HEX

File: //home/govancoz/mail/new/1711404886.M239361P1120503.zacp120.ve.host,S=16700,W=16996
Envelope-to: cheryl@govan.co.za
Delivery-date: Tue, 26 Mar 2024 00:14:46 +0200
From: Info MPA <hasahill@outlook.com>
Subject:
Thread-Index: AQHafwEyJOHPVUm9Gk2Omz3XcGGtDg==
Date: Mon, 25 Mar 2024 22:13:54 +0000
Message-ID:
 <AS2PR10MB74796A7454010BF8FD4F03B4C6362@AS2PR10MB7479.EURPRD10.PROD.OUTLOOK.COM>
Accept-Language: en-ZA, en-US
Content-Language: en-ZA
msip_labels:
x-tmn: [DrMJHIsyu/aUghUwU6NWB0Xnk0ekCvrt]
x-ms-publictraffictype: Email
x-ms-traffictypediagnostic: AS2PR10MB7479:EE_|GV1PR10MB5890:EE_
x-ms-office365-filtering-correlation-id: a4bcd894-e25c-4801-bf14-08dc4d18dc30
x-ms-exchange-slblob-mailprops:
 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
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info:
 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
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0:
 =?iso-8859-1?Q?gnVFZag9iSdN3Hr4DWI7hUsWsj3NNmkC232PgFPcqMZunbggUObeW+x1oJ?=
 =?iso-8859-1?Q?8AP7BeUs+2ceo7q57DOTcLjczd5W1nMsx+/gXHmYYfwaUMHjazTaehdf8r?=
 =?iso-8859-1?Q?mTneeFYwiiPMaNmc2H9IoR4ukwow+0F1VlzLNEQEASHDHK+tBdQSAOfLxl?=
 =?iso-8859-1?Q?zyQGPy3YB/qLcArLnlA4C4GiatgqeRSCNQhmUVzhor+I/nGo+Q+SfqwyZi?=
 =?iso-8859-1?Q?+EkW5rbR317CaoDmepIyNU5pPHLZErIjJ0shop46KmviykODYdqPF5YNsW?=
 =?iso-8859-1?Q?dscDQqdAOXzarYzwYs3ZeDkQGuN62HAb60X6GLUbt7a+alPUgph4lLFuJT?=
 =?iso-8859-1?Q?OX3kecvQ6cbeAGI+sENkA9aGzkDGDTdeodxijf9VXzXqoeUCPxbygsP9IL?=
 =?iso-8859-1?Q?fkiJeUGxzEFNgbAEYtcXVEKRXg0062t+6XgHzd3td1LbPgo6l9tPhD9Upw?=
 =?iso-8859-1?Q?m+QXdBoUa4FAhRTVg9SyiCQj5Ikh3c9ufd6CN/QOL0NHlRvXvMEOj7Mn9w?=
 =?iso-8859-1?Q?sdvREcSTSMPj9hTiPNwuI7GEQO7wVleOfwl6z08+poGWlaKhH12030oL/+?=
 =?iso-8859-1?Q?VzcG3GxQyMdl1VJWy2Spo4ueE+CRQBzh6xYgwTfKVJz18cjPRm5cfXgtOA?=
 =?iso-8859-1?Q?91q5RiscqVAq26uvUDpi1W2yOyIBCFKEUk7LA58yvzUPjj6hUEjwiixGBf?=
 =?iso-8859-1?Q?8eVH2axh5ZjVLbUoA5yeAJNGbcliQ/vLlYOV3LR3CV4lkxnnkUFSNyOYZ7?=
 =?iso-8859-1?Q?6e38aBuAsAPVmEmQdtCPFKkkkOvjb/50n1eBuEBS3OU+dMwYfyWhNtpHCv?=
 =?iso-8859-1?Q?42oDXHdl0vwhVin2HWIucJEgPvV+dvMJ1qSw0DXzjAjn/7cRDDJlyj7TKH?=
 =?iso-8859-1?Q?uRyYmTfEfjhAgyQxKt+EtXvXCu6vxxAft1s9+Ou8kkYF5uKqqVHhVIXcHt?=
 =?iso-8859-1?Q?udeLFKam7zxjZl4FMCKE5sl5ItrIwYpz1n20+zblGa8mpJ6/r3ziN6bB04?=
 =?iso-8859-1?Q?xAtoEFPGb6+ohvC4ILpzK5mWsk+gM6d9CNPmKPAuJrXpIZ+u9MQZcP4GO7?=
 =?iso-8859-1?Q?nvgmbj1P0bnDG0wjwsP+0aNF4vgZuI/qOdU3Hz+GsgvCLbd35cKUoKSIXZ?=
 =?iso-8859-1?Q?KMkblrPGcoqIx6tp4oysocoZQ/B1VdVn/EZ3oTi93XciuY3iUED25P2Hvs?=
 =?iso-8859-1?Q?9bGBl5Guu5WgD3/SoJlr/CQOF/z8+5CZfhhdsafs3AP9sdMyMLDwrQi+H4?=
 =?iso-8859-1?Q?49KizavGXutKfZgjDoYQ=3D=3D?=
Content-Type: multipart/alternative;
	boundary="_000_AS2PR10MB74796A7454010BF8FD4F03B4C6362AS2PR10MB7479EURP_"
MIME-Version: 1.0
X-OriginatorOrg: outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: AS2PR10MB7479.EURPRD10.PROD.OUTLOOK.COM
X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000
X-MS-Exchange-CrossTenant-Network-Message-Id: a4bcd894-e25c-4801-bf14-08dc4d18dc30
X-MS-Exchange-CrossTenant-originalarrivaltime: 25 Mar 2024 22:13:54.8006
 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000
X-MS-Exchange-Transport-CrossTenantHeadersStamped: GV1PR10MB5890
X-Spam-Status: No, score=4.3
X-Spam-Score: 43
X-Spam-Bar: ++++
X-Ham-Report: Spam detection software, running on the system "zacp120.ve.host",
 has NOT identified this incoming email as spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Hello I don't need to introduce myself, I'll get straight
   to the point. Because of your disregard for Internet security, I was able
   to easily install a Trojan horse on your device. which accessed all the data
    on your device and allowed me to control it remotely. Once I in [...] 
 Content analysis details:   (4.3 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.2 KAM_BLANKSUBJECT       Message has a blank Subject
  0.0 FREEMAIL_FROM          Sender email is commonly abused enduser mail
                             provider
                             [hasahill[at]outlook.com]
  1.2 MISSING_HEADERS        Missing To: header
 -0.0 SPF_PASS               SPF: sender matches SPF record
 -0.0 SPF_HELO_PASS          SPF: HELO matches SPF record
  0.0 HTML_MESSAGE           BODY: HTML included in message
 -0.1 DKIM_VALID_AU          Message has a valid DKIM or DK signature from
                             author's domain
  0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily
                             valid
 -0.1 DKIM_VALID_EF          Message has a valid DKIM or DK signature from
                             envelope-from domain
 -0.1 DKIM_VALID             Message has at least one valid DKIM or DK signature
  2.1 MALFORMED_FREEMAIL     Bad headers on message from free email
                             service
  1.0 FREEMAIL_REPLY         From and body contain different freemails
X-Spam-Flag: NO

--_000_AS2PR10MB74796A7454010BF8FD4F03B4C6362AS2PR10MB7479EURP_
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

Hello

I don't need to introduce myself, I'll get straight to the point.

Because of your disregard for Internet security, I was able to easily insta=
ll a Trojan horse on your device. which accessed all the data on your devic=
e and allowed me to control it remotely. Once I infected one device, I had =
no problem accessing other devices.

My spyware is embedded in the drivers and updates its signature every few h=
ours, so no antivirus or firewall can even detect it.

I've been successfully watching you for some time by infecting a malware th=
rough the adult sites you visit regularly. My Spyware has also recorded vid=
eos of you masturbating and satisfying yourself.  I have full access to you=
r address book and I doubt very much you'd want your family, coworkers, and=
 your entire contact list  to see footage of you pleasuring yourself.

I'm just gonna give you a condition to prevent this from happening, kindly =
send me R25, 000.00 through Shoprite Money Market Counter / Spar / Checkers=
 or Standard Bank Instant Money and email me the Reference/Vouchers numbers=
 and the 4-Digit PIN number to o.meyer@activist.com. Blu Voucher, OTT Vouch=
er or 1Voucher can be accepted.

NB: The daily limit for the above transfer option is R5, 000.00 a day. So i=
t'll be done in 5 days.

Once the money is received, I will delete all the data, remotely erase the =
virus on your devices and you will never hear from me again, it's a very sm=
all amount to pay for not destroying your reputation in the eyes of those w=
ho, judging by your correspondence in messengers, have an opinion of you as=
 a decent human person.

You have 48 hours! - I'll be notified as soon as you open this letter and t=
he countdown begins. Don't call law enforcement, remember, I have access to=
 all of your devices, and as soon as I notice such activity, it will automa=
tically lead to the release of all of your data.

Do not attempt to reformat your system or factory reset your device. I have=
 all your data already, and secondly, as I said, I have remote access to al=
l your devices and as soon as I notice such an attempt, it will lead to irr=
eversible consequences.

Waiting for your prompt response!

--_000_AS2PR10MB74796A7454010BF8FD4F03B4C6362AS2PR10MB7479EURP_
Content-Type: text/html; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<html>
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Diso-8859-=
1">
<style type=3D"text/css" style=3D"display:none;"> P {margin-top:0;margin-bo=
ttom:0;} </style>
</head>
<body dir=3D"ltr">
<div class=3D"elementToProof" style=3D"font-family: Calibri, Helvetica, san=
s-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Hello</div>
<div style=3D"font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;=
 color: rgb(0, 0, 0);">
<br>
</div>
<div style=3D"font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;=
 color: rgb(0, 0, 0);">
I don't need to introduce myself, I'll get straight to the point.</div>
<div style=3D"font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;=
 color: rgb(0, 0, 0);">
<br>
</div>
<div style=3D"font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;=
 color: rgb(0, 0, 0);">
Because of your disregard for Internet security, I was able to easily insta=
ll a Trojan horse on your device. which accessed all the data on your devic=
e and allowed me to control it remotely. Once I infected one device, I had =
no problem accessing other devices.</div>
<div style=3D"font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;=
 color: rgb(0, 0, 0);">
<br>
</div>
<div style=3D"font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;=
 color: rgb(0, 0, 0);">
My spyware is embedded in the drivers and updates its signature every few h=
ours, so no antivirus or firewall can even detect it.</div>
<div style=3D"font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;=
 color: rgb(0, 0, 0);">
<br>
</div>
<div style=3D"font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;=
 color: rgb(0, 0, 0);">
I've been successfully watching you for some time by infecting a malware th=
rough the adult sites you visit regularly. My Spyware has also recorded vid=
eos of you masturbating and satisfying yourself. &nbsp;I have full access t=
o your address book and I doubt very
 much you'd want your family, coworkers, and your entire contact list &nbsp=
;to see footage of you pleasuring yourself.</div>
<div style=3D"font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;=
 color: rgb(0, 0, 0);">
<br>
</div>
<div style=3D"font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;=
 color: rgb(0, 0, 0);">
I'm just gonna give you a condition to prevent this from happening, kindly =
send me R25, 000.00 through Shoprite Money Market Counter / Spar / Checkers=
 or Standard Bank Instant Money and email me the Reference/Vouchers numbers=
 and the 4-Digit PIN number to o.meyer@activist.com.
 Blu Voucher, OTT Voucher or 1Voucher can be accepted.</div>
<div style=3D"font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;=
 color: rgb(0, 0, 0);">
<br>
</div>
<div style=3D"font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;=
 color: rgb(0, 0, 0);">
NB: The daily limit for the above transfer option is R5, 000.00 a day. So i=
t'll be done in 5 days.</div>
<div style=3D"font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;=
 color: rgb(0, 0, 0);">
<br>
</div>
<div style=3D"font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;=
 color: rgb(0, 0, 0);">
Once the money is received, I will delete all the data, remotely erase the =
virus on your devices and you will never hear from me again, it's a very sm=
all amount to pay for not destroying your reputation in the eyes of those w=
ho, judging by your correspondence
 in messengers, have an opinion of you as a decent human person.</div>
<div style=3D"font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;=
 color: rgb(0, 0, 0);">
<br>
</div>
<div style=3D"font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;=
 color: rgb(0, 0, 0);">
You have 48 hours! - I'll be notified as soon as you open this letter and t=
he countdown begins. Don't call law enforcement, remember, I have access to=
 all of your devices, and as soon as I notice such activity, it will automa=
tically lead to the release of all
 of your data.</div>
<div style=3D"font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;=
 color: rgb(0, 0, 0);">
<br>
</div>
<div style=3D"font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;=
 color: rgb(0, 0, 0);">
Do not attempt to reformat your system or factory reset your device. I have=
 all your data already, and secondly, as I said, I have remote access to al=
l your devices and as soon as I notice such an attempt, it will lead to irr=
eversible consequences.</div>
<div style=3D"font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;=
 color: rgb(0, 0, 0);">
<br>
</div>
<div style=3D"font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;=
 color: rgb(0, 0, 0);">
Waiting for your prompt response!</div>
</body>
</html>

--_000_AS2PR10MB74796A7454010BF8FD4F03B4C6362AS2PR10MB7479EURP_--