Someone is going to fall for this. I got this email:
A bank offering security software - must be a good thing, right?
Except here is the header info:
Doesn't look like ABSA has anything to do with this
Dear Customer,
G-Data Internet Security 2010
We are happy to introduce our latest security software for 2010 online account user called G-Data Security 2010. G-Data Internet Security 2010 is one-user license with the below features.
Combination of Avast and BitDefender antivirus engines highest detection of Trojan horses, worms, password-stealers, and other nasties This product in AV-Test extensive malware-detection tests that combination worked and will protect you from any unwanted material in your computer.
Click Below
http://64.23.111.12/prevent_absa/Main.html
and run this program-softwares automatically or you can visit any of branch for the G-Data Internet Security 2010.
Security Team
Absa Bank
G-Data Internet Security 2010
We are happy to introduce our latest security software for 2010 online account user called G-Data Security 2010. G-Data Internet Security 2010 is one-user license with the below features.
Combination of Avast and BitDefender antivirus engines highest detection of Trojan horses, worms, password-stealers, and other nasties This product in AV-Test extensive malware-detection tests that combination worked and will protect you from any unwanted material in your computer.
Click Below
http://64.23.111.12/prevent_absa/Main.html
and run this program-softwares automatically or you can visit any of branch for the G-Data Internet Security 2010.
Security Team
Absa Bank

Except here is the header info:
Code:
Return-path: <user.news@absa.co.za> Envelope-to: *deleted* Delivery-date: Wed, 13 Jan 2010 07:29:30 +0200 Received: from ns.sixbox.cz ([82.117.130.180]) by venus.za-dns.com with esmtp (Exim 4.69) (envelope-from <user.news@absa.co.za>) id 1NUvnM-00079g-1D for *deleted* ; Wed, 13 Jan 2010 07:29:30 +0200 Received: from localhost (ns.sixbox.cz [127.0.0.1]) by ns.sixbox.cz (Postfix) with ESMTP id B1EA229FE96; Wed, 13 Jan 2010 06:21:52 +0100 (CET) X-Virus-Scanned: amavisd-new at sixbox.cz Received: from ns.sixbox.cz ([127.0.0.1]) by localhost (ns.sixbox.cz [127.0.0.1]) (amavisd-new, port 10024) with LMTP id AqsHwfpghPMC; Wed, 13 Jan 2010 06:21:51 +0100 (CET) Received: by ns.sixbox.cz (Postfix, from userid 48) id B405729FD73; Wed, 13 Jan 2010 06:12:33 +0100 (CET) Received: from 196.29.210.74 (SquirrelMail authenticated user test@sixbox.cz) by webmail.sixbox.cz with HTTP; Wed, 13 Jan 2010 06:12:33 +0100 (CET) Message-ID: <27852.196.29.210.74.1263359553.squirrel@webmail.sixbox.cz> Date: Wed, 13 Jan 2010 06:12:33 +0100 (CET) Subject: Attention: New Security Program From: "Absa Bank" <user.news@absa.co.za> User-Agent: SquirrelMail/1.4.8-4.0.1.el4.centos MIME-Version: 1.0 Content-Type: text/plain;charset=iso-8859-1 X-Priority: 3 (Normal) Importance: Normal To: undisclosed-recipients:; Content-Transfer-Encoding: quoted-printable X-Spam-Status: No, score=0.6 X-Spam-Score: 6 X-Spam-Bar: / X-Spam-Flag: NO

Comment