Job Scam: FIAS

Another job scam, while I'm about it. This is a nasty little bugger, as we'll see. The spam targets Australians, and was sent to a ".au" address. It was received from 201.18.113.31 on Sun, 28 Aug 2005 13:58:43 -0000.

Exciting offer,
Open jobs:
Manager working at home;
What we need:
Are you smart and honest? We are looking for people like you!
Our worker is:
Adults only;
Permanent resident of Australia;
Computer and e-mail owner;
Free time - 2-3 hours;
Details:
Being our company representative in your country before we open an office there.
Your line of work will be tied to banks and the banking system.
Opening a business account takes 2 weeks.
Therefore work will use your personal account.
If you dont have a personal account - thats not a problem.
An account can be opened in just one day in any bank.
10% is what you will make from every transaction for letting us use your account.
You will make from 250$ to 2500$, since every transaction is over 5000$.
Agree that this isn't bad, considering, that you will be using only 2-3 hours of your time daily!
Attention! 
Grab this job opportunity today, or else someone else will!
If you want to work for us and you meet our requirements - you need to fill out the following form.
http://charityrestministry.org/info.html

So what's with "charityrestministry.org"? If you go to the linked page, it actually claims to be something called "FIAS" and has another rendition of their job advertisement, plus a link to "f-i-a-s.com". The only link with "charityrestministry.org" is that their website has been compromised. So far as I can tell, "charityrestministry.org" is completely unconnected with this scam, and is guilty only of lax security and consequent use by evildoers. Most distressing for them, I'm sure. To clarify, note that the URL has "/info.html" tacked on the end of it. If you remove that part and go to their root page, the site is completely different. The spammers have simply added one page to the site, and linked to it.

Meanwhile, the "f-i-a-s.com" domain name has been registered since 2005-05-11, and last modified on 2005-08-28 (today), so the evildoer behind it is going to some lengths to keep it operating -- and the registrar obviously doesn't see it as their duty to do anything about it. The real FIAS knows about the issue for long enough that they've published a warning on their front page.