Thursday, November 13, 2008

Thousands of Columbians defrauded in pyramid scheme

Defrauded investors have rioted in several cities in Columbia. They were cheated out of their savings in a pyramid investment scheme, and now the crooks have closed shop, though some have been caught.
See the BBC News for the full report.

Monday, November 3, 2008

Trojan virus steals banking info

BBC reports that the Sinowal trojan has infected computers world-wide and stolen information for more than 270'000 bank accounts and 240'000 credit cards... Infections can happen simply by visiting a booby-trapped web site, and users wouldn't be aware of the infection.
Here is another report from the register.

Crooks make $5m a year from fake Windows security software

Criminals can make as much as US$5 million a year by planting nearly-worthless security software on PCs, said Joe Stewart, director of malware research at SecureWorks Inc.
Read the full report.

Wednesday, September 17, 2008

Spam and Malware sites receive a hit

A commentary on the Register.co.uk revealed that Directi provides the PrivacyProtect service. Behind this service many fraudulent web sites were hiding. The service itself (Privacyprotect.org), when a whois is performed, is hiding behind a mail box in New Zealand - with a note that all mail is rejected. The contact phone number given is in Denmark. A call to that number results only in an answering machine, telling you that nobody answers the phone. The service is provided by Directi, and they promise now to suspend abusive services within 24 hours.
The article revealed also other sites, such as Knujon (no junk backwards), which has a large list of junk email. Further, there is TeMerc Internet Countermeasures (a forum for adware, malware, spyware), Hostexploit, and Scaminvestments. Catty Shaq, mentioned in a previous post, has closed down, but the information was transferred to $caminvestments$.
In a joint statement from Sept. 7., 2008 from Directi, HostExploit and Kunujon, they promise collaboration in suspending fraudulent services.

Sunday, August 10, 2008

Another version of the Bed&Breakfast check fraud

Here is another email for a Bed & Breakfast reservation by the check fraudsters.



Von: William John
An: xxx
Betreff: RESERVATION REQUEST

Greetings,
I enquire for reservations for 4 couples coming for their honey moon at your property,I would like you to get back to me with the following.
1. The availability of the dates
2. The Daily cost for the required dates
3. The total cost for the lenght of their stay.
4. Do you accept credit card payment.
The arrival date for the couples will be 20th Oct and they will depart on 30th Oct 2008 ,Their stay will last for 10 days.
Do get back to me with the requirements as stated above.
Kindest Regards,
Mr William
Tel: +44 70457 90678
+44 70457 90689


On these websites you have more of these email listed: Gower Holidays, Holiday Cottages Scottland, and the previously mentioned UKAPAS

Wednesday, July 16, 2008

Check fraud targets Bed & Breakfast and Restaurants

The following email was received by a Bed and Breakfast in Switzerland:


From: Waston Brown <waston_brown@yahoo.com>

TO: xxxx
RE:: Reservation...

I am Mr Waston Brown of Accessmarts,London,Uk.I need to book reservation in your Hotel or arpartment for 6 Adults coming for a vacation between the month of Setember or October 2008.Get back to me with the total cost in Euro of what it will cost them for 21 NIGHTS in EURO 6 single/ 3 Double rooms or Apartment including their breakfast,also the best available dates OR call : +447031846295.

Regards,



A google search with some of the sentences led to two other web sites listing numerous similar and related emails: marcproost and UKAPAS - Scams. As UKAPAS (and here) also explains, the principle of the SCAM is to pay with a check made out for much more than the actual costs, and ask for the difference back in cash. The check is false, of course.
A google search with the phone number reveals that "Waston Brown" has been active recently also in Hungary. This one is a reply to a positive answer, making the check fraud clear:

Hello,

Thanks for your prompt reply and update on price. Moreover we have resolved to use your spaces. We are also glad to infom you that we have concluded payment arrangements with our sponsor,who volunteered to sponsor us.
Thus,the sponsor promised to send a Certified Bank Cheque of 8,000 Euros, that will cover your accomodation expenses and other services needed by the delegates (like cars,flight tickets etc).
I have now been instructed to send you the cheque payment,because the logistics agent that will provide cars and flight tickets the delegates will use during their stay in your place requires his fund through credit card while payment will come through certified cheque.
from now on So when you receive the certified cheque you will cash it deduct the cost of your services 1,890 Euros and send the balance 6,110 Euros to the logistics agent whose information will be forwarded to you once you confirm this payment method.
This payment method will not cause you any extra cost because all the bank charges will be deducted from the certified cheque. So, confirm by providing me with the following information:

(1) YOUR FULL NAME (name on cheque)..............
(2) ADDRESS (for cheque delivery)................
(3) PHONE NUMBERS............., for payment to be delivered to you.
The company will highly appreciate your prompt response and cooperation. I also hope that the stay of our staff will be made memorable.

FYI; PLEASE THE ATTENTION OF THE MANAGER/OWNER SHOULD BE DRAWN TO THIS MAIL

Waston Brown
3 Rawsthorne Close,
Sliver Town,E16,2JR ,London UKT
elephone:+447031846295
Fax:+448704715180


Mr. "Waston Brown" seems to go also under the name "Harry Gardon", same address...


From: harry gardon
Sent: Monday, May 19, 2008 9:42 PM
Subject: Payment Details...

Hello,

Thanks for your prompt reply and update on price. Moreover we have resolved to use your spaces. We are also glad to infom you that we have concluded payment arrangements with our sponsor,who volunteered to sponsor us.
Thus,the sponsor promised to send a Certified Bank Cheque of 8,500 Euros, that will cover your accomodation expenses and other services needed by the delegates (like cars,flight tickets etc).
I have now been instructed to send you the cheque payment,because the logistics agent that will provide cars and flight tickets the delegates will use during their stay in your place requires his fund through credit card while payment will come through certified cheque.
So when you receive the certified cheque you will cash it deduct the cost of your services 1,890 Euros and send the balance 6,610 Euros to the logistics agent whose information will be forwarded to you once you confirm this payment method.
This payment method will not cause you any extra cost because all the bank charges will be deducted from the certified cheque. So, confirm by providing me with the following information:

(1) YOUR FULL NAME (name on cheque)..............
(2) ADDRESS (for cheque delivery)................
(3) PHONE NUMBERS............., for payment to be delivered to you.
The company will highly appreciate your prompt response and cooperation. I also hope that the stay of our staff will be made memorable.

FYI; PLEASE THE ATTENTION OF THE MANAGER/OWNER SHOULD BE DRAWN TO THIS MAIL
3 Rawsthorne Close,
Sliver Town,E16,2JR ,London UKT
Telephone:+447031846295


Email Scams are Fun runs a blog posting various such scams.

Friday, May 9, 2008

Scam Busters under attack?

In March it was reported that CastleCops were hit by another serious DDOS attack.
http://www.darkreading.com/document.asp?doc_id=149497

At present, castlecops seems to be down, and at catty shack the whole forum disappeared.

Have they been intimidated to give up?