A new set of domains pushing illegal money laundering jobs and other criminal activities as part of this long running operation.
consult-position.com
instant-job.com
newweb-career.com
uk-bestjob.com
web-newcarer.com
Typically, these emails will appear to be "from" you as well as "to" you.. this is just a forgery and it doesn't mean that your mail is hacked.
Don't be tempted by the jobs on offer, typical positions are for money mules, reshipping scams or sometimes back-office functions such as translating emails or signing paperwork. Don't bother replying to the email as no good will come of it.
If you have an example of any emails using this address, please consider sharing it in the Comments. Thanks!
Showing posts with label Lapatasker. Show all posts
Showing posts with label Lapatasker. Show all posts
Monday, 29 August 2011
Friday, 26 August 2011
Fake jobs: us-newcareer.com
Operating the same money laundering scam/spam as this batch of domains, and forming part of this very long running scam, the domain us-newcareer.com was freshly registered two days ago.
The jobs offered by anyone soliciting replies to this email address are all criminal activities and should be avoided. The spam email messages may appear to be coming from your own email address, but this is a simple forgery and it does not mean that your computer or mail account is compromised.
If you have examples of spam emails using the domain, please consider sharing them in the Comments. Thanks!
The jobs offered by anyone soliciting replies to this email address are all criminal activities and should be avoided. The spam email messages may appear to be coming from your own email address, but this is a simple forgery and it does not mean that your computer or mail account is compromised.
If you have examples of spam emails using the domain, please consider sharing them in the Comments. Thanks!
Labels:
Job Offer Scams,
Lapatasker,
Money Mule,
Russia
Wednesday, 24 August 2011
Fake jobs: greece-career.com, il-career.com, mc-jobs.com and oae-career.com
Four new domains peddling fake jobs today, forming part of this very long running scam.
greece-career.com
il-career.com
mc-jobs.com
oae-career.com
The "jobs" offered are actually criminal activities such as money laundering. It may be that the email appears to come "from" you as well (the from address is trivially easy to fake, it doesn't mean that your machine is infected with anything).
Domains were registered two days ago to "Alexey Kernel", which is no doubt a fake name.
greece-career.com presumably targets Greek nationals, and il-career.com looks to be targeting Israelis. The other two are less clear, but our best guess is that mc-jobs.com might be targeting Macedonia (but the TLD is .mk) and oae-career.com might be the UAE and is just a typo. This continues the pattern of going after non-English speaking victims who might be fooled more easily by a scam email in their own language.
If you have any examples of this spam, please consider sharing them in the Comments. Thanks!
greece-career.com
il-career.com
mc-jobs.com
oae-career.com
The "jobs" offered are actually criminal activities such as money laundering. It may be that the email appears to come "from" you as well (the from address is trivially easy to fake, it doesn't mean that your machine is infected with anything).
Domains were registered two days ago to "Alexey Kernel", which is no doubt a fake name.
greece-career.com presumably targets Greek nationals, and il-career.com looks to be targeting Israelis. The other two are less clear, but our best guess is that mc-jobs.com might be targeting Macedonia (but the TLD is .mk) and oae-career.com might be the UAE and is just a typo. This continues the pattern of going after non-English speaking victims who might be fooled more easily by a scam email in their own language.
If you have any examples of this spam, please consider sharing them in the Comments. Thanks!
Labels:
Greece,
Israel,
Job Offer Scams,
Lapatasker,
Macedonia,
Money Mule,
Russia,
Spam,
UAE
Thursday, 11 August 2011
Fake jobs: unionhire.net, wugcareer.com and wugoffers.net
Three new fake job domains registered in the past couple of days to the fake "Alexey Kernel" registrant, forming part of this very long running scam.
unionhire.net
wugcareer.com
wugoffers.net
As before, there is a series of spam messages advertising so-called "jobs" from these companies, but in reality they are criminal activities such as money laundering.
If you have a sample email, please consider sharing it in the Comments. Thanks!
unionhire.net
wugcareer.com
wugoffers.net
As before, there is a series of spam messages advertising so-called "jobs" from these companies, but in reality they are criminal activities such as money laundering.
If you have a sample email, please consider sharing it in the Comments. Thanks!
Labels:
Job Offer Scams,
Lapatasker,
Money Mule,
Russia,
Spam
Monday, 1 August 2011
Fake jobs: careers-canada.com
One fake job domain today, and the scammers seem to have shifted to a new target - Canada. This time, the domain is careers-canada.com, registered only yesterday to the fictitious "Alexey Kernel" in the Ukraine.
The standard approach with these scammers is to spoof an email "from" the target's email address (don't worry if you see this, your email account has not been compromised) and the emails offer a variety of illegal jobs including money laundering. It forms part of this long-running scam.
If you have any examples of emails using this domain, please consider sharing them in the Comments.. thanks!
The standard approach with these scammers is to spoof an email "from" the target's email address (don't worry if you see this, your email account has not been compromised) and the emails offer a variety of illegal jobs including money laundering. It forms part of this long-running scam.
If you have any examples of emails using this domain, please consider sharing them in the Comments.. thanks!
Labels:
Canada,
Job Offer Scams,
Lapatasker,
Money Mule,
Russia,
Spam
Saturday, 30 July 2011
Fake job domains 30/7/11
Six new fake job domains today to avoid:
allnew-careers.com
argentina-hire.com
career-lists.com
career4your.com
world-career.com
your-careers.com
The recent approach has been to spam out emails that appear to be "from" the recipient. Sometimes the emails are poorly translated into Spanish, Portuguese or Greek.
The "jobs" on offer are illegal activities such as money laundering and form part of this very long running scam that has been going on for at least two years.
The domain registrant details are fake:
Mail for these domains is being routed through mx.yandex.ru in Russia.
These job offers are completely bogus and could land you in serious trouble with the police. If you have an example email using one of these domains, please consider sharing it in the Comments. Thanks!
allnew-careers.com
argentina-hire.com
career-lists.com
career4your.com
world-career.com
your-careers.com
The recent approach has been to spam out emails that appear to be "from" the recipient. Sometimes the emails are poorly translated into Spanish, Portuguese or Greek.
The "jobs" on offer are illegal activities such as money laundering and form part of this very long running scam that has been going on for at least two years.
The domain registrant details are fake:
Alexey Kernel Email: johnkernel26@yahoo.co.uk Organization: Alexey Kernel Address: Kreshchatyk Street 34 City: Kiev State: Kiev ZIP: 01090 Country: UA Phone: +38.00442794512
Mail for these domains is being routed through mx.yandex.ru in Russia.
These job offers are completely bogus and could land you in serious trouble with the police. If you have an example email using one of these domains, please consider sharing it in the Comments. Thanks!
Labels:
Argentina,
Job Offer Scams,
Lapatasker,
Money Mule,
Russia,
Scams,
Spam
Friday, 29 July 2011
Fake jobs: chile-hh.com, cl-joblists.com, pt-joblist.com and spain-joblist.com
Four new fake job domains today, targeting victims in South America, Spain and Portugal.
chile-hh.com
cl-joblists.com
pt-joblist.com
spain-joblist.com
These domains were all registered in the past few days. The standard email approach seems to be "from" the victim, and they are often badly translated into Portuguese and Spanish.
The "jobs" on offer are not jobs at all, they usually involve money laundering and other criminal activities. They form part of this very long running scam that has been going on for years.
Three of the four domains have a new (fake) registrant that we haven't seen before:
If you have an example email, please consider sharing it in the comments.
chile-hh.com
cl-joblists.com
pt-joblist.com
spain-joblist.com
These domains were all registered in the past few days. The standard email approach seems to be "from" the victim, and they are often badly translated into Portuguese and Spanish.
The "jobs" on offer are not jobs at all, they usually involve money laundering and other criminal activities. They form part of this very long running scam that has been going on for years.
Three of the four domains have a new (fake) registrant that we haven't seen before:
Alexey Kernel Email: johnkernel26@yahoo.co.uk Organization: Alexey Kernel Address: Kreshchatyk Street 34 City: Kiev State: Kiev ZIP: 01090 Country: UA Phone: +38.00442794512
If you have an example email, please consider sharing it in the comments.
Labels:
Chile,
Job Offer Scams,
Lapatasker,
Money Mule,
Portugal,
Russia,
Scams,
Spain
Thursday, 28 July 2011
Fake jobs: trabajo-lista.com
A single fake domain today, trabajo-lista.com uses the same approach as yesterday's domains, again targeting Spanish language speakers with money laundering jobs and other illegal activities.
Emails will most likely appear to be "from" yourself. This particular scam has been going on now for several years.
If you have a sample, please consider sharing it in the Comments. Thanks!
Emails will most likely appear to be "from" yourself. This particular scam has been going on now for several years.
If you have a sample, please consider sharing it in the Comments. Thanks!
Labels:
Job Offer Scams,
Lapatasker,
Money Mule,
Russia,
Scams,
Spain
Wednesday, 27 July 2011
Fake jobs: chile-hh.com, cv-trabalho.com, espana-hh.com and worldjoblists.com
These domains are being used to advertise fake jobs and appear to be targeting Spanish and Portuguese speakers. They form part of this long-running series of domains associated with fake job offers.
chile-hh.com
cv-trabalho.com
espana-hh.com
worldjoblists.com
The jobs being offered are typically money laundering (lavado de dinero / lavagem de dinheiro) which are highly illegal. It is possible that some other jobs offered may be "back office" functions, including translation into local languages.
The domains are very new, registered in the past two days to:
If you have any examples of mail using these domains, please consider sharing them in the Comments section. Thanks.
chile-hh.com
cv-trabalho.com
espana-hh.com
worldjoblists.com
The jobs being offered are typically money laundering (lavado de dinero / lavagem de dinheiro) which are highly illegal. It is possible that some other jobs offered may be "back office" functions, including translation into local languages.
The domains are very new, registered in the past two days to:
Ricardo Lopez Email: ricardolip2@yahoo.com Organization: Ricardo Lopez Address: ul. Liivalaia 34-10 City: Tallin State: Tallin ZIP: 15040 Country: EE Phone: +3.726317190
If you have any examples of mail using these domains, please consider sharing them in the Comments section. Thanks.
Labels:
Chile,
Job Offer Scams,
Lapatasker,
Money Mule,
Portugal,
Russia,
Scams,
Spain
Saturday, 23 July 2011
Fake jobs: eur-exlusive.com
Another addition to this series of fake job offers is the domain eur-exlusive.com.
Assuming that this follows the standard pattern of dozens of other domains, then these will be too-good-to-be-true job offers that appear to have been emailed "from" yourself. The jobs on offer will actually be money laundering or some other criminal activity.
The domain was registered on 23th July, to a fake registrant "Ricardo Lopez", allegedly from Estonia. Avoid at all costs.
If you have a sample, please consider sharing it in the Comments.
Assuming that this follows the standard pattern of dozens of other domains, then these will be too-good-to-be-true job offers that appear to have been emailed "from" yourself. The jobs on offer will actually be money laundering or some other criminal activity.
The domain was registered on 23th July, to a fake registrant "Ricardo Lopez", allegedly from Estonia. Avoid at all costs.
If you have a sample, please consider sharing it in the Comments.
Labels:
Job Offer Scams,
Lapatasker,
Money Mule,
Russia,
Scams
Thursday, 21 July 2011
Fake jobs: world-chilecv.com
Just a single fake job domain today, world-chilecv.com is an addition to this long-running series of so-called job offers which actually turn out to be money laundering or some other criminal activity.
The domain in question was registered just yesterday to the no-doubt fake reigstrant:
This domain was registered only yesterday. Avoid.
The domain in question was registered just yesterday to the no-doubt fake reigstrant:
Ricardo Lopez Email: ricardolip2@yahoo.com Organization: Ricardo Lopez Address: ul. Liivalaia 34-10 City: Tallin State: Tallin ZIP: 15040 Country: EE Phone: +3.726317190
This domain was registered only yesterday. Avoid.
Labels:
Chile,
Job Offer Scams,
Lapatasker,
Money Mule,
Russia,
Scams
Sunday, 17 July 2011
Fake jobs: eur-cvlist.com, gr-hire.com and world-cvlist.com
Three new fake jobs domains following this pattern, offering bogus jobs which will actually turn out to be money laundering or some other criminal activity.
eur-cvlist.com
gr-hire.com
world-cvlist.com
One characteristic of recent emails is that they appear to come "from" the recipient, as the spammers have forged the "from" field (which is very easy to do).
The registrant details for the domain are no doubt fake:
The domains were registered two days ago on 15th July. If you have samples of spam using these domains, please consider sharing them in the comments.
eur-cvlist.com
gr-hire.com
world-cvlist.com
One characteristic of recent emails is that they appear to come "from" the recipient, as the spammers have forged the "from" field (which is very easy to do).
The registrant details for the domain are no doubt fake:
Ricardo Lopez
Email: ricardolip2@yahoo.com
Organization: Ricardo Lopez
Address: ul. Liivalaia 34-10
City: Tallin
State: Tallin
ZIP: 15040
Country: EE
Phone: +3.726317190
Email: ricardolip2@yahoo.com
Organization: Ricardo Lopez
Address: ul. Liivalaia 34-10
City: Tallin
State: Tallin
ZIP: 15040
Country: EE
Phone: +3.726317190
The domains were registered two days ago on 15th July. If you have samples of spam using these domains, please consider sharing them in the comments.
Labels:
Greece,
Job Offer Scams,
Lapatasker,
Money Mule,
Russia,
Scams
Wednesday, 13 July 2011
Fake jobs: cl-exlusive.com, europ-exlusive.com, totalworld-job.com, uk-cvlists.com and uk-exlusive.com
Five new domains offering fake jobs (actually money laundering and other illegal activities), forming part of this long running series of scams.
cl-exlusive.com
europ-exlusive.com
totalworld-job.com
uk-cvlists.com
uk-exlusive.com
The domains were created yesterday, registered to a no-doubt fake registrant:
If you have a sample email soliciting replies to one of these domains, please consider sharing it in the comments.
cl-exlusive.com
europ-exlusive.com
totalworld-job.com
uk-cvlists.com
uk-exlusive.com
The domains were created yesterday, registered to a no-doubt fake registrant:
Registrant:
Luca Drue
Email: lucadrue@yahoo.fr
Organization: Luca Drue
Address: 27, BERESTYANSKAYA STR
City: Minsk
State: Minsk
ZIP: BY-220123
Country: BY
Phone: +37.5172749317
Fax: +37.5172749311
Luca Drue
Email: lucadrue@yahoo.fr
Organization: Luca Drue
Address: 27, BERESTYANSKAYA STR
City: Minsk
State: Minsk
ZIP: BY-220123
Country: BY
Phone: +37.5172749317
Fax: +37.5172749311
If you have a sample email soliciting replies to one of these domains, please consider sharing it in the comments.
Labels:
Chile,
Job Offer Scams,
Lapatasker,
Money Mule,
Russia,
Scams
Friday, 8 July 2011
Fake jobs: job-britain.com and job4america.com
Two new fake job domains that form part of this long-running series, job-britain.com and job4america.com are pushing fake job offers which will actually be illegal activities like money laundering.
These domains were registered just yesterday to a fake registrant called "Leonid Pravduk". Avoid.
If you have samples of the spam emails using these domains, please consider sharing them in the comments.
These domains were registered just yesterday to a fake registrant called "Leonid Pravduk". Avoid.
If you have samples of the spam emails using these domains, please consider sharing them in the comments.
Labels:
Job Offer Scams,
Lapatasker,
Money Mule,
Russia,
Scams
Thursday, 7 July 2011
Fake jobs: westgroupcv.net, wug-cunsulting.net, wug-joblist.com and wugcv-offers.com
Four new domains forming part of the very long-running "Lapatasker" series of fake job offers:
westgroupcv.net
wug-cunsulting.net
wug-joblist.com
wugcv-offers.com
These job offers will typically involve illegal money mule operations and other fraudulent activities. Unless you enjoy jail time, they are best ignored.
If you have any example emails, please consider sharing them in the comments!
westgroupcv.net
wug-cunsulting.net
wug-joblist.com
wugcv-offers.com
These job offers will typically involve illegal money mule operations and other fraudulent activities. Unless you enjoy jail time, they are best ignored.
If you have any example emails, please consider sharing them in the comments!
Labels:
Job Offer Scams,
Lapatasker,
Money Mule,
Russia,
Scams
Sunday, 3 July 2011
Fake jobs: europe-cv.net, gb-traffic.com and totaljoblists.net
A trio of domains being used to push fake jobs (such as money mule operations) and other illegal activities, part of this long running series. The domains were registered just yesterday.
europe-cv.net
gb-traffic.com
totaljoblists.net
Avoid any offers soliciting a reply to these domains. If you have an example spam email, please consider sharing it in the comments. Thanks!
europe-cv.net
gb-traffic.com
totaljoblists.net
Avoid any offers soliciting a reply to these domains. If you have an example spam email, please consider sharing it in the comments. Thanks!
Labels:
Job Offer Scams,
Lapatasker,
Money Mule,
Russia,
Scams
Thursday, 30 June 2011
Fake jobs: au-jobposition.com
Another domain being used to promote money laundering jobs or other criminal enterprises is au-jobposition.com which forms part of this long-running scam.
As usual, avoid. If you have any samples, please consider posting them in the comments section.
As usual, avoid. If you have any samples, please consider posting them in the comments section.
Labels:
Job Offer Scams,
Lapatasker,
Money Mule,
Russia,
Scams
Tuesday, 28 June 2011
Fake jobs: greece-joblist.com and italia-lavoro.net
A pair of domains offering fake money mule jobs or reshipping mule jobs, the greece-joblist.com and italia-lavoro.net domains seem to be targeting Italian and Greek victims and form part of this long running scam.
If you have any examples (especially non-English ones) please share them in the comments!
If you have any examples (especially non-English ones) please share them in the comments!
Labels:
Greece,
Italy,
Job Offer Scams,
Lapatasker,
Money Mule,
Russia,
Scams
Thursday, 23 June 2011
Fake job domains 23/6/11
Another day, another set of fake job domains forming part of this long-running scam. The domains were registered just two days ago to a presumably fictitious character called "Leonid Pravduk".
au-joblists.com
europ-joblist.com
gb-totaljob.com
uk-joblists.com
us-joblists.com
The "job" being offered is usually something like a money mule or taking part in a reshipping scam. In any case, the so-called job is illegal and should be avoided.
If you have a copy of a sample email, please share it in the comments section!
au-joblists.com
europ-joblist.com
gb-totaljob.com
uk-joblists.com
us-joblists.com
The "job" being offered is usually something like a money mule or taking part in a reshipping scam. In any case, the so-called job is illegal and should be avoided.
If you have a copy of a sample email, please share it in the comments section!
Labels:
Job Offer Scams,
Lapatasker,
Money Mule,
Russia,
Scams
Sunday, 19 June 2011
Fake job domains 19/6/111
A whole batch of domains advertising fake jobs today (mostly money mule operations). These were are registered two days ago to the fictitious "Leonid Pravduk" registrant that we have seen recently, and form part of the very long running "Lapatasker" series of scam domains.
europe-hire.net
green-westeurope.com
hosting-europ.com
newgreen-europ.com
traffic-europ.com
us-totaljob.com
usa-totaljob.com
Avoid these, basically.. but if you do have a sample email, feel free to share it in the comments.
europe-hire.net
green-westeurope.com
hosting-europ.com
newgreen-europ.com
traffic-europ.com
us-totaljob.com
usa-totaljob.com
Avoid these, basically.. but if you do have a sample email, feel free to share it in the comments.
Labels:
Job Offer Scams,
Lapatasker,
Money Mule,
Russia,
Scams
Subscribe to:
Posts (Atom)