Your internet access is going to get suspended

[Gene]

The current "important message" - do they really think I am going to open that zip file?

================================
Your internet access is going to get suspended

The Internet Service Provider Consorcium was made to protect the rights of software authors, artists.
We conduct regular wiretapping on our networks, to monitor criminal acts.

We are aware of your illegal activities on the internet wich were originating from

You can check the report of your activities in the past 6 month that we have attached. We strongly advise you to stop your activities regarding the illegal downloading of copyrighted material of your internet access will be suspended.

Sincerely
ICS Monitoring Team

[Gene]

Just to clarify - that was NOT from H9, just from one of the more convincing spambots.

They're monitoring everything you do! lol

[kobra]

Gene,

I also received more than one of these emails and to email addresses not associated with online anything....Suspect that this is a phishing email and not sure for what purpose as I did not open the .zip....

They claim to be ICS Monitoring Team but the email is from ortiz@positivenews.net, and whois for this reveals the owner to be mrp@positivenews.net

So i replied to mrp@positivenews.net cc'd the Cary, Illionis Police department and filed complaints with the 2 Gov agencies that I know of.

If you opened the zip - I would run a complete scan of the PC that you did this from as there is a reason they are sending this in hopes of something

I am forwarding this phishing email that was sent from ortiz@positivenews.net claiming to be associated with ICS Monitoring Team.

I am also forwarding this to the local authorities in Cary, Illinois and filing this with cybercrime.gov and ic3.gov the internet fraud complaint center.

As the header information is indicating that this emminated from your domain and mail server if you are not responsible I suggest that you collect your logs to substantiate this fact.

[Gene]

I never open the zip files on those things, ever!. They keep comming and now Norton is tagging them as having a Trojan Horse.

Mine come from different locations.

from the headers of the latest:
From: "Monitoring Team" <halockala@optonline.net>
User-Agent: Thunderbird 2.0.0.12 (Windows/20080213)
Received: from [118.68.85.214] (helo=adsl-dynamic-pool-xxx.hcm.fpt.vn)

User-Agent: Thunderbird is common to all of them.

[kobra]

Good policy!!