From the insistence that potential employees / victims have a bank account with either Wells Fargo or Wachovia indicates that they will probably be accepting wire transfers from bank accounts where the password has been stolen (because transfers between accounts in the same bank are usually immediate).
From: Ceaser <firstname.lastname@example.org>
Date: 5 August 2010 07:29
Subject: Help Wanted
I am Ceaser Martin, owner of Shifflett Martin Stores I seek an online virtual assistant to accept payments on my behalf in the United States of America. Requirements **Applicants must have a Wells Fargo or Wachovia bank account*** You are also eligible to apply if you can open a new Wells Fargo or Wachovia account. Great pay (15% of each payment processed), flexible and will not affect your present employment. Interested and meet the requirements? Send Full Names, Address, Direct Telephone Number and email address to email@example.com
Originating IP is 184.108.40.206, an open proxy in Réunion of all places.