Sponsored by..

Wednesday, 24 August 2011

Fake jobs: greece-career.com, il-career.com, mc-jobs.com and oae-career.com

Four new domains peddling fake jobs today, forming part of this very long running scam.

greece-career.com
il-career.com
mc-jobs.com
oae-career.com

The "jobs" offered are actually criminal activities such as money laundering. It may be that the email appears to come "from" you as well (the from address is trivially easy to fake, it doesn't mean that your machine is infected with anything).

Domains were registered two days ago to "Alexey Kernel", which is no doubt a fake name.

greece-career.com presumably targets Greek nationals, and il-career.com looks to be targeting Israelis. The other two are less clear, but our best guess is that mc-jobs.com might be targeting Macedonia (but the TLD is .mk) and oae-career.com might be the UAE and is just a typo. This continues the pattern of going after non-English speaking victims who might be fooled more easily by a scam email in their own language.

If you have any examples of this spam, please consider sharing them in the Comments. Thanks!

28 comments:

sean said...

For the past two hours I've been getting inundated with spam emails from these folks. 8 emails came through in the first minute. Now I am getting 1 about every five minutes.

Here is an example of one:

I would like to take this time to welcome you to our hiring process
and give you a brief synopsis of the position's benefits and requirements.

If you are taking a career break, are on a maternity leave,
recently retired or simply looking for some part-time job, this position is for you.

Occupation: Flexible schedule 2 to 8 hours / day. We can guarantee a minimum 20 hrs/week occupation
Salary: Starting salary is £ 2000 per month plus commission, paid every month.
Business hours: 9:00 AM to 5:00 PM, MON-FRI, 9:00 AM to 1:00 PM SAT (UK time).

Region: United Kingdom.

Please note that there are no startup fees or deposits to start working for us.

To request an application form, schedule your interview and receive more information
about this position please reply to Gerald@mc-jobs.com with your personal identification number
for this position IDNO: 6602.

Sincerely,
Gerald Mayer// HR department

All of the email have the same text, but differing subject lines, such as:

Job offer match, respond to apply

Job ad - see details! Sent through Search engine

Vacancy - apply online

Job opportunity - hurry to apply!

sean said...

In the past two hours they have sent me 33 of these emails.

Alison Cassidy said...

I"m getting dozens of the things, all to the same address. Each time, the CEO is a different fake name. Here's one example;

=========================

I would like to take this time to welcome you to our hiring process
and give you a brief synopsis of the position's benefits and requirements.

If you are taking a career break, are on a maternity leave,
recently retired or simply looking for some part-time job, this position is for you.

Occupation: Flexible schedule 2 to 8 hours / day. We can guarantee a minimum 20 hrs/week occupation
Salary: Starting salary is £ 2000 per month plus commission, paid every month.
Business hours: 9:00 AM to 5:00 PM, MON-FRI, 9:00 AM to 1:00 PM SAT (UK time).

Region: United Kingdom.

Please note that there are no startup fees or deposits to start working for us.

To request an application form, schedule your interview and receive more information
about this position please reply to Ezra@mc-jobs.com with your personal identification number
for this position IDNO: 8813.

Sincerely,
Ezra Nixon// HR department

Desertsweeper said...

I have recieved a large number of these in the last 24 hours. Most of them start like this:

"Our company is pleased to offer you an excellent-paid part/full-time vacancy for the position of administrative assistant/sales support.
You would work from the comfort of your home office or in our office, it would depend on your choice.
By choosing to work in our office, you will be able to keep your hobbies and maybe even pick up a few new ones"

Looking at the mail headers they originate from dynamic IP addresses in:
India
Romania
Russia
Kazakhstan
Brazil
&etc

I would say given the broad diversity of originating addresses (and the fact that it "comes from yourself") that it is an orchestrated remote-host attack. Most of the computers sending these out are infected and the owners probably dont even know it...

בחור טוב said...

Here is an example I received from "Myself". I received 3 of these fake job offers so far:
International insurance company is hiring employees for long term cooperation.
Our main purpose is to build a strong team of distant representatives who are ready to work for 4-6 hours from home on weekdays.

Interested affiliates:
ISRAEL

Requirements:
Excellent English both reading and writing Excellent native language Strong computer skills Experience in database processing You must be hard working and responsible You must be intelligent (graduates are preferred) If you’re beginner be ready to pass trial period for 1 month.

Primary responsibilities:
Database processing and translation

We will look to hire you for a long term, at least for 6 month

Payment:
You’ll be paid according to results of interview and consideration of the application We have limited amount of vacancies so please submit your resume as you read this.
To submit your resume please use: Marlon@il-career.com

Jack said...

Exactly the same, got over 75 over night to my work email! (as did my colleague) and about 8 or 9 to my personal (gmail) account, the won't stop coming either :@

The ones that went to my work email all came from me @ ourdomain.com or my colleague @ ourdomain.com and were sent with ourselves CC'd into each message several times so one message sent was received several times by both of us!

When I looked at my gmail accounts these were slightly different - some came from me @gmail.com and others came from other names @gmail.com, they all went to this list of names @gmail.com every time though, sometimes from me, sometimes from the other names.

This makes me think they have a list of names and a list of domains and have mixed and matched the two in the hope that they will get lucky and me @mydomain.com will be a different person to me@gmail.com and me@hotmail.com etc. That would make a list of 100 email addresses into a list of thousands and thousands of emails etc.

BLOODY ANNOYING! If it was one a day it would just be regular spam, but now since writing this its gone up to over 80 in 12 hours? That's ridiculous, and coming from my address, that's just pathetic

AngloFrench said...

I too have received 6 emails from these people.

They got my email address from "Georgian House"

georgianhousehotel.co.uk

whose server or customer address lists must have been compromised.

I have twice emailed "Georgian House Hotel" - but as yet have not had the courtesy of a reply.

I wonder if anyone else has had their address compromised by these people?

NJSS

lufc said...

I am getting exactly the same, here is the last one I got:

I would like to take this time to welcome you to our hiring process
and give you a brief synopsis of the position's benefits and requirements.

If you are taking a career break, are on a maternity leave,
recently retired or simply looking for some part-time job, this position is for you.

Occupation: Flexible schedule 2 to 8 hours / day. We can guarantee a minimum 20 hrs/week occupation
Salary: Starting salary is £ 2000 per month plus commission, paid every month.
Business hours: 9:00 AM to 5:00 PM, MON-FRI, 9:00 AM to 1:00 PM SAT (UK time).

Region: United Kingdom.

Please note that there are no startup fees or deposits to start working for us.

To request an application form, schedule your interview and receive more information
about this position please reply to Terry@mc-jobs.com with your personal identification number
for this position IDNO: 6181.

Sincerely,
Terry Mathis// HR department

I have got over 100 in the last 12 hours and they don't seem to be slowing down. Every 20 minutes I seem to be getting another 5-10 emails sent over 10 a minute period then quite for 20 mins before it repeats.

Beth said...

I have been getting these since yesterday, to my work email, but thankfully not to my personal ones. I think that others that work for the same organisation as I do have been getting these as well.

They all say much the same thing that others have said, but with a different name at the end.

G Franks said...
This comment has been removed by the author.
Unknown said...

Unfortunately it seems as if they have picked up our office's email addresses as everyone in our office has been sent at least one of these emails (most purporting to sent by a colleague). I've even received one from "myself"!! Nuisance!

G Franks said...

I have received over 40 of these annoying emails now - they are all the same as those listed in this thread. I am surprised as I work in an NHS organisation and they are being sent via my work address, and quite often from myself! I have alerted our IT team so hopefully they can sort it out - however when our mailboxes reach a particular size limit we are prevented from recieving any other emails, which includes work - so I have to remember to delete these scam ones as they come in!

Beth said...

have just recieved another 2.

I would like to take this time to welcome you to our hiring process
and give you a brief synopsis of the position's benefits and requirements.

If you are taking a career break, are on a maternity leave,
recently retired or simply looking for some part-time job, this position is for you.

Occupation: Flexible schedule 2 to 8 hours / day. We can guarantee a minimum 20 hrs/week occupation
Salary: Starting salary is £ 2000 per month plus commission, paid every month.
Business hours: 9:00 AM to 5:00 PM, MON-FRI, 9:00 AM to 1:00 PM SAT (UK time).

Region: United Kingdom.

Please note that there are no startup fees or deposits to start working for us.

To request an application form, schedule your interview and receive more information
about this position please reply to Paula@mc-jobs.com with your personal identification number
for this position IDNO: 7841.

Sincerely,
Paula Stanford// HR

Mike said...

I must have received at least 200 of these since just before midnight lasts night (24 August 2011)

Does anyone know how to stop this as my Blackberry is pinging every five minutes and I can't get on with running my business.

Freetone said...

set up a rule in your outlook to move any emails with the text "We can guarantee a minimum 20 hrs/week occupation" in the body of the email straight to the delwted or junk files folder. Tools/rules and alerts/ ....

Job done

Stephen said...

I'm suffering the same pain. I have successfully blocked this coming into my outlook on PC (so far so good)by setting up the 'block this domain name'

HOWEVER, not running on Exchange Server means it is still pouring into my inbox on iPad and iPhone.

Anyone any ideas how to solve this ??
PLEASE

Gari said...

Over the last 2 hours I have recieved dozens. Blooked from Office Outlook, but my BlackBerry is getting every single one. And apparently, I've sent it to myself 7 times so far.

nina said...

This is what I got:

Our company is pleased to offer you an excellent-paid part/full-time vacancy for the position of administrative assistant/sales support.
You would work from the comfort of your home office or in our office, it would depend on your choice.
By choosing to work in our office, you will be able to keep your hobbies and maybe even pick up a few new ones.

Our company is a large corporation that is involved in a variety of activities that include construction, realty management, investment sector, rental services etc.
Right now we are working on more than 10 objects around the world, primarily in Europe, United Kingdom and North America.
This is the ideal role for a highly organised and proactive administrator, looking to develop their career with an established and successful company.
For the right candidate, there will be the opportunity to progress to Office/Sales Manager position.

Candidates for the job should possess excellent organizational skills as well as the ability to efficiently multi-task.
Ideal candidates have a strong focus on day-to-day operational excellence, and a personal style that builds trust, and inspires loyalty.
You will be tasked with processing orders and dealing with clients via the telephone and answering any queries they have.
Your duties will also include taking and entering orders, providing quotations, checking invoices, supporting the sales team and creating mail shots.

Other duties of the Administrative Assistant/Sales Support include, but are not limited to:
Incorporating effective priorities for the virtual office function Administer day-to-day financial responsibilities for clients Reporting online daily Preparing brief summary reports, and weekly financial reports

To be considered for this position, you must have solid administration experience and strong knowledge of Word and Excel.
A good telephone manner is also essential.

Salary part-time: guaranteed 925.00 EUR/weekly plus bonuses.
Location: Greece

If you are interested, please reply to: Sheryl@greece-career.com

Best regards,

Sheryl Olson
Employment Manager

patzouri said...

Hi, I 'm from Greece and I got this fake e-mail as well. It seems as if I sent it to my self with the title working part time. The e-mail promises a 925 eyro salary every week and it says that if i am intrested in the add i sould reply to Dawn@greece-career.com
Of course I googled the e-mail and found your blog. I m giving you the full e-mail below :
Our company is pleased to offer you an excellent-paid
part/full-time vacancy for the position of administrative assistant/sales support.
You would work from the comfort of your home office or in our office, it would depend on your choice.
By choosing to work in our office, you will be able to keep your hobbies and maybe even pick up a few new ones.

Our company is a large corporation that is involved in a variety of activities
that include construction, realty management, investment sector, rental services etc.
Right now we are working on more than 10 objects around the world, primarily in Europe, United Kingdom and North America.
This is the ideal role for a highly organised and proactive administrator, looking to develop their career
with an established and successful company.
For the right candidate, there will be the opportunity to progress to Office/Sales Manager position.

Candidates for the job should possess excellent organizational skills as well as the ability to efficiently multi-task.
Ideal candidates have a strong focus on day-to-day operational excellence,
and a personal style that builds trust, and inspires loyalty.
You will be tasked with processing orders and dealing with clients via the telephone and answering any queries they have.
Your duties will also include taking and entering orders, providing quotations, checking invoices,
supporting the sales team and creating mail shots.

Other duties of the Administrative Assistant/Sales Support include, but are not limited to:
. Incorporating effective priorities for the virtual office function
. Administer day-to-day financial responsibilities for clients
. Reporting online daily
. Preparing brief summary reports, and weekly financial reports

To be considered for this position, you must have solid administration experience and strong knowledge of Word and Excel.
A good telephone manner is also essential.

Salary part-time: guaranteed 925.00 EUR/weekly plus bonuses.
Location: Greece

If you are interested, please reply to: Dawn@greece-career.com

Best regards,

Dawn Forbes
Employment Manager

Mυθολόγος said...

Coming from Greece, I have to tell you that I have received the same, aforementioned e-mail as well, by "patzouri".

The e-mail adress of the "personnel manager" or something, is Paula@greece-career.com .

Thank you for the useful information!! ;)

chaniagirl said...

Thank you so much for posting this information. My husband came home with a copy of one of these emails last night, excited for me to submit my application ASAP.

This morning, I decided to do a quick google of this "greece-career.com" before moving forward and am so glad I did!

If something sounds too good to be true, it probably is.

Thank you again, and thanks to all of you who, unfortunately, did respond and shared your horror stories.

chaniagirl said...

Thank you so much for posting this information. My husband came home with a copy of one of these emails last night, excited for me to submit my application ASAP.

This morning, I decided to do a quick google of this "greece-career.com" before moving forward and am so glad I did!

If something sounds too good to be true, it probably is.

Thank you again, and thanks to all of you who, unfortunately, did respond and shared your horror stories.

monaxoss said...

Living in Greece , i received in a couple of hours in my business email, something like 20 emails sent by myself (!) to me with always the same subject.
It is strange that these people got my business e-mail address instead of my personal address.

In my case, the last lines of their message is like this...:

Salary part-time: guaranteed 925.00 EUR/weekly plus bonuses.
Location: Greece

If you are interested, please reply to: Emile@greece-career.com

Best regards,

Emile Holley
Employment Manager

portorico said...

I am from greece and I received this e-mail seems that I send it to myself ! Many many thanks for great information in your blog. Just to mention that all of you must immediatly chang your passeword for your account. these organisez group somehow they got your pass and they can go to your account and through all your information. It happened to me a few months ago wghen I received an e-mail from my internet provider company to up date my account ,I must inter my password and unfortunaly I did. nothing happened but then more than 10000 e-mails was send from my account and I was called by the internet company that e-mail was not from them and they are hackers who are involved with criminal activities and transfer of black money trying to get the personal information of peoples. It seems that now they have changed their policy and it is by offering jobs that they get theses information. many many thanks to you ,god bless you !





Our company is pleased to offer you an excellent-paid part/full-time vacancy for the position of administrative assistant/sales support.
You would work from the comfort of your home office or in our office, it would depend on your choice.
By choosing to work in our office, you will be able to keep your hobbies and maybe even pick up a few new ones.

Our company is a large corporation that is involved in a variety of activities that include construction, realty management, investment sector, rental services etc.
Right now we are working on more than 10 objects around the world, primarily in Europe, United Kingdom and North America.
This is the ideal role for a highly organised and proactive administrator, looking to develop their career with an established and successful company.
For the right candidate, there will be the opportunity to progress to Office/Sales Manager position.

Candidates for the job should possess excellent organizational skills as well as the ability to efficiently multi-task.
Ideal candidates have a strong focus on day-to-day operational excellence, and a personal style that builds trust, and inspires loyalty.
You will be tasked with processing orders and dealing with clients via the telephone and answering any queries they have.
Your duties will also include taking and entering orders, providing quotations, checking invoices, supporting the sales team and creating mail shots.

Other duties of the Administrative Assistant/Sales Support include, but are not limited to:
Incorporating effective priorities for the virtual office function Administer day-to-day financial responsibilities for clients Reporting online daily Preparing brief summary reports, and weekly financial reports

To be considered for this position, you must have solid administration experience and strong knowledge of Word and Excel.
A good telephone manner is also essential.

Salary part-time: guaranteed 925.00 EUR/weekly plus bonuses.
Location: Greece

If you are interested, please reply to: Sheryl@greece-career.com

Best regards,

Conrad Longmore said...

@portorico - you don't need to change your password, your email address has not been compromised and you are not actually sending these mail messages.

Forging the "from" address is very easy indeed, it's a long-standing weakness in standard mail protocols dating back decades..

portorico said...

thanks conrad longmore,but it is strange that my access to my account is denied several times during the day ,how about it ?

NVK said...

Apart from setting up a rule in the outlook app to move any emails with the text "Fake jobs: greece-career.com, il-career.com, mc-jobs.com and oae-career.com" to the deleted or junk files folder, does anyone send any e-mail inform the Internet Providers that these are JUNK e-mails??
Does anyone know to do that? I think that there is an address where you can mention these e-mails as JUNK/SPAM e-mails...

Dmitry said...

Just a side note: OAE is not a typo. That's UAE in Russian. So I suppose the orchestrator is Russian-speaking.