Posted 16 November 2012 - 03:58 PM
One of my customers has been receiving this message:
I am writing this email to you in all honesty and believing that you are conversant of the happenings in my home country Libya . My name is Farhat Omar Saleh and during the period of 2006-2011, I had worked at the finance department of the petroleum and gas company of Libya . I was directly involved in the sales of the country crude oil and made several funds from oil contract payments under the dictatorship of Muammar Muhammad Al-Gaddafi who is the leader of the Libyan people. I had to defect to South Africa during the Libyan Civil War because of the uprising caused by the Rebels and the fact that I believed in what they stood for.
I was able to make over Fifty Million Five Hundred Thousand United States Dollars (US$50,500,000.00), which I was able to move to South Africa through diplomatic services and I have been able to keep the funds in a secret vault of a private depository security firm.
My exile cannot make me do a lot of things in Libya but as a foreign national, I know you can help me right now move these funds out of South Africa for investments purposes.
I have presently applied for political asylum here in South Africa , but because of the soft stand on Gaddafi and his regime by the South African leader and the African Union, I cannot expose myself and the funds, hence I urgently need you to stand as my foreign partner and move the funds out of South Africa to your account.
I am asking your assistance here. If you aid me with this, I will be more than glad to split this money with you. The sharing mode will be 65% for me, 30% for you and 5% for any miscellaneous expenditure that may occur in the course of this transaction. I cannot give you a direct cell phone now to call me because of my exile and the fact that I wouldn’t want to be on the wrong note but if you give me your direct telephone number to indicate your acceptance of this, I will give you a call.
Get back to me only if you are interested. I wait to hear from you.
Send an email to my private email box: firstname.lastname@example.org"
This was getting caught by our spam filter. Today she received a message from a known external email address with attachments. She opened the email and found that the attachments were correct but the body was relpaced with the above email. We're thinking that there was a glitch within the spam filter that caused this but we're unsure. It's my person belief that it's replacing the body after it hits our exchange server. Does anyone know how this would happen?