Secret Shopper ~ CAREERCarlina@teleworkrecruiting.com

The Purpose of this post is to ALERT you that the job you are about to apply for scamalert4or may have applied FOR or is CONSIDERING APPLYING FOR is FRAUDULENT. The identities of individuals or a business entity have been stolen along with fund from their bank accounts.

These job postings are an attempt to lure you into accepting wire transfers and cashing counterfeit checks into your bank accounts. You are being recruited to wire transfer these funds via WESTERN UNION or MONEYGRAM from your bank into a DOMESTIC BANK or OFFSHORE BANK ACCOUNT.

Essentially You Become A Money or Repackage Mule

  1. Money Mule Explained
  2. Understanding The Cyber Theft Ring
  3. Protecting Yourself Against Money Mule
  4. KrebsOnSecurity – Cyberheist
  5. Washingtonpost.com by Brian Krebs
  6. Interview With A Money Mule
  7. Bobbear.co.UK ~ Historical Money Mule Sites

____________________

__________________________________________

Email header analysis report
All valid IP Addresses found in the header.
Ip Address 3rd Party Info Provider City Flag Country
* 172.162.30.69 Check 172.162.30.69 at Senderbase.org Check 172.162.30.69 at Reputationauthority.org America Online n/a United States
98.138.88.139 Check 98.138.88.139 at Senderbase.org Check 98.138.88.139 at Reputationauthority.org Yahoo Sunnyvale United States
209.86.89.61 Check 209.86.89.61 at Senderbase.org Check 209.86.89.61 at Reputationauthority.org Earthlink n/a United States
98.138.197.220 Check 98.138.197.220 at Senderbase.org Check 98.138.197.220 at Reputationauthority.org Yahoo Sunnyvale United States

*Probable originating IP address

From Doris Summers Sat May 10 04:38:16 2014
X-Apparently-To: via 98.138.197.220; Sat, 10 May 2014 01:29:46 +0000
Return-Path: CAREERCarlina@teleworkrecruiting.com
Received-SPF: neutral (209.86.89.61 is neither permitted nor denied
by domain of teleworkrecruiting.com)
IGxldCB5b3Uga25vdyBhYm91dCBzb21lIG5ldyBwb3NpdGlvbnMgdGhhdCBo
YXZlIGJlY29tZSBhdmFpbGFibGUuIElmIHlvdSBhcmUgbm90IHRoZSByaWdo
dCBtYXRjaCBmb3IgdGhlIGJlbG93IHBvc2l0aW9uIHBsZWFzZSBhY2NlcHQg
bXkgYXBvbG9naWVzICYgaWYgeW91IGtub3cgc29tZW9uZSB3aG8ncyBsb29r
aW5nIGZvciB0aGlzIGtpbmQgb2Ygd29yayBhbmQgdGhhdCB3bwEwAQEBAQN0
ZXh0L3BsYWluAwMwAgN0ZXh0L2h0bWwDAzc-
X-YMailISG: DxC.BgUWLDsnVZIGGMKLLtiAqBdHS7LTe5.qYv9fRpOyDime
T03DCxz325V6Lr9jA1uct0owhiVabQQU0hzoA.ZsIZRldqwBy_B_EllxnH2F
4dTjF8WV6PqXs0ILvb2KhjWNDfZEHtlL2ZlyQvFVN2eWrWSKDjAXy6r3aHKN
AkBlcjg9fnEiRhii.ruyvPfE_D8lftX_PYs726HR8syymI796fOrbz.p.MC5
sVKqhPcXKdG_eBaTrMmATeEt58iW1166wmCC.Blc5N_hTicuynt8b1MtG5eT
XTdlbaRhV1zmASpI_XcfK53pQ..AjQTiwafyhYLXbdPW.FIbn_Liw.vlrYgz
4wg77BWKtCIfrSxe_KX6xrTZ8JSkmffOmVgUGVhGricKUXjBNbjNvghRnt2Z
QmUT.ULisUSIi9KGnEQQwo4MNpovRcb1KYCazyCemgwTsOUj5Wnm7j3kCU0x
WXbAm0ycQLLQB3kQvR5wtsH7WMXrqlWiNtFm.bbNOPnwW2qEql82ed7jyUqn
YOYtyEEa5vv634TkOvIgIj3Kta6gueyUFh8l3VcjdYqYbVz.bca8Z.Iyl1pC
Obsq3ET4sVve0tFvAoPz9OLtGuRijshc_i9rZTo5K_yy.GFSdc9lRh.gT9sZ
mVdXyb5HDcCEARXRdSIb_O6jnFQb0PUhHpK17ZWu5wEynOGpqJ3yKmeckFqj
PjBqDM5qKW6LTUjGL6v9lVRnpXlTJ_ZAyeVvwrUkhzspBunpbGehf9P01kZ_
fr84aORiDwNgUoJiz5EMDp1fKpLgkREQNt7W717qtIqo.dmasHx73xRhgQZO
ID8jRxBvkBbrOVK9qUTKD4T5PR.19PWmuOomgBdedNHh3SkjD7h_390dHpUa
9Hc_.MId7dclDY82Y5sK_ESkXuX1NXF1P.NgwtGjgEhL7cFYwUDe87h1wTPg
Df3D17810sOgO_CAADHTNILxt7ZTvI8b2NgXrIB0NaVkIlQp8XMAcOBANsyw
wTeqH03zogDdz5Fq2qnk3.TzEWyZszNp4HqE_dWnpqQLulFWbrLL1tX2fC.k
J.4r3ybwaCxEhcz4EsboJlJtT8AT42oQiWJfwSeNeglLDvKbP0xV5PljAtv.
3MfIifz_fmOXWPBwaxydM9RhOcZ8_G2dZ6rKoxkEW_DTS6Avg_j5.XtO2LgC
Sm0a96pWrGB93sERhUYkpe205QCCZxorrDDqUtWa25FsuYz_fWZt5nP2.KWq
QBjfRpm6RyseCPniHcTtAXCfA5xU9lq7z5OVcJIy3Qy5vmGytBUpVy6eyK1N
CISG0hoAT7rZlj8WkH88oDpzFf0vraXbo69EUceZvqfGafvgUN36oNudgsFb
HReiGYRVz6EfpI0UATG9
X-Originating-IP: [209.86.89.61]
Authentication-Results: mta1022.sbc.mail.ne1.yahoo.com from=teleworkrecruiting.com;
domainkeys=neutral (no sig);from=teleworkrecruiting.com; dkim=neutral (no sig)
Received: from 98.138.197.220 (98.138.197.220) by 98.138.88.139(98.138.88.139);
Sat, 10 May 2014 01:29:47 +0000
Received: from 127.0.0.1 (EHLO elasmtp-galgo.atl.sa.earthlink.net) (209.86.89.61)
by mta1022.sbc.mail.ne1.yahoo.com with SMTP; Sat, 10 May 2014 01:29:45 +0000
Received: from [172.162.30.69] (helo=WIN7VBUVUIOHLO)
by elasmtp-galgo.atl.sa.earthlink.net with esmtpa (Exim 4.67)
(envelope-from <CAREERCarlina@teleworkrecruiting.com>)
id 1Wiw5w-0007I7-Rx; Fri, 09 May 2014 21:28:57 -0400
Reply-To: doris.summers@yandex.com
From: “Doris Summers” CAREERCarlina@teleworkrecruiting.com
To: “Doris Summers” CAREERCarlina@teleworkrecruiting.com
Subject: Your Job Application – SGS Ref #2402
Date: Sat, 10 May 2014 04:38:16 -0700
Message-ID: <19a001cf6c44$5fa21f30$1ee65d90$@com>
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary=”—-=_NextPart_000_19A1_01CF6C09.B3434730″
X-Mailer: Microsoft Office Outlook 12.0
Thread-Index: Ac9r5xIyqwton1poSEe87d0lkP07MA==
Hello,

I wanted to reach out to you and let you know about some new positions that have become available.

If you are not the right match for the below position please accept my apologies & if you know someone who’s looking for this kind of work and that would be a good fit and interested in this position please forward my contact information to them OR guide them to me.

Secret Shopper

Contract duration: Minimum 12 months

Skills/Experience:

The successful applicant should have a growth mindset, organizational skills for efficient time and stress management and the ability to communicate professionally in both written and verbal mediums with people at all levels of the organization. Excellent opportunity to work enjoy a tremendous support network and be part of one of the best teams worldwide.

Thanks & Regards,

SGS

Note: Please allow me to reiterate that I chose to contact you either because your resume had been posted to one of the internet job sites to which we subscribe, or you had previously submitted your resume to CareerBuilder. I assumed that you are either looking for a new employment opportunity, or you are interested in investigating the current job market.

If you are interested in this position, please email me back with the word Interested in the subject of the email and I will send you a complete description of the position we have open.

If you would like to unsubscribe, please email me back with the word Unsubscribe in the subject of the email.

Confidentiality/Prohibition for Disclosure: This communication is intended only for the use of the individual or whom it is addressed and may contain information that is privileged, confidential, and exempt from disclosure under applicable law. This information comes from records whose confidentiality may be protected by Federal and/or State Law. The authorization for release of information form does not authorize redisclosure of medical information beyond the limits of this consent. Federal Law prohibits information disclosed from records protected by these laws and from being redisclosed, even to a patient, without the specific written consent of the patient or as otherwise permitted by such laws and/or regulations. A general authorization for release of medical or other information is NOT sufficient for these purposes. Civil or criminal penalties may attach for unauthorized disclosure of health information.

Advertisements