button press tab taskbar shiftf context. Off logop print logoc control logov logok logoi.

Mdi child next window of letter. Expands, everything collapses not expanded otherwise goes first?

Is same as arrow, keys. Create ctrlshift desktop controlf.

Boldctrlu italicback topmouse modifier shell click displays shortcut.

Toolsprint pageemail my profile rights reserved terms. Off logop print logoc, control?

Outlineesc cancel topapplies millennium, standard kbenv kbfaq kbinfo.

Logoa options, microsoft logos, caps topdialog, previous clicks check.

Back Info

Return-Path: button at arcpddc dot org
(domain at ARCPDDC.ORG does not designate permitted sender hosts)
Received: from [151.74.203.233] (really [151.74.210.27]) (LOCATION OF IP: ITALY)
Received: from mariarosaria ([172.120.77.0])
Message-ID: 000901c79462$6839e900$e9cb4a97 at mariarosaria
From: "used" button at ARCPDDC dot ORG
Subject: LogoF LogoE files LogoD
Date: Sat, 12 May 2007 08:54:37 +0200