API tools faq
paste
Advertisement
wavellan

20230619_PHISHING_SCAM_1

wavellan
Jun 19th, 2023
114
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 8.49 KB | None | 0 0
raw download clone embed print report
  1. Attention: Sir/Madam
  2. After due deliberation with my Legal Adviser, I decided to forward to you this Profitable Business Investment of U$D150 Million. My name is Engr. Pieter Makwana; a Personal Assistant to a Senior Government Official (Eskom CEO) Matshela Koko who relinquished his position of Eskom CEO Friday 16th February, 2018 in order to avoid facing a series of new charges. Between 2014 and 2017, multinational consultants McKinsey and its de facto empowerment partner, Trillian, which linked to the Gupta family received contracts worth 11.7 Billion ZAR which is equivalent to 1,002,838,594.54 Billion USD from Eskom to supply coal.
  3. During the reign of Matshela Koko as Eskom CEO from 01st December, 2016 till 31st January, 2018, I deliberately inflated and over-invoiced the Contract Sum, leaving an excess of US$150, 000,000.00 (One Hundred and Fifty Million United States Dollars Only). This Fund resulted from an over-invoiced contract award by our office under the budget allocation to our Office and the bill was approved for payment by the Department of Energy. The contract was executed, commissioned and the contractors were paid their actual cost of the contract. We are left with the balance of US$150,000,000.00 only as the over-invoiced amount which we have deliberately over estimated for our own use. But under the protocol division, civil servants are forbidden to operate or own foreign accounts.
  4. But the company I submitted as the beneficiary was a non-existing foreign company, which was a purported attempt by me to divert the money for my private use. I do not intend to mince words with you, I have to tell you the truth; this is a business deal but completely risk-free, secure and genuine because the contract has been perfectly and genuinely executed and completed. It depends on whether you are interested or not.
  5. Right now, this amount is due for payment and is floating in the treasury attached to a non-existing foreign Company. This Contract Sum cannot be claimed because the non-existing foreign Company will be made a long existing Company with the information of the foreign Contractor. That is why I contacted you so that we can claim the Contract Sum for our mutual benefit.
  6. I will use my past official position with the prominent people I know in the South African Government to source all the necessary approvals, official documents and certificates that will back up the fund to reflect that you/your company genuinely executed and completed the contract. All necessary arrangements have been put in place in all the relevant departments for immediate approval of this payment.
  7. Since I am no longer working with the Government and the Gupta’s are on the run because of the state capture crime they committed in South Africa, this is the best time to work on this Funds Release to a foreign Bank Account.
  8. For your co-operation, I have agreed to offer you 50% of the entire amount on conclusion of the transaction while 50% also will be for mine. Please, if you are interested in this proposal, I want you to respond immediately for further information and directives.
  9. This transaction is expected to be completed as soon as possible based on our readiness and is highly confidential and discreet. Thank you for your co-operation. Your urgent reply is awaited.
  10. Best Regards,
  11. Engr. Pieter Makwana
  12. Former Eskom Staff
  13.  
  14.  
  15.  
  16.  
  17. Received: from CO1PR05MB8282.namprd05.prod.outlook.com (::1) by
  18. MWHPR0501MB3899.namprd05.prod.outlook.com with HTTPS; Mon, 19 Jun 2023
  19. 03:01:44 +0000
  20. Received: from SJ0PR03CA0050.namprd03.prod.outlook.com (2603:10b6:a03:33e::25)
  21. by CO1PR05MB8282.namprd05.prod.outlook.com (2603:10b6:303:fd::23) with
  22. Microsoft SMTP Server (version=TLS1_2,
  23. cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.6500.36; Mon, 19 Jun
  24. 2023 03:01:43 +0000
  25. Received: from DM6NAM12FT109.eop-nam12.prod.protection.outlook.com
  26. (2603:10b6:a03:33e:cafe::cf) by SJ0PR03CA0050.outlook.office365.com
  27. (2603:10b6:a03:33e::25) with Microsoft SMTP Server (version=TLS1_2,
  28. cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.6500.36 via Frontend
  29. Transport; Mon, 19 Jun 2023 03:01:43 +0000
  30. Authentication-Results: spf=pass (sender IP is 212.98.191.129)
  31. smtp.mailfrom=obkgroup.com; dkim=pass (signature was verified)
  32. header.d=obkgroup.com;dmarc=pass action=none
  33. header.from=obkgroup.com;compauth=pass reason=100
  34. Received-SPF: Pass (protection.outlook.com: domain of obkgroup.com designates
  35. 212.98.191.129 as permitted sender) receiver=protection.outlook.com;
  36. client-ip=212.98.191.129; helo=mail.obkgroup.com; pr=C
  37. Received: from mail.obkgroup.com (212.98.191.129) by
  38. DM6NAM12FT109.mail.protection.outlook.com (10.13.179.41) with Microsoft SMTP
  39. Server id 15.20.6521.20 via Frontend Transport; Mon, 19 Jun 2023 03:01:41
  40. +0000
  41. Received: from localhost (localhost [127.0.0.1])
  42. by mail.obkgroup.com (Postfix) with ESMTP id 77A1CC274E;
  43. Mon, 19 Jun 2023 06:01:40 +0300 (+03)
  44. DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=obkgroup.com;
  45. s=mail; t=1687143700;
  46. bh=Zw8IrrK9VmMREIGxwEkfgTHVPTIEgykrOGmGM1jJj8I=;
  47. h=Subject:To:From:Date:Reply-To;
  48. b=4nsAebMQ+3QZbJrsF7gwsfvv/dd76qUtHM21OWifvCC4Edy0kN3RJl+WSDi6ji0H1
  49. ksxAf1IWrppaS3DHo0TDksCe0eWLc23Y/BbsLvDHdlUtfnstIdP/UZm/aaNjank2jO
  50. 6plc4D5yn2d3Bj2IwIuqI8zYdTWCEQVrDyxu0G/E=
  51. X-Virus-Scanned: Debian amavisd-new at mail.obkgroup.by
  52. Received: from mail.obkgroup.com ([127.0.0.1])
  53. by localhost (mail.obkgroup.by [127.0.0.1]) (amavisd-new, port 10024)
  54. with ESMTP id v8jEuHIbfs4A; Mon, 19 Jun 2023 06:01:40 +0300 (+03)
  55. Received: from [192.168.0.215] (unknown [41.216.201.139])
  56. by mail.obkgroup.com (Postfix) with ESMTPA id E6E24C2889;
  57. Mon, 19 Jun 2023 06:00:42 +0300 (+03)
  58. DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=obkgroup.com;
  59. s=mail; t=1687143688;
  60. bh=Zw8IrrK9VmMREIGxwEkfgTHVPTIEgykrOGmGM1jJj8I=;
  61. h=Subject:To:From:Date:Reply-To;
  62. b=bUnyQTmVpZJaW1vPG+4zKLt41dKanoZZ+JVQvP8s3RYg+TOw8s7z/dH0BByeb+u/o
  63. /ssOcnIAk1meYy76N2Z7reYhTOyjvul1YyqM97akKc7pV8Ks0140mwY8RJJfrth+bu
  64. 0/VjJe4C+lRH/4s7ZvsR2qTdmxSz6mKFnlobRapo=
  65. MIME-Version: 1.0
  66. Content-Description: Mail message body
  67. Subject: Contract Deal From Eskom Holdings SOC LTD.
  68. To: Recipients <[email protected]>
  69. From: "Pieter Makwana" <[email protected]>
  70. Date: Mon, 19 Jun 2023 04:59:59 +0200
  71. Reply-To: [email protected]
  72. Message-Id: <[email protected]>
  73. Return-Path: [email protected]
  74. X-MS-Exchange-Organization-ExpirationStartTime: 19 Jun 2023 03:01:42.2613
  75. (UTC)
  76. X-MS-Exchange-Organization-ExpirationStartTimeReason: OriginalSubmit
  77. X-MS-Exchange-Organization-ExpirationInterval: 1:00:00:00.0000000
  78. X-MS-Exchange-Organization-ExpirationIntervalReason: OriginalSubmit
  79. X-MS-Exchange-Organization-Network-Message-Id:
  80. 7cb47b86-9344-4e4a-d013-08db7071824a
  81. X-EOPAttributedMessage: 0
  82. X-EOPTenantAttributedMessage: 0d4bfd0a-5b8b-4c86-b245-3f11f8ea539a:0
  83. X-MS-Exchange-Organization-MessageDirectionality: Incoming
  84. X-MS-PublicTrafficType: Email
  85. X-MS-TrafficTypeDiagnostic:
  86. DM6NAM12FT109:EE_|CO1PR05MB8282:EE_|MWHPR0501MB3899:EE_
  87. X-MS-Exchange-Organization-AuthSource:
  88. DM6NAM12FT109.eop-nam12.prod.protection.outlook.com
  89. X-MS-Exchange-Organization-AuthAs: Anonymous
  90. X-MS-Office365-Filtering-Correlation-Id: 7cb47b86-9344-4e4a-d013-08db7071824a
  91. X-MS-Exchange-Organization-SCL: 5
  92. X-Forefront-Antispam-Report:
  93. CIP:212.98.191.129;CTRY:BY;LANG:en;SCL:5;SRV:;IPV:NLI;SFV:SPM;H:mail.obkgroup.com;PTR:mail.obkgroup.com;CAT:SPM;SFS:(13230028)(451199021)(66899021)(2860700004)(10136002)(6666004)(6966003)(7636003)(7596003)(956004)(356005)(426003)(336012)(86362001)(33656002)(58800400005)(26005)(1076003)(6266002)(6200100001)(22186003)(8676002)(1096003)(6862004)(5660300002)(5001810100001)(83380400001)(62346012);DIR:INB;
  94. X-Microsoft-Antispam: BCL:0;
  95. X-MS-Exchange-CrossTenant-OriginalArrivalTime: 19 Jun 2023 03:01:41.9020
  96. (UTC)
  97. X-MS-Exchange-CrossTenant-Network-Message-Id: 7cb47b86-9344-4e4a-d013-08db7071824a
  98. X-MS-Exchange-CrossTenant-Id: 0d4bfd0a-5b8b-4c86-b245-3f11f8ea539a
  99. X-MS-Exchange-CrossTenant-AuthSource:
  100. DM6NAM12FT109.eop-nam12.prod.protection.outlook.com
  101. X-MS-Exchange-CrossTenant-AuthAs: Anonymous
  102. X-MS-Exchange-CrossTenant-FromEntityHeader: Internet
  103. X-MS-Exchange-Transport-CrossTenantHeadersStamped: CO1PR05MB8282
  104. X-MS-Exchange-Transport-EndToEndLatency: 00:00:03.0705940
  105. X-MS-Exchange-Processed-By-BccFoldering: 15.20.6500.036
  106. X-Microsoft-Antispam-Mailbox-Delivery:
  107. ucf:0;jmr:0;auth:0;dest:J;OFR:SpamFilterAuthJ;ENG:(910001)(944506478)(944626604)(920097)(930097)(3100021);RF:JunkEmail;
  108. Content-type: text/plain;
  109. charset="UTF-8"
  110. Content-transfer-encoding: quoted-printable
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!