Thursday, April 10, 2014

2014-04-10 Email Scam from "Outsource Consulting Inc.."

So glad they "selected" me to work for them.  Especially since its in a field I have no experience or expertise in.  Check out the mismatch in the return-path and from fields.  Looks like World4You has a compromised email server.

Check out what the Honey Pot Project has to say about mailserver 81.19.145.152/antispam02.world4you.com:

http://www.projecthoneypot.org/ip_81.19.145.19

You just have to love the irony of an antispam server being used to send spam. 


===== Begin Scam Email =====

Good morning Eric Cissorsky,

Congratulations! Based on your Curriculum Vitae on www.careerbuilder.com we wanted to confirm that you have been selected to work for Outsource Consulting Inc..

The job we are proposing is that of a F.S.A.. Salary rate is 2300 USD and 8% commission.

Probationary period - 30 working days from the day you apply.

Employee Benefits Include:                                                       

- Dental Care    

- Health care

- Vacation - 4 weeks per annum

- And others

All benefits take effect only after probationary period.


We would hope to start working with you in a short time. Please report to Mr. Jason Adams as soon as you receive this offer, for documentation and orientation.

Please fill out and send us the form below with your Contact information to verify your identity and interest in this position.

------------------F O R M _________F O R M----------------- Full Name: ____________________

Address: ______________________

Phone: ________________________

Preferred call time: _______________

------------------F O R M _________F O R M-----------------

Thank you and waiting for contact from you asap.

Sincerely,
HR Consultant
Mr. Jason Adams

===== Begin Scam Header Info =====

Return-path: <sema-drive@www82.world4you.com>
Received: from antispam02.world4you.com ([unknown] [81.19.145.19])
 by vms172085.mailsrvcs.net
 (Sun Java(tm) System Messaging Server 7u2-7.02 32bit (built Apr 16 2009))
 with ESMTP id <
0N3T00337NDEKEA0@vms172085.mailsrvcs.net> for
 <recipient_address_omitted>; Thu, 10 Apr 2014 10:36:55 -0500 (CDT)
Received: from [81.19.145.152] (helo=www82.world4you.com)
 by antispam02.world4you.com with esmtp (Exim 4.77)
 (envelope-from <
sema-drive@www82.world4you.com>)
 id 1WYH22-0003ZJ-A9 for <recipient_address_omitted>; Thu,
 10 Apr 2014 17:36:50 +0200
Received: by www82.world4you.com (Postfix, from userid 1267)
 id 4171753D4C33; Thu, 10 Apr 2014 17:36:50 +0200 (CEST)
Date: Thu, 10 Apr 2014 17:36:50 +0200 (CEST)
From: Mr. Jason Adams <
outsourceconsultingus@gmail.com>
Subject: Eric Cissorsky April 10, 2014 11:36:46 AM
X-Originating-IP: [81.19.145.19]
To: Eric Cissorsky <recipient_address_omitted>
Message-id: <
491191.20140410193646@gmail.com>
MIME-version: 1.0
Content-type: text/plain
Content-transfer-encoding: 7BIT
Original-recipient: rfc822;<recipient_address_omitted>

1 comment: