I was pleased to note that the message originated from Yahoo, and contained several classic red flags for spam that even the neophyte mail server admin knows to watch out for, like from & reply-to headers with different different domains. This is the kind of l33t security I've come to expect from Yahoo. But hey, the Russians did it, and no one can be expected to secure their customers from state sponsored attacks. Susan here is no doubt a member of Nigeria's elite NIA.
From: Susan ***** desmondwilliams614 yahoo.com Subject: Hello, Date: Sat, 18 Mar 2017 12:12:52 +0000 (UTC) Reply-To: desmondwilliams614 yahoo.com Susan ***** deswill0119 yahoo.fr Hello, Greetings. With warm heart I offer my friendship and greetings, and I hope that this mail will meets you in good time. However strange or surprising this contact might seem to you as we have not meet personally or had any dealings in the past. I humbly ask that you take due consideration of its importance and immense benefit. My name is Susan Williams from Republic of Sierra-Leone. I have something very important that i would like to confide in you please,I have a reasonable amount of money which i inherited from my late father (Nine Million Five Hundred thousand United States Dollar}.US$9.500.000.00.which I want to invest in your country with you and again in a very profitable venture. Currently I am residing in Ivory coast now with my Brother Desmond Williams where my late father deposited the money, so i will like you to reply me immediatly so that i will give you more details about everything. Iam expecting your reply for more explanation. Please i am urgently waiting for your response and I am conceding 15% of this money to you for your efforts assistance. I will wait to hear from you. Thanks and God bless you. Our sincere regards to you, Susan and Desmond Williams
The NIA's battle cry: