Had to put this one here!

Look at that... They put a picture from Bing Earth or whatever that stuff is called (I never use Bing...) and that is to show me where the user who accessed by account with Firefox was at the time of the attack.

I wonder how many people fell for it. Hay! The banner at the top is real. It comes straight from Bank of America's website.

¨We'll help you secure your Account¨

Return-Path: <info@mail.com>
X-Original-To: alexis@m2osw.com
Delivered-To: alexis@m2osw.com
Received: from tbjjbihbhfbcc.turbo-smtp.net (tbjjbihbhfbcc.turbo-smtp.net [199.187.175.122])
	by mail.m2osw.com (Postfix) with SMTP id CCF4ECE02DE
	for <alexis@m2osw.com>; Fri,  3 Jan 2014 16:04:43 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mail.com;
	s=turbo-smtp; x=1389398683; h=DomainKey-Signature:Received:
	Received:MIME-Version:From:Reply-To:To:Subject:Content-Type:Date:
	Message-ID; bh=gakVhY7gChp+RGLVRBDbB0E7cOpB2w16KqrC8HkWUI0=; b=Q
	PeBKNg8ZiBmt/EoH86onWiDoCaDoo8e/htTQx9ekJXmqzmBotf5qoblWOrzEEl+5
	uzVHMLU0D1vI//e6ePKliWdNkZs+zMuUb2CZjXqnGXKLRUrlCebLyzG0sXAqMFBo
	91j0eqMMU2wW5qa94yZFlMUSebJWMtnuJrk3q2uyxU=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
	s=turbo-smtp; d=mail.com;
	h=Received:Received:X-TurboSMTP-Tracking:Return-Path:MIME-Version:From:Reply-To:To:Subject:Content-Type:X-Mailer:Date:Message-ID;
	b=alhkkC23TDV7xiPLxaJuZwWLvOwDVQZQGdApOQwee2S3d8CK8+yoKQ5fDK9c+l
	S3wRQmE2whm4XXww8hz951HH1iWIhXGZKVJlaO/+Ar2Ok090BgRnR01A0lWQlpNI
	8JpO6CfXL9W8+rT5LbSjNboYPBNNxJSFQrZX5jYzGWCrw=;
Received: (qmail 12227 invoked from network); 4 Jan 2014 00:04:43 -0000
Received: from unknown (HELO 180.215.39.131) (authenticated@180.215.39.131)  by turbo-smtp.com with SMTP; 4 Jan 2014 00:04:40 -0000
X-TurboSMTP-Tracking: 903215341
MIME-Version: 1.0
From: "Bank of America Alert" <info<info@mail.com>>
Reply-To: info<info@mail.com>
To: alexis@m2osw.com
Subject: Alert
Content-Type: multipart/related; type="text/html"; boundary="----=_NextPart_001_7A12_0CFE2C51.18C93BFD"
X-Mailer: Smart_Send_2_0_138
Date: Fri, 3 Jan 2014 16:04:33 -0800
Message-ID: <846836548244018711999@oyisokah-PC>

 

Dear BOA Online^SM Customer,

Someone attempted to log in to your  account using your password. Because it happened from a location you don't normally log in from, we blocked your account to prevent them accessing your account. We wanted to make sure it was you. If it wasn't, we'll help you secure your account.

Bank of America Email, 8th Floor, 101 South Tryon St., Charlotte, NC 28255-0001

Bank of America, N.A. Member FDIC. Equal Housing Lender
© 2013 Bank of America Corporation. All rights reserved.