Job Scam: Global Austrian Syndicate (gas-ltd.info)

The Global Austrian Syndicate job scammers have reincarnated again: at last report, they were "gas-limited.com"; now they're "gas-ltd.info". They've also started sending their spam as plain text! What's up guys? Too many people blocking on image attachments? Whatever the case, the job remains the same: send stolen money overseas via wire transfer service until the police arrest you for it.

At the time of writing, the one nameserver for the domain which was responding (at 207.210.93.181) gave the following answer to an address query.

; <<>> DiG 9.3.1 <<>> A gas-ltd.info @207.210.93.181
; (1 server found)
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 48651
;; flags: qr aa rd; QUERY: 1, ANSWER: 5, AUTHORITY: 2, ADDITIONAL: 2

;; QUESTION SECTION:
;gas-ltd.info.                  IN      A

;; ANSWER SECTION:
gas-ltd.info.           1800    IN      A       172.184.3.151
gas-ltd.info.           1800    IN      A       172.210.81.133
gas-ltd.info.           1800    IN      A       213.103.251.238
gas-ltd.info.           1800    IN      A       64.53.175.197
gas-ltd.info.           1800    IN      A       84.58.57.238

;; AUTHORITY SECTION:
gas-ltd.info.           1800    IN      NS      ns2.get-site.com.
gas-ltd.info.           1800    IN      NS      ns1.get-site.com.

;; ADDITIONAL SECTION:
ns1.get-site.com.       1800    IN      A       207.210.93.181
ns2.get-site.com.       1800    IN      A       204.21.41.81

;; Query time: 222 msec
;; SERVER: 207.210.93.181#53(207.210.93.181)
;; WHEN: Thu Jun 29 17:33:40 2006
;; MSG SIZE  rcvd: 190

Reverse DNS lookups on the addresses yield "ACB80397.ipt.aol.com", "ACD25185.ipt.aol.com", "d213-103-251-238.cust.tele2.fr", "d53-64-197-175.nap.wideopenwest.com", and "dslb-084-058-057-238.pools.arcor-ip.net", respectively. Neither of the nameservers yield reverse DNS names: do your own "whois" lookup if you care.

Spam text is copied below, because it is text this time. By the way, they are lying outright when they say, "Your email was given by 3rd party website www.jobs-in-europe.net on our request". The email address to which this was sent appeared as a contact address on a website some years back, and hasn't been used for any other purpose. It's a spamtrap address now: spammers are the only ones still sending anything to it.

Hello

My  name  is  Francois Veillon I  am  the  manager of a  Human Recourses  department of Global Austrian Syndicate (GAS).
I’d like  to  offer a perfect vacancy for  you. The vacancy  of  a  Financial  manager  working  with  private  individuals.

  Let  me give you  some facts about  our  company first:
    Global  Austrian Syndicate (GAS) was registered back  in  1993.  The primary  focus of  Global  Austrian  Syndicate is international finance services, mainly  through the  Internet  and  other  communicative channels.  The  corporation is  interested  in  working  on the markets of all  countries without  exceptions and sees promotion of  its  services  through the  network of representatives (independent investment consultants) working  as private  individuals or  resident company employees as most  effective.  We also provide  a full range of  financial  services to  companies  and  to individuals  as well.  Additionally, we grant  credits to individuals  and companies on  the  international  level,  and  this list of  our  services  and opportunities is far from being complete.

  So today,  we  are glad to  offer you  to:
  - become  a  part of  our  company
    -  join  a team of highly  qualified specialists
- get  a prestigious part  time job
  - earn a real fortune

The main  advantages  of working as  a  Financial manager  dealing with private individuals are:

    -  You  don’t need any experience  or specific  knowledge
    -  You don’t need to  make  any advance payments
  -  This job  won’t take much of your  time.

  Your  range of duties will include:
- Receiving  payments  for the ordered stocks and bonds  from  the Global  Austrian  Syndicate  clients  (private individuals) to your bank  account
-  Withdrawing the funds and  transferring  them  further to our brokers  in one of  the countries  where the  desirable stocks  and  bonds  should  be  bought

The  transfer should  be  done  by the means of Western Union  or  Money Gram services  to fasten  the  process  of the  delivery of  the  funds.
Your SALARY  is  8%  commission  out  of  every  deposit  that you receive  to  your bank  account.

If you are  interested in  this job and would like to  get more information,  you  are welcome to  visit our website:

  http://gas-ltd.info/html/index.php?sect_id=5

  Or  you can just  write an  email to us,  and our managers  will  give a prompt  and  competent  reply.

  We  are  looking forward  to  working  with  you!
Your  email was  given by 3rd party website www.jobs-in-europe.net on  our request, as  you or someone  else subscribed  to  a job opportunities newsletter.
    I apologize if this  email reached you  by  mistake.  In  that  case,  please be so  kind to  delete  it.

    Yours faithfully Francois Veillon

Job Scam: job-alert.net

Why settle for a single job scam when you can set up an entire website for recruiting willing suckers? The spammers who have just registered "job-alert.net" (on 22-Jun-2006) and spamvertised it -- directly to the contact address for this blog, no less -- were probably thinking along those lines. The same spammers also appear to be using the domain "jobalertsvc-vac.com" (registered 26-Apr-2006), since all the "job-alert.net" website does at the moment is frame-wrap the "jobalertsvc-vac.com" site. There is also mention of "jalert.net" (registered 07-Jun-2006) on the page, but that domain is not currently resolving to any address or other useful record.

I don't know what specific jobs these guys are offering, but I'll wager my pound to your penny they're the sort that gets the worker on the wrong side of the law. But hey -- they're offering free tee-shirts!

Sir\Madam,

www.Job-Alert.Net - is a mail based recruitment business. It offers employers a genuine recruitment function that combines the candidate capture function and the human resources function of a recruitment agency. You just need to fill in a form and our representatives in your country will send you an e-mail when a position that interests you becomes available.

All operations are made manually, in order not to bore you with automated robot-search results. So, take your time to enter correct and detailed information about yourself.
Process is divided into steps. You can proceed with the first step by providing us with necessary information:
Job Alert First-step registration form here.
You will get your personal instructions for the last two steps by e-mail, as soon as possible.

Futhermore, everyone will get a FREE T-shirt of any size with Job-Alert.net logo and your Initials printed on it! We assure you, that every person who will find a job with our help will receive FREE Job-Alert.net T-shirt.

Thank you for your time.
Job-Alert.Net Team.

Job Scam: job@easternbridge.info

This is just a repeat of an earlier job scam spam with new contact details.

From: dodie flynn <terryhoskins@speedingbits.com>
Date: 27-Jun-2006 18:07
Subject: Open Vacancy
To: isabelle ramsey <ideceive@gmail.com>
 
 
 How many times did you think of giving up your
 permanent job and join another "good looking"
 work-at-home scheme? And how many of them were
 successful? Did you earn more than $5000 a month with
 them? NO? Then you have an opportunity right now and
 right here!
 
 We made it possible for you to get a real part-time
 job in a world of transportation business and control
 your income on your own! We will never ask you about
 your credit rating and never put any inquiries to your
 credit profile. This is business of partners, we don't
 take, we give you this opportunity
 
 You can become our Representative and take part in a
 stunning world of financial operations. No more
 up-front costs or tricks. A steady income is just a
 click away! The best thing it all depends on you.
 
 Being a long-established solid corporation we
 understand how important it is to provide our customers
 the best possibilities and support. We always try our
 best to be cooperative and customer-friendly, you can
 call or email us any time and ask a question if
 something is not clear.
 
 Get involved in a great transportation business, and
 start making money in just a few clicks. You will make
 a fixed amount ($30) out of every shipped product. The
 usual product quantity range from 10 to 100 packages a
 month. This is not a dream, you enter a serious market!
 A unique opportunity where your income depends on you!
 
 More information \ apply \ send your resumes to: job@easternbridge.info
 
 bird bolt arc transmitter gutta sundik
 flower-shaped Chaldee church seat board
 well-aware shot effect pleasure principle
 well-gathered Indo-malaysian donkey puncher
 apple mint apron conveyer fleecy-white
 call-down ward hill self-complacential
 yerba reuma accretion cutting sword blade
 brick archer tree-goddess best-principled

Job Scam: Global Austrian Syndicate (gas-limited.com)

The "Global Austrian Syndicate" crooks are at it again. They've done the same thing before with gas-ltd.biz and gas-ltd.cn, and recently they wore a different hat with adamsgreen.org. Those domains have all been neutered, so this time they're back with "gas-limited.com". Specifically, this spam links to http://gas-limited.com/html/index.php?sect_id=5.

At the time of writing, the one nameserver for the domain which was responding (at 207.210.93.181) gave the following answer to an address query.

; <<>> DiG 9.3.1 <<>> A gas-limited.com @207.210.93.181
; (1 server found)
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 56905
;; flags: qr aa rd; QUERY: 1, ANSWER: 5, AUTHORITY: 2, ADDITIONAL: 2

;; QUESTION SECTION:
;gas-limited.com.               IN      A

;; ANSWER SECTION:
gas-limited.com.        1800    IN      A       70.239.73.247
gas-limited.com.        1800    IN      A       81.101.95.9
gas-limited.com.        1800    IN      A       201.151.39.83
gas-limited.com.        1800    IN      A       24.12.203.230
gas-limited.com.        1800    IN      A       69.81.155.153

;; AUTHORITY SECTION:
gas-limited.com.        1800    IN      NS      ns2.get-site.com.
gas-limited.com.        1800    IN      NS      ns1.get-site.com.

;; ADDITIONAL SECTION:
ns1.get-site.com.       1800    IN      A       207.210.93.181
ns2.get-site.com.       1800    IN      A       204.21.41.81

;; Query time: 222 msec
;; SERVER: 207.210.93.181#53(207.210.93.181)
;; WHEN: Tue Jun 27 04:36:58 2006
;; MSG SIZE  rcvd: 190

I'm leaving it as an exercise to the reader to determine whether the addresses returned in this query are customer systems on broadband networks, as has been the case in times past. (Hint: yes, they are.)

Job Scam: Adams Green, Inc. (adamsgreen.org)

From the scumbags who brought you Global Austrian Syndicate (twice) and Swiss Invest before it, it is iDeceive's dubious honour to present "Adams Green, Inc." The scam is the same: only the names have been changed to victimise the innocent. We have the same text-as-image spam, with the same layout, using the same modus operandi. This time the domain is "adamsgreen.org", the contact calls himself "Andrew Thomson", and "there are 5 openings for a representative to assist in creation our virtual local presence for the back office functions."

According to "whois" records, the domain "adamsgreen.org" was registered for one year on 21-Jun-2006. The nameservers for the domain are currently 72.232.71.90 (network space of Layered Technologies, Inc. -- they're popular with these spammers), and 154.37.3.12 (network space of Performance Systems International). Both these providers have prominent abuse-reporting addresses, and I'll notify them immediately.

At the time of investigation, "adamsgreen.org" resolves to the following addresses (and reverse name lookups): 74.131.72.24 (DHCP-74-131-72-24.insightbb.com), 69.62.158.34 (34.158-62-69.ftth.swbr.surewest.net), 69.203.157.76 (cpe-69-203-157-76.si.res.rr.com), 71.56.93.164 (c-71-56-93-164.hsd1.ga.comcast.net), and 71.57.30.8 (no rDNS; whois says Comcast Cable Communications Holdings, Inc ILLINOIS). Once again, these all look like ISP broadband customer addresses, thus suggesting the use of compromised PCs in private homes and businesses. Also, the time-to-live value on the DNS records is set to thirty minutes, so the addresses can be updated fairly rapidly if needs be.

The spammers have screwed up this message, however: the HTML links to http://www.adamsgreen.org/index-2.html, but the sub-domain "www.adamsgreen.org" doesn't exist! They were supposed to leave off the "www" part. I'm sure they'll rectify their error in the near future when they figure out why it's not working.

Job Scam: job@westbcompany.org

Would you like a short term position handling stolen money and fraudulently acquired goods? Would you like to be asked awkward questions by the police about why you are doing so? Would you like your bank account frozen, and the possibility of facing criminal charges? Yes? Then maybe this job is for you!

How many times did you think of giving up your
permanent job and join another "good looking"
work-at-home scheme? And how many of them were
successful? Did you earn more than $5000 a month with
them? NO? Then you have an opportunity right now and
right here!

We made it possible for you to get a real part-time
job in a world of transportation business and control
your income on your own! We will never ask you about
your credit rating and never put any inquiries to your
credit profile. This is business of partners, we don't
take, we give you this opportunity

You can become our Representative and take part in a
stunning world of financial operations. No more
up-front costs or tricks. A steady income is just a
click away! The best thing it all depends on you.

Being a long-established solid corporation we
understand how important it is to provide our customers
the best possibilities and support. We always try our
best to be cooperative and customer-friendly, you can
call or email us any time and ask a question if
something is not clear.

Get involved in a great transportation business, and
start making money in just a few clicks. You will make
a fixed amount ($30) out of every shipped product. The
usual product quantity range from 10 to 100 packages a
month. This is not a dream, you enter a serious market!
A unique opportunity where your income depends on you!

More information \ apply \ send your resumes to: job@westbcompany.org

self-absorption parlor car two-leaved
stagger grass Post-mishnaic surface tension
cairn terrier safety catch wave top
horn-footed oxyacetylene cutting snap-apple
fencing mask twice-sanctioned re-estimate
self-upbraiding Anti-darwinian cattail millet
two-legged half-numb well-intended
evergreen millet high-density double-branch

Job Scam: Global Austrian Syndicate (gas-ltd.cn)

This is the same "Global Austrian Syndicate" job scam reported earlier, except that they've changed domain names from ".biz" to ".cn". Key phrases in this spam include the name "Francois Veillon", who claims to be "the manager of a Human Resources department of Global Austrian Syndicate (GAS)".

At this moment, the website for "gas-ltd.cn" is being served up from five distinct compromised computers: adsl-71-132-152-189.dsl.pltn13.pacbell.net [71.132.152.189], i166108.upc-i.chello.nl [62.195.166.108], adsl-69-229-122-56.dsl.scrm01.pacbell.net [69.229.122.56], adsl-70-228-129-73.dsl.akrnoh.ameritech.net [70.228.129.73], and mo-71-50-28-170.dhcp.sprint-hsd.net [71.50.28.170]. This is likely to change rapidly, for such is the nature of a botnet.

The nameservers for "gas-ltd.cn" are currently 202.95.232.72.reverse.layeredtech.com [72.232.95.202], and 41.91.232.72.reverse.layeredtech.com [72.232.91.41]. In my experience so far, layeredtech.com do respond to abuse reports, although not spectacularly quickly.

Update at 2006-06-22 05:33. I've just checked the nameservers again, and they're no longer responding. Either layeredtech.com is on the ball, or we're just lucky. Kudos to Layered Tech if they are, in fact, responsible.

Job Scam: drgabriel1@aim.com (Escrow Agent)

I've started to see "Escrow Agent" more frequently as a cover story for money transfer jobs. Aside from the fact that this email is a linguistic travesty, it beggars belief that such a well-paid job with such light demands is both legal and likely to be offered via unsolicited email. And yet people will still fall for it. Please be wise, folks: these jobs are better described as "aide to a thief", or "patsy" for short.

Casual Position - Escrow transactions assistant.


Job details Closing date: June 30 2006 Location: USA, Canada,
Australia, United Kingdom, Germany .Salary: Excellent earning potential- $25K to $60K OTE Benefits: Pension, Insurance, Free UPS shipping, and more!As a market leader and one of the world's largest organisations of its kind, we are expanding rapidly as we continue to pioneer the concept of technology assurance through our innovative range of Software Escrow and Information Escrow Solutions. Our company has a strong reputation within the escrow industry as both leaders and innovators of  testing,security and consultancy solutions.


As a part of our on-going expansion program we are seeking Transaction Assistants for our Escrow Solutions. Whether you are looking for a professional career or a part-time position we are right for you! We are the world's largest global escrow company, operating in more than  50  countries and territories and employing more than 10,000 people worldwide. As a part-time employee,you'll have access to the following benefits: More than $60,000 per year,Great starting pay and annual raises, Set
work schedule and so on! BENEFITS:


$25,000 � $60.000 a year.Great starting pay and annual rises.Direct deposit, You get your salary instantly.Lots of free time (�as required"employment relationship).Perfect career opportunities.Set work schedule.Variety of shift options.Business experience recruiters look for.Weekends and holidays off.Paid vacations and holidays.Discounted stock purchase plan.Promotion from within.Training and skill building.Free UPS Shipping.- $3,800 per month You will be receiving more than 5 transactions a week.- You need 5-7 hours free during the week, not moreYou can advise the best time for transactions processing, in the morning: from 7:00 till 11:00 am or in the evening: from 3:30 till 5:00 pm.- Free UPS shipping You will be provided an NCC Group UPS ID card in your name. You will be using this card for mailing correspondence from UPS office for free on our company�s behalf (we also allow to use it for shipping your own packages, after working through probation period.)
- Comprehensive medical and life insurance for you and your dependents You will be receiving an NCC Group, Inc. Medicine card and all the paperwork in 2 weeks after successfully completing your probation period.
GENERAL REQUIREMENTS:


You have to be honest, loyal, responsible and hard-working.You have to comply with all reasonable and lawful instructions provided to you by our company. You need 5-7 hours during the week for communication.Residential address to receive correspondence (if any).Computer w/internet connection, printer and e-mail.


JOB DESCRIPTION: At this point we can offer you several ways of cooperation,which include, but are not limited to:ACH (E-Check) transactions assistance.You should have a NetSpend.com All-Access card, in order to participate.PayPal transactions assistance.


You should have a Verified PayPal.com account to participate.As an Escrow Transactions Assistants you will be delivering escrow payments from buyer to seller. As you know, every escrow transaction involves seller and buyer. You will be collecting payments from buyers along with the instructions, subtracting your salary (which is included in the total amount of transaction) and all fees applicable,and then forwarding the rest of the funds to the recipient using the method specified by the instruction.The main purpose is to provide sellers and buyers all over the world the ability of using their favorite payment systems (transfer methods).


When customer initiates the transaction from your country of residence, we need to have a middle man (our representative) in your country to speed up the process, and shorten the way of the money by delivering the payment to the recipient directly. Also, we have to act as a third party to ensure that the seller actually received his payment.


You will be provided with detailed instructions for every single transaction.  To complete a transaction, you need to follow several easy steps below:Receive the funds into your personal (Bank / Card / PayPal) account.Wait for the instruction to appear in your email. Report your progress to the manager at least once a day (during the time of ongoing transaction).


Follow the instructions our manager will provide you with, and send the funds out using the specified method. Transactions require to be completed in 5 business days (max).Your salary (commission) for regular transaction is 5% of total amount.


We have a probation period - 1st month of employment. During this probationary period, we will be evaluating the employee's job performance and work behavior, as well as his/her character, conduct, and attitude that directly affect job performance. Throughout the period the supervisor will be documenting performance and conduct activity in the Employee Work Folder. If you complete this a probation period successfully, your salary will be reviewed and increased (up to 10%).


Thanks for reading our proposal. We hope that you are interested and eager to start cooperation with us.Accept our apologies if this message caused any inconveniences to you.


PLS KINDLY REPLY BACK TO THE EMAIL ADDRESS IF YOU ARE WILLING TO
ACCEPT THE OFFER.


Dr Gabriel.
contact me : +447024026560

drgabriel1@aim.com

Hijack Alert: National Bank Closing and Blocking Accounts without a notice!

Much like the previous hijack alert I mentioned (also covered as a news story in The Register now), this particular spam tempts people into viewing a webpage based on alarmist (and false) news about the National Australia Bank closing and blocking accounts. The link itself goes to a site running software called "Web-Attacker", which attempts to hijack your computer. Presumably it attempts to install keystroke-logging software to pick up login details of those who later attempt to check their National Australia Bank account online.

If you were tricked into viewing such a page (and you use Microsoft Windows), you had better assume your computer is infected with spyware, and avoid doing any online banking with it until you've had it checked out and cleaned up.

The domain "worldbankinformation.com" (used in this attack) was registered a few days ago on 16-Jun-2006.

From: krfcbocp@clementlawgroup.com Herman Day 
Date: Tue, 20 Jun 2006 01:11:20 +1000 
Subject: National Bank Closing and Blocking Accounts without a notice! 
 
Recently many accounts have been reported closed without even a notice from 
the bank officials! Mostly it’s business accounts but regular checkings are 
also in trouble.  
  
Latest Bank’s Report showed much lower profit than expected and their stocks 
hit lows for the last 5 years! But can it be really a reason for breaking 
relations with entrepreneurs?  
  
The list of customers affected and their stories could be found here: 
http://www.worldbankinformation.com/news.php

Also there is a report form to fill if you have the same issue.  
  
Well, my account is fine and customer service representative refused to comment 
on these stories. Hope your savings are also safe...

Job Scam: jointogether@myway.com or dr.milk23@yahoo.com pretending to be Wanlida Textile Company Ltd

This is a fairly blatant money laundering job scam. It was sent directly to the contact address for this blog, which is unusual, but I'm not sure what specific significance it has.

The spam refers to "Wanlida Textile Company Ltd" and the domain "wj-wanlidasilk.com". That domain name was registered for seven years back in 2003, so I would guess that it's a genuine company, and that our scammer has nothing to do with it whatsoever. The contact email addresses being used (myway.com and yahoo.com) are free webmail services, meaning that the addressee could be anyone, anywhere. The telephone number, on the other hand, incorporates the country code for Hungary (assuming that the number is real at all, and written with the full international prefix).

From: dr. milk <jointogether@myway.com>
Date: 19-Jun-2006 11:20
Subject: ATTN: SOLICITING FOR A REP. IN YOUR COUNTRY
To: [Hundreds of recipients!]


Wanlida Textile Company Ltd
No.6 Third District Nanshan Road
Shengze, Wujiang City
Jiangsu Province, China
Phone number:36422423323

www.wj-wanlidasilk.com
Email:jointogether@myway.com
dr.milk23@yahoo.com

ATTN: SOLICITING FOR A REP. IN YOUR COUNTRY
It is my pleasure to write you in respect of our Company Wanlida Textile Co., Ltd. with address as above. We are experts in the sale of Textile materials. We export into the Canada/America and parts Europe. We got your email through Business Directory. We were recently given a two-year contract to supply our product to Canada/America and Europe trade zones. In our just concluded Annual General Meeting (AGM), we decided to search for a representative who can help us establish a medium of getting to our customers in Europe and America as well as making payments through the representative as our payment officer.
I, as the CEO of this multinational company hereby relate with you because of the communication problem faced by most of our Board Members, since many of them cannot read, speak or write English language except Chinese, which is our official language. In view of this you are expected to relate directly with me as the company representative since I decided to contact you and give them frequent update about our activities. Most of our customers have problem in making payment to us, as we do not run foreign accounts.
About 90 percent of our customers prefer to pay through Certified Cheques and Money orders or bank transfers based on the amount involved.
Your Task

We have decided to open this new job position for solving this problem.
Your tasks are;

1. Receive payment from Customers
2. Cash Payments at your Bank
3. Deduct 10% which will be your percentage/pay on Payment processed
4. Forward balance after deduction of percentage/pay to any of the offices you will be contacted to send payment to. Payment is to be forwarded either by MoneyGram or Western Union Money Transfer.
See www.westernunion.com and www.moneygram.com for details.
After establishing a close co-operation with us you'll be able to operate with larger orders and you'll be able to earn more. Our payments will be issued out in your name and you can have them cashed in your bank or other Cashing Services.
You'll have a lot of free time doing another job, you'll get good income and regular job. So if you are interested, your quick response to the email below would be appreciated. You are to reply to the company's public relation officer email address as below:

I am very interrested in working with or for you.
Please if you are interested forward to us.
Your full name.......................
Phone number .........................
Fax number...........................
Present occupation...................
And your full contact address................
BELOW IS OUR COMPANY HEADQUARTER
Wujiang Wanlida Textile Co., Ltd.

Selected Products
Jacquard Fabric
Cotton Satin
Printed Satin
Twisted Satin
Thanks for your time.
Kindly reply your response to the company public relation officer below

Name: dr.milk
contact me +447024026560
jointogether@myway.com
dr.milk23@yahoo.com
Kindest Regards,

Mr  dr.milk
Ceo.

Job Scam: kayla.auction@googlemail.com

This is another money laundering job, thinly veiled by a couple of other job descriptions which are just red herrings. The crooks offering this work have obviously done a spot of phishing in relation to Commonwealth Bank of Australia and National Australia Bank customers, and are now looking for willing chumps to forward the money to them via Western Union or Money Gram -- right up until they get arrested for handling stolen money, that is.

The contact address for this spam is kayla.auction@googlemail.com, but it's not visible in the plain text rendition of the spam that I'm using here. (It's a hyperlink in the HTML version.)

From: ao5sqmgX4C@yahoo.com Ward Heyser 
Date: Fri, 16 Jun 2006 21:36:49 +1000 
Subject: 5: Transaction Manager position.    Ref:6907 
 
 We are happy to present You our new project. Today our Internet auction
   bidding Company has finally begun successful cooperation with
   Australian financial authorities. Our internet auction bidding system
   is secured with the Commonwealth Bank of Australia and National
   Australia Bank anti-FAS system and this is why we, as the official
   affiliate of the Australian Commonwealth Bank and National Australia
   Bank, are proud to guarantee safety and security of every Internet
   auction operation our Company processes in Australia. Vacancies.
   Customer support manager: 8 hours per day. 2400$ per month.Requirements:
   car, PC, cell and home phone number, Internet.Assist customers from
   Your regions with full time Internet and personal support. Bidding
   manager: 2-4 hours per day. From 3000$ per month + weekly bonuses for
   successful completion of daily assignments with no delays.Requirements:
   Internet, cell and phone number, Bank account in the Commonwealth Bank
   of Australia or National Australia Bank. Assist customers from Your
   region with funds processing from the initial bidder to the seller
   itself. Bank Account in the Commonwealth bank or in the National
   Australia Bank is obligatory. Become the initial third party between
   the seller and the bidder from Australian region. Transport manager:
   6-10 hours per day. 3000$ per month. Requirements: car, PC, cell and
   home phone. Punctuality and responsibility. Transport the initial
   wares to the post office and International postal service companies.
   Maximum carrying capacity of 2 tons. Requirements:Age limit from 18y.o
   to 60.y.oInternet and be able to check Your email dailyBe able to
   contact our managers and customers both with Your cell phone and the
   email Benefits: 1. Become our initial representative and a middleman
   between the seller and the buyer from your country 2. Gain authority
   with people from all parts of the world who really rely on Your
   service 3. Possible career growth 4. Work efficiently with no holds
   and delays and get weekly bonuses besides monthly salary for
   outstanding performance of one’s duties. If you have any additional
   questions or desire to become our affiliate – don’t hesitate to
   contact our HR Department Sincerely Yours
   Megan Williams
   Staff manager

Phish of the Day: The Internal Revenue Service

I don't usually post about phishing, since it's pretty old hat, fairly common, and covered by other specialists anyhow. This particular instance was sufficiently interesting to write about, however. It's an attempt to obtain credit card details (including the CCV code) under the pretext that you're due a tax refund. I've attached a screenshot of the phishing site as rendered in my browser.

This particular phish is hosted on a compromised webmail server in China. The URL is http://mail.halas.com.cn/.../IRS/refund/caseid886432/index.html, but note that the "caseid" value is not significant in any way -- it's just a red herring. The three dots immediately following the server name designate a directory that is normally hidden (and could easily be overlooked if not hidden). It looks a little conspicuous in a URL, however, and if these folks ever check their log files, they'll pick it up. Certain parts of the page so loaded do refer to the IRS website, and some content is obtained that way, so the IRS folks will be aware of this already if they're paying attention to their own server logs.

Info: Stock spammers go to remarkable lengths for stealth

I'm not currently tracking pump and dump stock spamming, mostly because there's just so much of it. I note in passing, however, a new stage in a trend that's been going on for some time.

It used to be that stock spammers would just send their spam in perfectly plain and readable ways. They then started to corrupt some of the more readily identifiable parts of the spam, such as the "forward looking statements" boilerplate disclaimer that many of them include, so as to lessen the number of spam filters that would catch them on this. More recently again, they have started embedding spaces and punctuation into the stock name itself, so as to prevent searches on that stock name turning up all the spam that winds up being archived on the web. Some of them have chosen to embed their entire message in an image -- a technique which is also popular among the pill spammers, but note that the stock spam is usually just plain text rendered as an image. This also prevents any part of the text from being used as filter-fodder, and prevents the archived spam from being searchable on the web.

The final stage in this progression that I wish to note is one recent stock spam (pumping "Advanced Powerline Technologies, Inc." [APWL]) which not only encodes the entire text as an image, but breaks up that image into a grid of smaller sub-images. I'm not entirely sure what additional benefit this is supposed to have (from the perspective of the scumbag who is sending it), but it could be an attempt to foil my recent habit of archiving such images on the Stock Spam blog. Previously, it was just a simple case of "save the image and upload it to the blog", but since it's no longer a single image, this technique wouldn't work -- additional effort would be required.

As I've said, I'm not tracking stock spam at the moment anyhow, so this doesn't actually impact me. It's interesting to watch the arms race between scammers and scam-busters progress, though.

Hijack Alert: National Bank goes bankrupt?!

Here's a breed of spam that's still sufficiently novel that people will take the bait. Attempts to hijack computers via web browsers are taking over where viruses left off. Don't get me wrong: there are a lot more viruses out there than web-jacking attempts, but the latter category has the greater growth as a percentage.

The basic outline is this: the malicious party sends out spam with a link to a website. The cover story is usually some spectacular news story, but it can also be something as simple as "Tiffany has sent you an e-card!" All the malicious party wants you to do is click that link. The actual website you reach could be completely blank, or it could be a site selling Viagra pills, or whatever: the kicker is the part you don't see. Behind the scenes, that web page will be loading various bits and pieces which attempt to gain control of your computer.

If you use Microsoft Windows and you've been suckered into following a link like this, you had better assume your computer has been compromised. Disinfecting such a computer is a very tricky job, and I can't offer any simple advice as to how one goes about it, sorry.

Here's an example of a hijack attempt I received a short while ago. Follow the link at your own risk.

People starting panic withdrawals, some of the accounts were reported 
closed due to technical reasons, many ATMs are not operating. 
Does it seem that one of the Australia's greatest goes bankrupt? 
 
The full story could be found here: http://www.saltnlight-e.com/news.php
 
Well, hope that isn't true... Anyway You'd rather check your balance...

Job Scam: Global Austrian Syndicate (gas-ltd.biz)

This is yet another money laundering job offer, with all the obvious red flags: offer arrives by spam, requires no experience, involves money transfer using Western Union or Money Gram, and so on.

The style of this scam is a close match to that of the Swiss Invest scam that's been arriving regularly in my inbox for nearly a month. Closer investigation shows that the DNS records for "gas-tld.biz" and "swiss-invest.cn" are almost identical. At the time of writing, they both resolve to the following addresses: 24.41.42.238 (user-0c2iane.cable.earthlink.net), 24.43.27.76 (CPE000a73995cf3-CM000a73995cf2.cpe.net.cable.rogers.com), 64.135.101.176 (address in space allocated to BroadbandONE, Inc.), 69.248.123.80 (c-69-248-123-80.hsd1.nj.comcast.net), and 70.101.24.127 (70-101-24-127.dsl2-plymouth.roc.ny.frontiernet.net). These all appear to be end-user PCs on broadband networks, which almost certainly means that they are compromised and being used by these criminals without the knowledge of the actual owners. There are other tricks involved with the DNS, but they're a bit technically obscure, so I won't bore you with details here.

For the benefit of searchers, some of the key phrases in this spam include the name "Francois Veillon", who claims to be "the manager of a Human Resources department of Global Austrian Syndicate (GAS)". Other than that, it's mostly boilerplate job scam stuff.

Job Scam: us_job@mail333.com

This is just another "payment processor" money laundering job.

Dear Sirs!

We are USA company mainly working in financial field.

We are stable and solid company. We are looking for drivers, managers, managers of transfers, office managers.
There are a few outstanding requirements for candidate - reliability, honesty, diligence.
If all this is about you and you are interested to invest your time we would be glad to get in touch with you.

To start the registration as Payment Manager(3000$ every month), please contact us!

The career plans: LIFE prosperity, AUTO purchasing, HOUSE purchasing
In case you need more information please do not hesitate to contact us.

Malissa L. Jackson
H.R. Manager
Independent Business Solutions
E-mail: us_job@mail333.com

Job Scam: Further details on "Mercury Industries"

Although I haven't seen any actual spam from them in a while, the scammers calling themselves "Mercury Industries" are still active. Here's a copy of a job offer letter they emailed to me after I sent off a request for further information. There are two important things to note about the job (highlighted in bold text): it involves money transfers (see point three), and you don't get paid until after you've done at leat one such transfer (so they're guaranteed not to make a loss on you as an "employee"). This is obviously a money laundering positon.

Good day,

We would like to thank you for your application. It was a pleasure to
receive your answer so soon for administrative support/ transaction
support assistant position.

Such approach to administrative support / transaction support assistant
position has confirmed our desire to work with you.
Please email me:
Your address
PO Box (If available)
Phone number
Cell Phone number or alternative number to reach you
Email address that you use most often
We will enter this information to our database and it will be only used
within our company.
If you would like to write us why would you fit for this position we 
would
be interested to hear from you.
We will guide you through the work process on initial remunerated 
training
period after you will pass the screening process. Training will take 3h
per day for 3 days and will be held online with the support of our
training instructors. Through training you will get paid AUD 20$ per 
hour
and commissions for each serviced transaction. We will calculate your
hours through the time log. Your wages will be paid out after you will
service first transaction.
Initial requirements are:
 1. Answer our Australian customer’s questions and requests via e-mail 
or
phone, have at least 15h per week to work for us. However, we can work
around your schedule.
 2. Keep in touch with a manager every morning and be
able to answer calls and e-mail communications from the manager 
promptly.
Keep a time log of hours worked.
 3. Accept payments from customers for further credit to our
clients.


All office expenses will be paid for. You will not have to pay for
anything in order to start working with us. No sales involved, we have 
our
own customer base. You will have to work through regular business hours 
in
Australia. You will not have to travel on business.
After you will be hired you will be compensated AUD 20$ per hour, also 
you
will receive commission. Your wages and compensation for expenses will 
be
paid by direct deposit to your bank account.
I appreciate the time that you took to write us. We are very interested 
to
continue screening process and look forward to hearing from you 
regarding
this position.
Sincerely,
M. White

Meta: This blog now syndicated using Atom

I've recently begun to appreciate the benefits of news aggregation using syndication formats like RSS and Atom. Blogspot blogs can publish Atom syndication data, so I've decided to go ahead and do it. This blog is primarily targeted at people searching for specific scams, but you may want to subscribe if you are following scams more broadly and want to hear about everything I encounter. If you want to subscribe, the appropriate site feed URL is http://ideceive.blogspot.com/atom.xml . If you're new to the whole idea of syndication and aggregation, try out Google Reader.

Job Scam: westbcompany.net

This is slightly different from the usual money laundering scams, but the basic concept is the same. Instead of being a money middle-man, they want you to be a goods middle-man. The reasons for the middle-man position are largely the same: there's shonky dealing going on, and they want the shonkiness to be traced to you, not them.

For example, this case might involve credit card fraud. The scammers may have obtained a swag of credit card details, and they want to obtain valuable goods (laptop computers, for example) using other people's credit cards. Such purchases are considerably less suspicious when the shipping address is local, so if you sign up for this job, they'll select a bunch of credit cards which appear to match your location, and use your address as the shipping address. They then instruct you to ship the goods on to them.

Engaging in this sort of work is participating in fraud, and the police will probably take a dim view of it in most countries.

The domain "westbcompany.net" was registered for one year on 01-Jun-2006. Text of the spam follows.

You might have noticed how the recent changes of all kinds influence your life. Constant growth of prices, low wages, employment problems. If you aren't satisfied with your present income or it doesn't comply with your capabilities; If you constantly lack money; If you want to better your financial status or you are just looking for a part-time job, then this job is what you need. Consider the advantages of the work we offer: Extra incomeYou might have noticed how the recent changes of all kinds influence your life. Constant growth of prices, low wages, employment problems. If you aren't satisfied with your present income or it doesn't comply with your capabilities; If you constantly lack money; If you want to better your financial status or you are just looking for a part-time job, then this job is what you need. Consider the advantages of the work we offer: Extra income
Minimal expenses and no expenditures at all (only I-net and e-mail)
The easiness of work. - Possibility to combine this work with your occupations (you just need to check your e-mail several times a day) For this work you don't need a special education possessing some special skills or knowledge possessing storehouse, office, special equipment.
The job we offer is related to mail. It is an easy job which doesn't require leaving your main occupation. You will have to receive to your home address parcels from our clients and ship them out further following our manager's instructions ($30 for each shipped out box). Contact us by e-mail and you will be sent a list of vacancies available at the present time. You work will be paid for without any delays.
You may work with several orders at a time as well as work with each one separately.
Contact: job@westbcompany.net

Job Scam: ochukwuezi@yahoo.com pretending to be "UNICEF INTERNATIONAL MONETARY FUND"

The "from" address on this scam is info@unjobapplication.com. At the time of writing, the domain "unjobapplication.com" was not registered at all, so this is an utterly fictitious address. I considered registering the domain myself, but it's not a significant part of the scam, and I doubt I could help much by controlling that domain name. The real address is the reply-to address of "ochukwuezi@yahoo.com", plus two contact phone numbers which are UK "find me anywhere" numbers. The actual origin of the spam is the IP address 213.185.106.153, which whois records describe as "Reassignment to Timasy customer, Nigeria".

The job offer is utterly devoid of details, but I'll wager that it involves accepting direct transfer "donations" and forwarding the money via Western Union. Given the Nigerian connection, however, it may be a case of advance fee fraud in which they want you to pay for a bunch of paperwork before they can give you the job. Tell them to "take it out of your first pay", or just cut to the chase and recognise that it's a scam, that these people have nothing to do with UNICEF, and that it's a waste of time talking to them.

WELCOME! The Great opportunity to work from home country for UNICEF is now possible. If you would love to be the first 50 workers to have this please reply us as soon as possible filling up the Job application. There is a good pay and it requires less than 30 hours a week, with a 10,750/month therefore giving you a good reatirement deal. The Job contract is a 5 year contract with option for more years. UNICEF INTERNATIONAL MONETARY FUND would be happy to have you on their team. You can also call this number for further information. +447031862317 or +447031847640 Thank You Dr. Mozern Freeman (General Manager unimf ).

Job Scam: "Mercury Industries" also at mercuryindustries.org

The job scammers calling themselves "Mercury Industries" have started using the domain name "mercuryindustries.org" in addition to the "mercuryindustries.com" we've already seen. I sent them a request for additional information, and someone using the name "Mike White" and address "m.white@mercuryindustries.org" responded to it. The "additional information" they sent contained no additional information -- the job description is still terribly vague, including the nebulous catch-all phrase "will have to process sales and follow our instructions" which reeks of money laundering.

Even though the text isn't very informative, I'll post it below for the benefit of the search engines.

Dear,

Thank you for your interest in working for our great company. To better
understand the model of our business and what we do please visit 
www.mercuryindustries.com

My name is Mike White, I am responsible for business development in
Australia.  Let me explain you briefly about what our company does and
your responsibilities:

Mercury Industries Inc. was launched in early 2000, and continues to
establish itself as one of the leading US Internet supplier to digital
equipment market. The large range of electronic goods on offer our 
company
is growing to become one of the leading international players in 
digital
equipment market. The large range of electronics products already on
offer, have been complimented by the many other new products that have
been added since that time. We are looking for employees who would 
provide
customer support and work as sales support specialist from the comfort 
of
their own home. We need at least 10 business hours per week from you, 
if
you want to work with us. Successful sales support specialist will be
offered salesman position.  For more information, please visit our
website.


  Now more about your responsibilities:
  Persons who will be accepted for this job:
   1. Will have to answer customers questions and requests via e-mail 
or
phone (verbal skills a plus). Training will be given.
   2. Will have to keep in touch with a manager and be able to answer
calls and e-mail communications from the manager promptly.
   3. Will have to process sales and follow our instructions

You will be hired based on how well you will follow management 
directions
and answer inquiries from our customers.

After you will pass training we will let you sell our electronic goods 
on
your own. We will provide more information after you will pass training 
if
you will be interested in this position. However, if you would like to
provide just customer support that is fine.

After approval of your application a short phone interview will be
conducted if needed. You will receive wages of AUD $ 20 per hour plus a
commission of  % 8 (after paid training) from every sale that you will
service, after you will complete the training the contract will be 
signed
between you and our company.

   You will not have to spend any of your money at any time. We 
appreciate
the loyalty and trust from our employees. Please be advised that we
will not deduct any taxes from your commission, it will be your
responsibility to report your earnings to the government at the end of
the year.
   This opportunity is great for anyone who is looking for an extra 
income!
   Our employees usually make anywhere from AUD $400 to $800 a week!

   If you are interested or have some more questions please let us know 
so
we could get started with your application immediately.


Mike White
General Manager

Job Scam: jobeurobiz@aol.com pretending to be "Eurobiz Tour Inc."

This particular spammer doesn't describe the job as "financial manager", and there may be more to it than just plain money laundering. It's hard to tell when the job description is so vague. I think that the gist of it is that a bunch of crooks need a willing sucker to do stuff on their behalf to make the crooks themselves harder to trace.

Subject: Have 2-3 hours a day
Date: Wen, 7 Jun 2006 20:28:31 +0800

Hello [name]


International company "Eurobiz Tour Inc." is well known all over the world in international tours business.
We are searching for people,who want to work in our company and reach success fast, using modern life type.
Our company wants to become First place in touristic business, i hope you too.
This letter is to inform you about our TODAY BEST WORK PROPOSITION in this field of market.


You can become our manager and promote our company in your area.
The salary is 1000 EUR-3000 EUR per week, your duties are to execute tasks from Sirenis Inc. head office.Poland ,Spain, Slovakia, Germany, France business map.
Candidates: 21-60 years old, internet access every day, mobile phone, to be anxious for success.

No matter you country and city, send us your mail and get a reply next day!
Please send your CV, profiles according this e-mail: jobeurobiz@aol.com


++++++++++++++++++++++++++
Lyle Wesley
Wen, 7 Jun 2006 20:28:31 +0800

If I can obtain further information, I'll post it here.

Update on 2006-06-13. They responded as follows to my email request for further information. The description makes it fairly clear that money laundering is involved.

  Eurobiztour Inc. has a team of more than 1500 professionals, who work hard to provide a high quality service for our guests.
Thanks to our human resources, Sirenis Hotels is an expanding company with a strong position amongst the most important hotel
chains in Spain.

» Every day, we make an effort to give our best
The high scores obtained from the hotel satisfaction questionnaires outline the path we need to take in order to offer a high
quality, distinctive service to our guests.
» New ways of improving our service
We are currently changing our way of working, by implementing a new system based on the ICHE plan (Institute for Quality in
Spanish Hotels). Our first hotel to be given the distinctive "Q" rating denoting a quality establishment was the Sirenis
Seaview Country Club, and we now have a further two Q-rated hotels the Sirenis Hotel Club Aura and the Sirenis Hotel Club
Tres Carabelas.
» We are continually renovating our hotels
For many years, we have been making great economic efforts to renovate our establishments. This ongoing renovation make us
more competitive and in a position to offer improved employment positions.
» Sirenis Hotels and its commitment to the environment
MMinimising the impact on the environment and encouraging an economic use of water and energy resources are essential in
order to preserve the environment. Therefore, we must "use, re-use and preserve".

The Sirenis Hotels job vacancies option on the Internet is the most reliable, effective and speedy way of accessing job
opportunities offered by Sirenis Hotels, both in Spain and other countries.
» Applications
The system has been devised to allow candidates to fill in their details on the Sirenis Hotels Job applications option, thus
guaranteeing receipt of their CV.
 
JOB OFFER:
At this moment, it is necessary for us to increase our potential for our further development, and we declared a competitive
set for the post of the order processing manager. The manager performs the job connected with processing payments from our
Customers; it is unimportant what you were engaged in earlier, probably you were the driver, the teacher, studied (or
studying) at university, the artificer or the accountant. You even can combine your present work with manager work at our
company. The most important for us how far you are ready to devote yourself to our business!
Simply we need new staff in Poland, France, Slovakia, Italy, dont miss this chance.
Necessary conditions for starting work as manager in our company are the following:
Age:  21-60 years
Internet access
Mobile phone (and also home phone)
Two hours of time for the action coordination with our coordinator
Personal bank account available to recieve  payments   from our Customers.
Your official duties will include the following:
Every morning you should check your e-mail and answer our letters.
After receiving the information about payment transmission to your account you will control your account, after receipt of
the indicated sum you will process the transfer, and then wait for the following one.
 In the first months you will receive 2-3 transfers per week.
We pay  you 8 % from each order processed by you. If you account recieved the transfer on 7000 EUR your salary this day will
come to 560 EUR; for payment completion it is necessary to spend about two hours for you. After that you continue to check
your e-mail , and coordinate actions with our coordinator.
Month salary: 6000 EUR- 10000 EUR.
Employment assistance is on  contract basis, before starting we will send the copy of Contract for your  sign. After work
starting, you will be informed about the transfer.
All assigned documents is necessary to send within three days as the amount of the interested persons is large, but  amount
of working places is nine.
If you want to show yourself, you can send your CV with next: additional information about yourself, such as education,
experience, certain skills, we shall study them and, probably, you will become our full employed person.
Fill this info in email text, and add signed document, and you get chance to make good money on line business.
Dear candidate, fill this info in e mail text, your CV has no full information
============================
Post-FINANCIAL MANAGER
First name: 
Last name:
Country :
State:
City:
Address:
Postal zipcode:
Land Phone :
cell phone :
E-mail:

Advance Fee Fraud: European Farmer help loan scam

Here's a variation on the "lottery scam" I haven't seen before: you qualify for government assistance on the basis of a lottery draw. Of course, this is also the perfect setup for, "yes, we have lots of money for you, but we need you to pay us to do a bunch of paperwork first". Easy money like this is always bait on a hook.

Another point is that the 419ers in general have started using Yahoo!'s "notify everyone in my address book of my new Yahoo! address" feature. Presumably there is a convenient mechanism whereby they can import their spam list as an address book, then spam the lot in one shot with the notification feature, then abandon the account before it gets nuked for spamming (note that the contact address provided in the body of the email is different from the "my new address" address). As a side effect, Yahoo's "anti-spam" system "domain keys" is used to sign the message, certifying its origins in the Yahoo! network. How helpful! It just goes to prove what a difference there is between anti-spam and anti-address-forgery.

Spam text follows for reference (converted to plain text).

From: lashi hamed <lashi_hamed@yahoo.ca>
Date: 05-Jun-2006 10:56
Subject: ON LINE LOAN NOTICEFICATION
To: ideceive@gmail.com

I have a new email address!
You can now email me at: lashi_hamed@yahoo.ca

European Farmer help loan sceme,
Brookmount House,
62-65 Chandos Place,
Covent Garden,
London, WC2N 4LP
(Customer Services)
Date: june 4 2006
LOAN NOTIFICATION:

Ref: UKL/04210X2/65
Batch: 0741/060/DK369


Dear Farmer

We officially announce to you the European farmer assistant sceme
(#604) of the europe farmers assistant loan programs to erradicate
farmine in the world, in year 2010.

International program held on the 25th of May 2006.

Your e-mail address attached to ticket number:56475600545 188 with
Serialnumber 5368/02 drew your attention to our programe in order to
extend our service to africa and other 3rd world contries in other to
provide enough food 4 d vision 201o;.
,we have agree to give loan of minimum of $3 million us dollars to any
interested farmers who wish to esterblish on lerge scale farm .
You have therefore been approved to contact our office in uk for more detail

The internet emailing idea was used, since most people are not able to
apply outside the europe. We hope with part of your application you
will take part in our subsequent loan proget

This is from a total loan award of $100,000,000 shared among the less
privilenge fermers  in the 3rd world countries .

All participants for the online version were selected randomly from
World Wide Web sites through computer draw system and extracted from
over 100,000unions,associations,and corporate bodies that are listed
online. This promotion takes place annualy.

Please note that your lucky winning number falls within our European
booklet representative office in London as indicated in your country.

In  view of this, your loan
would be released to you by any of our payment offices in
Europe.

Our European agent will immediately commence the process to facilitate
the release of your funds as soon as you contact him.

For security reasons, you are advised to keep your  information
confidential in order to block way s for d scamers.

This is part of our precautionary measure to avoid scamers and
unwarranted abuse of this program.

Please be warned.To file for your application, please contact our  agent:

Overseas agents Unit.
europe Farmer help loan,
Mr John Peters
Email: johnpeter_3rd@yahoo.com
TEL: +44 702 406 3377
TEL: +44 702 407 5115

Our European agent will immediately commence the process to facilitate the
approval of your loan as soon as you contact him. You may wish to establish
contact via e-mail with the particulars presented above citing the batch
and reference numbers to this letter.

Yours faithfully,
Mr James Sylvester

 Online Co-ordinator

application processing form
FULL NAMES OF aplicant:
CONTACT ADDRESS:
CITY/STATE:
COUNTRY:
NATIONALITY:
SEX:
AGE:
MARITAL STATUS:
TEL NO:
NEXT OF KIN:
OCCUPATION:
ANNUAL INCOME :
mailing adress ..
corrent E mail adress..
farmers assistant International Program. Open 5 days10am-5pm from
monday to friday .

CONFIDENTIAL NOTICE: This email message, including any attachments, is
intended only for the use of the intended recipient(s) and may contain
information that is privileged, confidential and prohibited from
unauthorized disclosure under applicable law. If you are not the
intended recipient of this message, any dissemination, distribution or
copying of this message is strictly prohibited. If you received this
message in error, please notify the sender by reply email and destroy
all copies of the original message.

                                    Copyright 1994-2006 The UK
fermers aassistant programs.
                               77635 476378 255667460
                               Our applicant are assured of the
utmost standards of confidentiality, and
                               press anonymity until the end of
proceedings, and beyond where they so
                                   desire. Be further advised to
maintain the strictest level of
                                confidentiality until the end of
proceedings to circumvent problems
                                associated with fraudulent claims.
This is part of our precautionary
                             measure to avoid scamers and unwarranted
abuse of this program.

                             Goodluck from me and members of staff of
the european Farmer help loan sceme

- lashi hamed

Info: Swiss Invest and Mercury Industries Job Scams still active

I'm still receiving the same old dubious recruitment offers from both Swiss Invest (six spams) and Mercury Industries (thirteen spams). They still occupy the domain names "swiss-invest.cn" (".cn" is the country code for China, by the way) and "mercuryindustries.com". Steer well clear of these scams, since they invariably involve money laundering or other forms of fraud. The recruiters are looking for victims, not employees.

Update on 2006-06-05. I haven't seen so many Mercury Industries spams anymore, but Swiss Invest is still hammering away at it quite broadly, and has taken the lead in terms of quantity. The scam appears to be targeting Australians primarily, and the state government of Western Australia has released a consumer protection alert about it.

Job Scam: michael.suttelman@gawab.com

This is essentially a repeat of the Allianz Finance job scam reported earlier. Only the contact's email address has changed. The real Allianz in Australia has been informed about this scam, and will (I hope) take whatever action they can to track down the culprits.

Allianz Finance LLC is looking for regional representative in Australia

affectate cigarette augend brookhaven captive barnett coo bluebird demography decontrolling bunny bremsstrahlung conception allyn alps caviar automorphism bedpost consultant carnegie acquiescent ambiguity consulate convent cash dignify denotation chantry around bloodroot consolidate alison couldn't detonate cock avenge decomposition bratwurst albrecht alongside desirous blenheim batch cape belch chieftain compensable debris

Position requirements:

• Basic knowledge of Microsoft Word and Microsoft Excel(optional);
• Home Computer with e-mail account to check your e-mail box at least twice a day;
• Adults only accepted (by the Law we can not hire underage people);
• Ability to work unsupervised;
• No criminal records;

circumvention bennington dennis bilinear casebook buttery breastplate contradistinction carlton altitude demonic breast butyl apathetic bib bebop cognizant arose bank australite bruce agile briny amputate curt besmirch cap berlioz choirmaster chemisorption acquiesce aversion conspicuous blemish differential chimeric colby abdominal apparatus dichondra aldermen belladonna adequacy conduit conductor anheuser cousin anionic

We require energetic, reliable and honest person for this position. All CV’s and/or enquires about position available, conditions and duration to be sent to our corporate e-mail: michael.suttelman@gawab.com.
You can also fax it to us on one of the following numbers:

billow crete blank blaine began bottom courtier crow bon analogue brandeis blomquist autopsy arc barber casualty chlorine areaway ball commentary altruism black boson diffeomorphic condolence chromate baseball asiatic cornflower crossword charley bikini bedrock bangkok decade blatz cheesecloth boatman abate cheekbone bushy bootstrapping appeal collet demit colonist anyway bare

+61294755003 - all applications to be sent here (Australia branch)
+448709127525 - or here, United Kingdom (head office)

Please note that all e-mail enquiries will be processed faster. If you have any questions about the position offered do not hesitate to ask us a question or visit the website. We will send you our web-site address if you are interested in a position. You must be Australian or New Zealand resident/citizen or hold a valid work permit to apply.

brash canvasback commodore cock bark dissertation deem candid croak betatron cart abrade debunk coma aggressive compulsory cuttlebone blackmail chancery arrowhead aileron confectionery arteriole carriage collapsible delphinium bulwark chili codfish breton choreograph bespeak biotite desperado amman clio bartlett aerobacter curtail bitnet befuddle daugherty cultural demagnify arthritis childbear biotic casebook

Best regards,
Michael Suttelman,
Allianz Finance LLC,
Staffing/Management Department,
Asia/Pacific Financial Group,
FAX/TEL: +448709127525
michael.suttelman@gawab.com