Weird message from someone named "NIPC"

Steve Schear schear at lvcm.com
Wed Jul 25 20:52:24 PDT 2001


At 02:48 AM 7/26/2001 +0000, Triffid Master wrote:
>[ My PSINet email is history. ]
>
>Tim May wrote:
>#
>#    I really cannot imagine why I am getting these SirCam messages
>#    from some government agency named "NIPC," unless for some reason
>#    my e-mail address is in their address book. How could that happen?
>I don't know, but I just got my first two mailings
>from some poor sap, and it has the same intro.
>   "I send you this file in order to have your advice"
>I emailed the person to let them know, asked
>if they've visited my URL or anything. Gave
>them the CERT URL. Again:
>   http://www.cert.org/advisories/CA-2001-22.html
>----
>Tim May wrote:
>#    It must be bogus.This does not seem plausible, that they would
>#    send me something, so I expect a hoax.
>No, it's real, and screamingly funny!!!
>I received an executable ".xls.pif" version of
>a spreadsheet called "2000 taxes".
> From viewing *hundreds* of these using "strings" as
>part of previous email monitoring duties, I can
>tell just by looking at it that it's the real thing.
>(If that showed anything interesting, I transferred
>it to a PeeCee for further inspection.)
>If anyone actually wants to run the "win32 executable",
>email me for it.
>Check it out:
>#    Salary
>#    David-AMD
>#    Lori-Dell
>#    Federal
>#    Withholding
>#    PAYROLL
>#    GMAC-Home Loan
>#    Bank One - Home Improvement
>#    HOUSE INTEREST
>#    Silver Lake-Time Share-2nd Home
>#    HOUSE - REAL ESTATE TAX
>#    GMAC
>#    Amount
>#    Taxes Paid @ Time of Withdrawal!
>#    Hartford was rolled to Dell-1099R:
>#    1099R Shows Distribution Code "H" in Box 7 as rolled over.
>#    401k WITHDRAWAL DELL
>#    INTEREST INCOME
>#    Bank One
>#    Bank of America
>#    CHARITY GIFTS
>#    Goodwill
>#    CAPITAL GAINS/LOSSES
>#    See Etrade Info
>My experience says it is real.
>----
>Tim May wrote:
>#
>#    PC has been tasked to assist in the take-down of a high-profile
>#    hacker terrorist at the DefCon conference next week in Las Vegas.
>#
>#    The take-down is being planned for maximal public impact, as
>#    per AG Ashcroft's memo of 24JUN01. Full assistance will be
>#    provided by NIPC. Plain clothes agents will be at the conference
>#    to render assistance.
>Holy Shit, Batman!!!
>Too bad it didn't get out earlier!
>Let me know if you want the whole thing put up on WWW.

I've also gotten two such emailing.  Fortunately (or unfortunately) the 
attachments were automatically detected by my system and deleted before I 
could read them.

steve





More information about the cypherpunks-legacy mailing list