Subj : covid related
To   : All
From : August Abolins
Date : Mon Apr 13 2020 02:18 pm

I just got my first covid-related phishing "attack" from a concerned  
individual in Brazil.  This one is rather benign and just redirects a  
reply to a different address.


  Return-Path: <SRS0=fZf+7a=55=ufscar.br=frosa@ashlies.ca>
  Return-path: <SRS0=fZf+7a=55=ufscar.br=frosa@ashlies.ca>
  Delivery-date: Mon, 13 Apr 2020 12:17:45 -0400
  Received: from mx01.ufscar.br ([200.133.224.13])
  by bosimpinc11 with bizsmtp
  id SGHj2200F0Hxri001GHkhF; Mon, 13 Apr 2020 12:17:45 -0400
  X-EN-OrigIP: 200.133.224.13
  X-EN-IMPSID: SGHj2200F0Hxri001GHkhF
  Received: from SOSO101 (unknown [41.157.114.136])
  (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits))
  (No client certificate requested)
  (Authenticated sender: frosa)
  by mx01.ufscar.br (Postfix) with ESMTPSA id E2E842ABE67;
  Mon, 13 Apr 2020 12:47:14 -0300 (-03)
  Reply-To: <sfs23101@gmail.com>
  From: <frosa@ufscar.br>
  To: <frosa@ufscar.br>
  References:
  In-Reply-To:
  Subject: Email: Your Fund !!!
  Date: Wed, 15 Apr 2020 00:33:53 +0800
  Message-ID: <39cc01d61284$e46055b0$ad210110$@ufscar.br>
  X-Mailer: Microsoft Outlook 15.0
  X-Antivirus: AVG (VPS 200412-0, 04/12/2020), Outbound message
  X-Antivirus-Status: Clean

  This is a multipart message in MIME format.

  ------=_NextPart_000_39CD_01D612C7.F289B030
  Content-Type: text/plain;
  charset="us-ascii"
  Content-Transfer-Encoding: 7bit

  Did you receive your Covid-19 Relief Fund yet???


  --
  This email has been checked for viruses by AVG.
  https://www.avg.com


Nice.. it arrived "checked" by AVG.  How most reassuring.




  ../|ug

--- OpenXP 5.0.43
 * Origin: /|ug's Point, Ont. CANADA (2:221/1.58)

.