Job Scam: Global Austrian Syndicate (gas-ltd.cn)

This is the same "Global Austrian Syndicate" job scam reported earlier, except that they've changed domain names from ".biz" to ".cn". Key phrases in this spam include the name "Francois Veillon", who claims to be "the manager of a Human Resources department of Global Austrian Syndicate (GAS)".

At this moment, the website for "gas-ltd.cn" is being served up from five distinct compromised computers: adsl-71-132-152-189.dsl.pltn13.pacbell.net [71.132.152.189], i166108.upc-i.chello.nl [62.195.166.108], adsl-69-229-122-56.dsl.scrm01.pacbell.net [69.229.122.56], adsl-70-228-129-73.dsl.akrnoh.ameritech.net [70.228.129.73], and mo-71-50-28-170.dhcp.sprint-hsd.net [71.50.28.170]. This is likely to change rapidly, for such is the nature of a botnet.

The nameservers for "gas-ltd.cn" are currently 202.95.232.72.reverse.layeredtech.com [72.232.95.202], and 41.91.232.72.reverse.layeredtech.com [72.232.91.41]. In my experience so far, layeredtech.com do respond to abuse reports, although not spectacularly quickly.

Update at 2006-06-22 05:33. I've just checked the nameservers again, and they're no longer responding. Either layeredtech.com is on the ball, or we're just lucky. Kudos to Layered Tech if they are, in fact, responsible.

Job Scam: drgabriel1@aim.com (Escrow Agent)

I've started to see "Escrow Agent" more frequently as a cover story for money transfer jobs. Aside from the fact that this email is a linguistic travesty, it beggars belief that such a well-paid job with such light demands is both legal and likely to be offered via unsolicited email. And yet people will still fall for it. Please be wise, folks: these jobs are better described as "aide to a thief", or "patsy" for short.

Casual Position - Escrow transactions assistant.


Job details Closing date: June 30 2006 Location: USA, Canada,
Australia, United Kingdom, Germany .Salary: Excellent earning potential- $25K to $60K OTE Benefits: Pension, Insurance, Free UPS shipping, and more!As a market leader and one of the world's largest organisations of its kind, we are expanding rapidly as we continue to pioneer the concept of technology assurance through our innovative range of Software Escrow and Information Escrow Solutions. Our company has a strong reputation within the escrow industry as both leaders and innovators of  testing,security and consultancy solutions.


As a part of our on-going expansion program we are seeking Transaction Assistants for our Escrow Solutions. Whether you are looking for a professional career or a part-time position we are right for you! We are the world's largest global escrow company, operating in more than  50  countries and territories and employing more than 10,000 people worldwide. As a part-time employee,you'll have access to the following benefits: More than $60,000 per year,Great starting pay and annual raises, Set
work schedule and so on! BENEFITS:


$25,000 � $60.000 a year.Great starting pay and annual rises.Direct deposit, You get your salary instantly.Lots of free time (�as required"employment relationship).Perfect career opportunities.Set work schedule.Variety of shift options.Business experience recruiters look for.Weekends and holidays off.Paid vacations and holidays.Discounted stock purchase plan.Promotion from within.Training and skill building.Free UPS Shipping.- $3,800 per month You will be receiving more than 5 transactions a week.- You need 5-7 hours free during the week, not moreYou can advise the best time for transactions processing, in the morning: from 7:00 till 11:00 am or in the evening: from 3:30 till 5:00 pm.- Free UPS shipping You will be provided an NCC Group UPS ID card in your name. You will be using this card for mailing correspondence from UPS office for free on our company�s behalf (we also allow to use it for shipping your own packages, after working through probation period.)
- Comprehensive medical and life insurance for you and your dependents You will be receiving an NCC Group, Inc. Medicine card and all the paperwork in 2 weeks after successfully completing your probation period.
GENERAL REQUIREMENTS:


You have to be honest, loyal, responsible and hard-working.You have to comply with all reasonable and lawful instructions provided to you by our company. You need 5-7 hours during the week for communication.Residential address to receive correspondence (if any).Computer w/internet connection, printer and e-mail.


JOB DESCRIPTION: At this point we can offer you several ways of cooperation,which include, but are not limited to:ACH (E-Check) transactions assistance.You should have a NetSpend.com All-Access card, in order to participate.PayPal transactions assistance.


You should have a Verified PayPal.com account to participate.As an Escrow Transactions Assistants you will be delivering escrow payments from buyer to seller. As you know, every escrow transaction involves seller and buyer. You will be collecting payments from buyers along with the instructions, subtracting your salary (which is included in the total amount of transaction) and all fees applicable,and then forwarding the rest of the funds to the recipient using the method specified by the instruction.The main purpose is to provide sellers and buyers all over the world the ability of using their favorite payment systems (transfer methods).


When customer initiates the transaction from your country of residence, we need to have a middle man (our representative) in your country to speed up the process, and shorten the way of the money by delivering the payment to the recipient directly. Also, we have to act as a third party to ensure that the seller actually received his payment.


You will be provided with detailed instructions for every single transaction.  To complete a transaction, you need to follow several easy steps below:Receive the funds into your personal (Bank / Card / PayPal) account.Wait for the instruction to appear in your email. Report your progress to the manager at least once a day (during the time of ongoing transaction).


Follow the instructions our manager will provide you with, and send the funds out using the specified method. Transactions require to be completed in 5 business days (max).Your salary (commission) for regular transaction is 5% of total amount.


We have a probation period - 1st month of employment. During this probationary period, we will be evaluating the employee's job performance and work behavior, as well as his/her character, conduct, and attitude that directly affect job performance. Throughout the period the supervisor will be documenting performance and conduct activity in the Employee Work Folder. If you complete this a probation period successfully, your salary will be reviewed and increased (up to 10%).


Thanks for reading our proposal. We hope that you are interested and eager to start cooperation with us.Accept our apologies if this message caused any inconveniences to you.


PLS KINDLY REPLY BACK TO THE EMAIL ADDRESS IF YOU ARE WILLING TO
ACCEPT THE OFFER.


Dr Gabriel.
contact me : +447024026560

drgabriel1@aim.com

Hijack Alert: National Bank Closing and Blocking Accounts without a notice!

Much like the previous hijack alert I mentioned (also covered as a news story in The Register now), this particular spam tempts people into viewing a webpage based on alarmist (and false) news about the National Australia Bank closing and blocking accounts. The link itself goes to a site running software called "Web-Attacker", which attempts to hijack your computer. Presumably it attempts to install keystroke-logging software to pick up login details of those who later attempt to check their National Australia Bank account online.

If you were tricked into viewing such a page (and you use Microsoft Windows), you had better assume your computer is infected with spyware, and avoid doing any online banking with it until you've had it checked out and cleaned up.

The domain "worldbankinformation.com" (used in this attack) was registered a few days ago on 16-Jun-2006.

From: krfcbocp@clementlawgroup.com Herman Day 
Date: Tue, 20 Jun 2006 01:11:20 +1000 
Subject: National Bank Closing and Blocking Accounts without a notice! 
 
Recently many accounts have been reported closed without even a notice from 
the bank officials! Mostly it’s business accounts but regular checkings are 
also in trouble.  
  
Latest Bank’s Report showed much lower profit than expected and their stocks 
hit lows for the last 5 years! But can it be really a reason for breaking 
relations with entrepreneurs?  
  
The list of customers affected and their stories could be found here: 
http://www.worldbankinformation.com/news.php

Also there is a report form to fill if you have the same issue.  
  
Well, my account is fine and customer service representative refused to comment 
on these stories. Hope your savings are also safe...

Job Scam: jointogether@myway.com or dr.milk23@yahoo.com pretending to be Wanlida Textile Company Ltd

This is a fairly blatant money laundering job scam. It was sent directly to the contact address for this blog, which is unusual, but I'm not sure what specific significance it has.

The spam refers to "Wanlida Textile Company Ltd" and the domain "wj-wanlidasilk.com". That domain name was registered for seven years back in 2003, so I would guess that it's a genuine company, and that our scammer has nothing to do with it whatsoever. The contact email addresses being used (myway.com and yahoo.com) are free webmail services, meaning that the addressee could be anyone, anywhere. The telephone number, on the other hand, incorporates the country code for Hungary (assuming that the number is real at all, and written with the full international prefix).

From: dr. milk <jointogether@myway.com>
Date: 19-Jun-2006 11:20
Subject: ATTN: SOLICITING FOR A REP. IN YOUR COUNTRY
To: [Hundreds of recipients!]


Wanlida Textile Company Ltd
No.6 Third District Nanshan Road
Shengze, Wujiang City
Jiangsu Province, China
Phone number:36422423323

www.wj-wanlidasilk.com
Email:jointogether@myway.com
dr.milk23@yahoo.com

ATTN: SOLICITING FOR A REP. IN YOUR COUNTRY
It is my pleasure to write you in respect of our Company Wanlida Textile Co., Ltd. with address as above. We are experts in the sale of Textile materials. We export into the Canada/America and parts Europe. We got your email through Business Directory. We were recently given a two-year contract to supply our product to Canada/America and Europe trade zones. In our just concluded Annual General Meeting (AGM), we decided to search for a representative who can help us establish a medium of getting to our customers in Europe and America as well as making payments through the representative as our payment officer.
I, as the CEO of this multinational company hereby relate with you because of the communication problem faced by most of our Board Members, since many of them cannot read, speak or write English language except Chinese, which is our official language. In view of this you are expected to relate directly with me as the company representative since I decided to contact you and give them frequent update about our activities. Most of our customers have problem in making payment to us, as we do not run foreign accounts.
About 90 percent of our customers prefer to pay through Certified Cheques and Money orders or bank transfers based on the amount involved.
Your Task

We have decided to open this new job position for solving this problem.
Your tasks are;

1. Receive payment from Customers
2. Cash Payments at your Bank
3. Deduct 10% which will be your percentage/pay on Payment processed
4. Forward balance after deduction of percentage/pay to any of the offices you will be contacted to send payment to. Payment is to be forwarded either by MoneyGram or Western Union Money Transfer.
See www.westernunion.com and www.moneygram.com for details.
After establishing a close co-operation with us you'll be able to operate with larger orders and you'll be able to earn more. Our payments will be issued out in your name and you can have them cashed in your bank or other Cashing Services.
You'll have a lot of free time doing another job, you'll get good income and regular job. So if you are interested, your quick response to the email below would be appreciated. You are to reply to the company's public relation officer email address as below:

I am very interrested in working with or for you.
Please if you are interested forward to us.
Your full name.......................
Phone number .........................
Fax number...........................
Present occupation...................
And your full contact address................
BELOW IS OUR COMPANY HEADQUARTER
Wujiang Wanlida Textile Co., Ltd.

Selected Products
Jacquard Fabric
Cotton Satin
Printed Satin
Twisted Satin
Thanks for your time.
Kindly reply your response to the company public relation officer below

Name: dr.milk
contact me +447024026560
jointogether@myway.com
dr.milk23@yahoo.com
Kindest Regards,

Mr  dr.milk
Ceo.

Job Scam: kayla.auction@googlemail.com

This is another money laundering job, thinly veiled by a couple of other job descriptions which are just red herrings. The crooks offering this work have obviously done a spot of phishing in relation to Commonwealth Bank of Australia and National Australia Bank customers, and are now looking for willing chumps to forward the money to them via Western Union or Money Gram -- right up until they get arrested for handling stolen money, that is.

The contact address for this spam is kayla.auction@googlemail.com, but it's not visible in the plain text rendition of the spam that I'm using here. (It's a hyperlink in the HTML version.)

From: ao5sqmgX4C@yahoo.com Ward Heyser 
Date: Fri, 16 Jun 2006 21:36:49 +1000 
Subject: 5: Transaction Manager position.    Ref:6907 
 
 We are happy to present You our new project. Today our Internet auction
   bidding Company has finally begun successful cooperation with
   Australian financial authorities. Our internet auction bidding system
   is secured with the Commonwealth Bank of Australia and National
   Australia Bank anti-FAS system and this is why we, as the official
   affiliate of the Australian Commonwealth Bank and National Australia
   Bank, are proud to guarantee safety and security of every Internet
   auction operation our Company processes in Australia. Vacancies.
   Customer support manager: 8 hours per day. 2400$ per month.Requirements:
   car, PC, cell and home phone number, Internet.Assist customers from
   Your regions with full time Internet and personal support. Bidding
   manager: 2-4 hours per day. From 3000$ per month + weekly bonuses for
   successful completion of daily assignments with no delays.Requirements:
   Internet, cell and phone number, Bank account in the Commonwealth Bank
   of Australia or National Australia Bank. Assist customers from Your
   region with funds processing from the initial bidder to the seller
   itself. Bank Account in the Commonwealth bank or in the National
   Australia Bank is obligatory. Become the initial third party between
   the seller and the bidder from Australian region. Transport manager:
   6-10 hours per day. 3000$ per month. Requirements: car, PC, cell and
   home phone. Punctuality and responsibility. Transport the initial
   wares to the post office and International postal service companies.
   Maximum carrying capacity of 2 tons. Requirements:Age limit from 18y.o
   to 60.y.oInternet and be able to check Your email dailyBe able to
   contact our managers and customers both with Your cell phone and the
   email Benefits: 1. Become our initial representative and a middleman
   between the seller and the buyer from your country 2. Gain authority
   with people from all parts of the world who really rely on Your
   service 3. Possible career growth 4. Work efficiently with no holds
   and delays and get weekly bonuses besides monthly salary for
   outstanding performance of one’s duties. If you have any additional
   questions or desire to become our affiliate – don’t hesitate to
   contact our HR Department Sincerely Yours
   Megan Williams
   Staff manager