MoneyMule ~ Extreme-groupinc.com

Excellent series of articles Brian.

Though careerbuilder.com does have alerts about these money mule jobs: http://www.careerbuilder.com/JobSeeker/Info/Fraud.aspx I do not believe that they are taking sufficient action to combat this epidemic. In my opinion, careerbuilder does not adequately vet employer applicant accounts. These criminals gain easy access to massive databases of resumes for targeting potential money mules. This activity has been going on for a long time.

For example, this same criminal operation that is listed here, was the subject of a report by a money mule on ripoffreport.com back in February 2009. That mule report lists how they recived a transfer of $9,300 taken from a company in TN., L S Starrett. The mule was then instructed to withdraw the cash and send it via Western Union to 3 recipients. Two in Chisinau, Moldova, and a third in Moscow, Russia.
http://www.ripoffreport.com/Miscellaneous-Companies/MMT-GROUP-INC/mmt-group-inc-scammers-pleas-479d3.htm

Besides Scope Group Inc aka scope-group.cn, these criminals have dozens of active fake recruiting websites.

An audit of a few of their active IP addresses shows the following fraud domains:

IP: 222.35.137.234

01. Cosco-groupli.com
02. Extreme-groupinc.com
03. Holding-groupmain.cn
04. Lime-groupnet.cn
05. Massive-groupsvc.cc
06. Premier-groupinc.com
07. Vision-groupsvc.com
08. Alliancegroupmain.cn
09. Entrust-group.cc
10. Entrust-groupsvc.cn
11. Vector-groupfine.cn

IP: 222.35.137.235

01. Extreme-groupco.cn
02. Invalda-groupli.com
03. Massive-groupsvc.cn
04. Melson-groupli.cn
05. Prime-groupco.com
06. Trans-groupinc.com
07. Cdi-groupmain.cn
08. Totalgroupinc.cn

IP: 222.35.137.236

01. Cosco-groupli.cn
02. Cosco-groupmain.com
03. Extreme-groupinc.cn
04. Massive-groupsvc.com
05. Regency-groupco.com
06. Rengo-groupli.com
07. United-groupnet.com
08. Alliance-group.cc
09. Alliance-groupmain.cn
10. Entrustgroup.cn
11. Scope-group.cn
12. Total-groupco.cn

IP:222.35.137.237

01. Affina-groupnet.com
02. Annuity-groupnet.cc
03. Holding-group.cn
04. Invalda-groupmain.com
05. Lime-groupnet.cc
06. Lime-groupsvc.com
07. Massivegroupsvc.cn
08. Puritan-groupinc.com
09. Redeye-groupco.com
10. Rengo-groupmain.com
11. Mena-groupsvc.com
12. Stock-groupmain.cc

IP: 222.35.137.238

01. Annuity-groupllc.com
02. Archway-groupinc.com
03. Integrity-groupsvc.com
04. Melson-groupli.com
05. Melson-groupmain.com
06. Saturn-groupsvc.com
07. Trans-groupmain.com
08. United-groupnet.cn
09. Alliance-groupmain.cc
10. Scope-groupmain.cn

Anyone recruited from resumes on file with careerbuilder.com by any of these entities, should be aware that they are recruiting money mules.

Source: SecurityFix – WashingtonPost

Advertisement

WESTERN UNION MONEY TRANSFER

The Purpose of this post is to ALERT you that the job you are about to apply for orscamalert may have applied FOR or is CONSIDERING APPLYING FOR is FRAUDULENT. The identities of an individual or a business entity have been stolen along with fund from their bank accounts.

These job postings are an attempt to lure you into accepting and cashing counterfeit checks into your bank accounts. You are being recruited to wire transfer these funds via WESTERN UNION or MONEYGRAM from your bank into a DOMESTIC BANK  or OFFSHORE BANK ACCOUNT.

 Essentially You Become A Money or Repackage Mule

  1. Money Mule Explained 
  2. Understanding The Cyber Theft Ring
  3. Protecting Yourself Against Money Mule
  4. KrebsOnSecurity – Cyberheist
  5. Washingtonpost.com by Brian Krebs
  6. Interview With A Money Mule
  7. Bobbear.co.UK ~ Historical Money Mule Sites

____________________

WESTERN UNION MONEY TRANSFER
SEND MONEY WORLD WIDE.
Our Ref: WUMT/NIG/IMF/04/14
Money Transfer Control Number

ATTENTION Beneficiary ,
Be informed that the sum of Five thousand dollars ($5000.00 USD) has already been sent to you via our Western Union Money Transfer office as we have been given the mandate to transfer your full overdue payment, a total sum of $850.000.00, via the western union by the Ministry of Finance. I tried contacting you to give you the necessary information to unable you pick up your funds but I couldn’t get through yesterday, so I decided to email you the MTCN and sender’s name so that you can pick up the $5000.00 to enable us send another $5000.00 by tomorrow.

As you know already we will be sending you $5000.00 only per day. And it was agreed that you are to pay the clearance certificate charges a total sum of $75.00 before you are enabled to pick up your first payment, do take note of this, that you are to pay the $75.00 before picking up your first payment.Go to any western union office in your locality to pick up the $5000.00 which is currently active and endeavor to call me as soon as you get this mail as the only Operation Manager in charge of your payment, and I will send you another payment tomorrow once you pick up the first one, this is my phone line Call +229-98665539 E-mail: (westernunion18@kimo.com ) contact me once you track the $5000.00 USD today.

Below is the western union information to pick up the $5000.00 USD; which you will be receiving daily after you send the transfer clearance certificate charges of $75 and it will serve as re-confirmation of your payment file in this office.
NOTE:That you cannot pick up these funds if the transfer clearance
certificate charges is not paid for.

1. Sender’s First Name: Tony
2. Sender’s Last Name: Morba
3. Amount : $5000
4. Text Question: What For ?
5. Text Answer: Funds
6. MTCN: 705 668 6653
7. Receivers name:

Website; https://wumt.westernunion.com/asp/orderStatus.asp?country=BJ

track it and be sure ok.I will be waiting to hear from you with the transfer clearance certificate payment of $75.00 today, and you areto make use the information below to send the transfer charges today.

Receiver’s First Name: JONES
Receiver’s Last Name: DANIEL
Receiver’s COUNTRY: BENIN REPUBLIC
CITY: COTONOU
Amount: $75.00 USD
Text Question: Who
Text Answer: God

Be advised that the $75USD transfer clearance certificate is compulsory as I was told, that is the only fee to be paid before you can receive your payment completely. Endeavor to E-mail your direct contact and telephone
number.

Regards
Reverend DANIEL JONES
Email; ( westernunion18@kimo.com )
Phone: +22998665539


This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.