Yahoo password theft -- Consequences and threats

Yahoo has reportedly fixed the security blemish that provided hackers an access to passwords of almost 450,000 users. Yahoo confirmed it through its blogpost on Friday (July 13).

Yahoo password theft -- Consequences and threats

According to the referred blogpost:

Yahoo! revealed that the data of those users were compromised who were registered members of Associated Content prior to May 2010, when it was acquired by Yahoo! and presently known as Yahoo! Contributor Network.

“We have taken swift action and have now fixed this vulnerability, deployed additional security measures for affected Yahoo! users, enhanced our underlying security controls and are in the process of notifying affected users.  In addition, we will continue to take significant measures to protect our users and their data,” the blogpost revealed further.

Apart from Yahoo’s efforts to counter the hackers’ attack experts think that inter-linked ID’s might also be on risk because Yahoo Contributor Network facilitates users to sign in through a Yahoo, Google or Facebook ID.  This means that if you use log in to any user service provided by Yahoo via any other ID such as Gmail or Facebook, you should also change your password for that account as it could have been compromised.

According to earlier reports, a hacker group dubbed as D33DS Company, broke into an undisclosed subdomain of Yahoo’s website where they recovered unencrypted account details and then posted these details online.

The Yahoo hacking is the second biggest so far this year; after LinkedIn was hacked earlier this year restricted almost 6 million users to lose access to their accounts.  While insufficient tech security provided by these Internet giants are a major cause of concern, the substandard and ordinary passwords chosen by users are also contributed to such disasters. 

According to an online analysis by CNET, that passwords of more than 2,200 of hacked accounts were “123456″ and 780 of the passwords were just “password.”

Report Tags: Yahoo, Yahoo!, Yahoo Inc., CNET, Yahoo Hacked, Yahoo accounts hacked, D33DS Company, Hacking, Yahoo Contributor Network, Associated Content

Christchurch Earthquake Charity Support Job - A Latest Money Laundering Scam

Beware! Its a Cyber World - - Summary:

Intensively penetrating email message offers the recipient a job as charity support worker in which he or she would be required to receive and process donations to help victims of the Christchurch earthquake and keep a percentage of the donations as payment for the work.

In fact, the email is a scam intended to trap recipients into involuntarily "laundering" the proceeds of criminal activities by accepting stolen funds and sending money back to the criminals via a money wire service. The scam email uses the name and logo of a genuine charity support organization without its permission.

Let's have a look to the contents of the mail:

======================================================

Subject: CHRISTCHURCH EARTHQUAKE CHARITY SUPPORT JOB. (READ CAREFULLY)

Dear Friend,

I am James McCoy from [Name of charity removed], London, UK branch and i am contacting you to offer you a job to help our charity and also donate to New Zealand's present earthquake disaster in Christchurch.

We have so many good hearted charity supporter in New Zealand whom are willing to support the charity but they cannot make payment internationally due to some international bank charges that may apply,so we want to employ you to receive the generous gift giving to the charity and you will be our New Zealand manager of the charity as we do have a branch in Australia as well and it's working fine.

We have New Zealand generous donators whom are willing to donate to thid list below:

Cancer Research UK
World Vision Sponsor a Child
British Red Cross
The National Trust
Christchurch Earthquake

You will be paid 10% of each donation received for the charity by our New Zealand donators which will serve as your payment for your support and we will surely reward you more at the end of every month.

Please do contact me back if you are willing to take the job then i will instruct you further on what to do.

I hope to hear from you soon,

Regards,
James McCoy
Donation Support Officer

[Name of charity removed] 

=========================================================

Beware! Its a Cyber World - - Explanation:

This email, which purports to be from a well known charity donor acquisition portal based in the UK, offers the recipient a job as the organization's New Zealand charity support manager. The email claims that the recipient's tasks would entail receiving donations to help those affected by the earthquake that devastated the New Zealand city of Christchurch in February, 2011 along with donations for other worthy causes. According to the email, a New Zealand based manager is necessary so that those willing to donate can avoid international bank charges when making contributions. As payment, the "manager" would supposedly be paid 10% of each donation received. The email includes the name, logo and other graphics associated with the charity donor portal.

However, the email is not from the named charity donor organization and the supposed job is part of a nefarious scheme designed to trick people into laundering the proceeds of crime. A person who accepted the bogus "job" would be asked to process "donations" in the form of bank transfers or cheques via his or her own bank account. The "worker" would be instructed to keep 10% of each "donation" and then send the remainder back to the "charity organization" via an electronic funds transfer service such as Western Union.

In fact, rather than receiving donations, the worker would actually be accepting and processing money stolen by criminals via other fraudulent activities. The purpose of this scheme is to convert the proceeds of other crimes into cash payments that cannot be easily traced back to the criminals responsible. For example, if a criminal uses a phishing scam to gain access to online bank accounts, he is not likely to risk detection by simply transferring funds from the compromised accounts to his own bank. This would leave an electronic trail that could be too easily followed by police. One way that he can overcome this problem is by roping in an unwitting accomplice who can "launder" his ill gotten gains. Job offer scams such as this one are designed to supply such accomplices.

By using such a scheme, the criminal will receive most of the proceeds of his theft in the form of untraceable cash. Meanwhile, the electronic trail will lead police directly to the hapless "worker" who has been tricked into using his or her own bank account. Once the fraudulent activities are discovered, the victim is likely to be left substantially out of pocket and facing the possibility of criminal charges.

It should be noted the scam email was not sent by the charity donor acquisition organization named in the message. The organization itself is perfectly legitimate and the name, logo and graphics were used by the criminals operating the scam without the organization's knowledge or permission.

Such laundering scams are very common and take many forms. People should be very cautious of any unsolicited job offer that involves receiving and processing funds via their own bank accounts and deducting a portion of each transaction as payment. No legitimate organization is ever likely to conduct its business in such a manner.

Moreover, scammers are always very quick to exploit major disasters such as the Christchurch earthquake. Other scam attempts that use the earthquake as a cover story are likely to be distributed in the coming days and weeks. Be wary of unsolicited emails asking for donations for earthquake victims. Those wishing to donate to earthquake victims should ensure that they do so via legitimate charitable or government appeals. Advance fee scammers are also likely to exploit the earthquake as they have for many other natural disasters in the past.

Phishing Scam Alert - - "Billing update must be performed" Notice From AOL

Beware! It's a Cyber World - - Summary:

An Email pretending to be from AOL states that the recipient must follow a link to update account information or limitations will be placed on his or her AOL service.

In fact, the email is a phishing scam, as the message is not from AOL.  The scam is devised to trap recipients into providing personal and financial details to Internet criminals. The link in the email points to a bogus website that asks users to submit information via an online form.

Take a look below for the contents of the mail:

======================================================

Subject: Billing Update Must be Performed

Billing update must be performed

Dear AOL Member,

Our records indicate that your account hasn't been updated as a part of our regular account maintenance. Our new SSL servers check each account for activity and your information has been randomly chosen for verification. AOL Member Services strives to serve their customers with better and secure banking service.

Notification: Failure to update your account information may result in account limitation at shopping on our portal.

Update your information

To re-secure your account, just confirm your personal information.

Sincerely,
AOL Member Services

Please note that this email address cannot accept replies.

========================================================

Beware! Its a Cyber World - - Explanation:

This email, which claims to be from Internet service provider AOL, informs the recipient that he or she must update AOL account details or risk a subsequent limitation of services. The message claims that the account has been randomly chosen for verification by AOL's "new SSL servers". It warns that the account has not been updated as part of AOL's regular account maintenance procedure and urges the recipient to click the "update your information" link in order to "re-secure" the account.

However, the email is not from AOL. In fact, the message is a phishing scam designed to steal personal and financial information from AOL customers. Those who fall for the ruse and click the "Update" button will be taken to a fraudulent website designed to closely resemble a genuine AOL page. As shown in the screenshot below, the fake site asks users to provide a significant amount of private information, including credit card numbers and social security numbers:

All information on the bogus website will be sent to criminals who can subsequently use it to commit credit card fraud and identity theft. To further the illusion, secondary links on the fake site actually open genuine AOL web pages. Moreover, when a victim has finished filling in the information on the bogus form and clicked the "Submit" button, he or she will be automatically redirected to the genuine AOL website.

The phishing email itself is also designed to resemble a genuine AOL message.

AOL customers are regularly targeted by phishing scammers. AOL will not send out unsolicited emails warning customers that their account will be limited or suspended if they do not follow a link and provide personal information. In fact, any message that claims that you must update information for a bank, government department or online service by following a link or opening an attachment should be treated with suspicion.

Scam Alert - Blackmailing by The Hacker "Mike", Who Accessed Your Personal Stuff

Beware! Its a Cyber World - - Summary:

Emails pretending to be from a hacker named Mike claim that he has made way in to the recipient's computer and will transfer his personal files to a lady who engaged him if not the recipient contacts him to consider preservation the files.

In fact, the claim that "Mike" has hacked the recipient's computer is a lie. The message is simply a trick to trap recipients into sending money making them believe that "Mike" the hacker has access to their files.

Two types of emails are being forwarded by the internet criminals to trap the innocent internet users. Let's have a look to the content of these mails.

==========================================================

EXAMPLE 1

 

Subject: Re: Notice

Hello. My name is Mike. I'm hacker.

Last week, one woman has contacted me and asked to hack your computer in order to get copies of certain interested her files. For showing your digital photos, text documents, e-mail messages, personal messages from your account in Facebook, she promised to pay me 150 GBP (200 USD).

Yesterday I managed to hack your computer and now I have all copies of your files and messages, in 72 hours I will send this all to my client.

And, perhaps the most important: if, among all those files and messages, there is nothing that could damage your reputation or cause any other unwanted consequences for you - just ignore this email.

Otherwise, I'm sure we can agree on to keep your personal files and messages before I send them to my client. In order to do this, immediately contact me: stop_mike@Safe-mail.net

EXAMPLE2

ubject: Re: Notice

Hello, My name is Mike.

Last week one woman contacted me. She asked me to hack your computer and to make the copies of the files she might be interested in. 2 days ago, via trojan horse virus, I got an access to the files in your computer.

Thus, at present, I have got the following copies of files from your computer:
- all your digital photos
- all your text documents
- all your text messages
- all your personal messages from the websites, where you have been registered
In 72 hours I will pass them to the above mentioned woman (customer).

And the most important: If you think, that if the files will be passed to my customer and it will cause unwanted consequences, please contact me by e-mail: mike_f@atlas.cz , mike.howard-boz1ree1@yopmail.com

I am confident, we could come up to the agreement, and these copies won't be passed to my client.

Otherwise, just ignore this letter.

================================================================

Beware! Its a Cyber World - - Explanation:

Submissions indicate that versions of the above emails have been widely distributed since early February, 2011. The emails, which claim to be from an individual identified only as "Mike", warn the recipient that his or her computer has been hacked. "Mike" claims that an unnamed woman hired him to hack the recipient's computer and steal personal files. He suggests that, if the recipient does not want the stolen files to be passed on to the unidentified woman, the recipient should contact him to "come up to the agreement".

However, the claims in the email are outright lies. The email represents nothing more than a transparent ruse to trick panicked recipients into handing over their money to Internet scammers. Those who fall for the ruse and contact "Mike" will be asked to send money in order to stop him from sending the personal files to his "client".

Of course, hackers can and do gain access to people's personal files through various means such as trojan horses or phishing scams. And, so called ransomware attacks have been used by criminals in the past as a means of forcing victims to pay fees or buy products. Typically, ransomware consists of a malicious program that locks a user out of his or her computer until a fee is payed or an unwanted product purchased in exchange for a password that will restore the user's access.

However, the claims in "Mike's" emails can be dismissed as false for the following reasons.

1. Thousands of people all around the world have received identical versions of the scam emails. All claim that an unnamed woman hired the hacker to access the recipient's files. None include any details about the recipient such as a personalised greeting or a specific reference to the supposed hacking victim's individual circumstances. If "Mike" had really gained access to the user's computer, he would certainly be able to find details specific to his target and include them in the demand email. The generic, non specific nature of the scam emails is a telling indicator that the hacking claims are false.
   
2. The scam emails make no effort to specify any individual files that the hacker claims to have accessed. If the supposed attack was genuine, the hacker would most likely include proof such as a screenshot of a stolen file in his initial demand letter.
   
3. Repeated replies to "Mike" demanding that he show proof of his supposed attack by naming stolen files or sending a screenshot of one such file have so far gone unanswered. If a hacker had really stolen your files and was intent on being paid to withhold them from his "client", then he would certainly be willing to take the very simple steps necessary to prove that he really had such files.

Thus, the emails are just a rather lame attempt by a grubby little scammer to extort money from unsuspecting Internet users. Those who do comply and contact "Mike" to make an arrangement will be paying for absolutely nothing. If you receive one of these emails, the best course of action is to simply delete it.

This scam attack is quite reminiscent of other - somewhat more sinister - scams in which the scammer claims to be an assassin hired to kill the recipient. These scam emails demand that the recipient pay a specified fee in order to avert his or her pending assassination. As in the above "Mike the hacker" versions, the claims in the hitman scam emails are lies designed to trick users into sending money to Internet criminals.

Mail From United Services Automobile Association (USAA) to Update Information - - Phishing Scam to Steal The Private and Financial Information of Memebers

Beware! Its a Cyber World - - Summary:

Recently spreading email, purporting to be from United Services Automobile Association (USAA), claims that members need to follow a link to fill out a new version of the group's confirmation form.

While reading the facts over here, no need to inform you that the email is not from USAA. In fact, it is a phishing scam devised to steal private information, like many before discussed here, from USAA customers. Links in the message open a bogus webform on look-a-like website that asks users to submit personal and financial information.

Let check out the contents of the mail, which would be post-mortemed later on:



=============================================

Subject: notification from USAA

Confirmation Form

Dear USAA Customer,

We would like to inform you that we have released a new version of USAA Confirmation Form. This form is required to be completed by all USAA customers. Please use the button below in order to access the form:

Access USAA Confrmation Form

Thank you,
USAA

Screen shot of scam email:

============================================

Beware! Its a Cyber World - - Explanation:

This email, which claims to be from the United Services Automobile Association (USAA), advises USAA customers that they are required to complete a new versions of the "USAA Confirmation Form". The email instructs recipients to click a button to access the new form. The message features seemingly official USAA logos, formatting and links.

However, the email is not from the USAA. The email is a phishing scam designed to trick USAA customers into submitting personal information to Internet criminals. Those who fall for the ruse and click on the link in the scam email will be taken to a bogus website that asks them to logon to their USAA account. They will next be taken to a fake form that asks them to provide a raft of personal information, including their USAA credit card Number, pin, security code and other identity details The criminals operating the scam can collect the information submitted on the bogus website and use it to commit credit card fraud and identity theft.

USAA has posted a notice on its website warning customers about such phishing scams. The warning notes that "USAA will not ask for any personal or account information, including PINs or passwords, in an e-mail".

Phishing scams of this nature are very common and target customers of many financial institutions and service providers all around the world. Scammers use many and varied ruses to try to entice their intended victims into submitting their personal and financial information. Any unsolicited email that claims that you need to update personal information urgently by clicking a link or opening an attached file should be treated as suspicious.

Latest Employment Scam - - Attractive and Lucrative Job Offer From Hilton Hotel, London

Beware! Its a Cyber World - - Summary:

A very attractive and lucrative job offer received by many internet users via emails purporting to be from Hilton Hotels in London.

In fact, the message is a kind of employment scam designed to steal money and personal information from the recipient. The email is not from Hilton Hotels and the offered job does not exist.

 This type of mails normally arrives with a pdf file to make their trap even strong. Attached pdf file look like shown below:

Let's have a look to that very long message with lots of details and information to trap the perspective victim:

==================================================

Subject: JOB APPOINTMENT LETTER FROM HILTON HOTEL UK.

Attn: NAME REMOVED

HILTON HOTEL JOB OFFER OF THE YEAR 2010.

HILTON FAMILY HOTEL has the mandate to procure technical and expatriate labour for job placement in HILTON HOTEL UK.THE BOARD OF DIRECTORS Haven gone through the Curriculum vitae/Resume and found you qualified decided to invite you as one of the expatriates to start work as soon as possible. Please find attached here with relevant document containing the Soft Copy of your Contract Package for your perusal and approval.

JOB DESIGNATION: Waiter
START UP DATE: 08/NOVEMBER/2010
JOB REF: HHLUK/COL/672HTR
JOB LOCATION: UNITED KINGDOM, LONDON

SOFT COPY OF YOUR CONTRACT AGREEMENT
THIS is made today between HILTON HOTEL LONDON of the 1st party and you as a 2nd party.
For good consideration, HILTON HOTEL LONDON Employs there Employee on the following terms and conditions.

Hilton London Heathrow Airport

Hilton London Metropole Hotel

225 Edgware Road, London, Greater London, W2 1JU

SOFT COPY OF JOB OFFER DOCUMENT
SEASONAL JOB OFFER 2009/2010
EXECUTIVE SUMMAR

We have in file, your Resume submitted to us by our labour consultant and after the evaluation of these documents we found you qualified to work for us.

Hence, Hilton Family, United Kingdom, seek to employ your services as a professional for the provision of professional services as stipulated in the following acts in this document. This document embodies the approved terms for the purpose of this job offer.

DURATION: FIVE YEARS (Renewable)
START-UP DATE: . FLEXIBLE
JOB REF: : HHLUK/COL/672HTR
JOB LOCATION: . LONDON, UNITED KINGDOM

1.0 CONSULTING PERSONNEL

You shall be expected to work with the Hilton Family team with the mandate to provide excellent . services.

2.0 JOB COMMENCEMENT/ LOCATION

The work Environment will be within the work metropolis of THE HILTON FAMILY. You are to report immediately to the Human Resource Manager (ROBERT KEN) upon arrival to conclude prospects of orientation and other logistics.

3.0 SALARY INDICATION

YOU WILL BE ELIGIBLE TO RECEIVE £ 1200 GBP (ONE THOUSAUND TWO HUNDRED POUNDS) -Basic (Tax Exclusive) WEEKLY.

4.0 ALLOWANCES/ ENTITLEMENTS

Hazard/Inconveniences: £600 .00 (Monthly)
Car Maintenance: £200.00 (Monthly)
House & Furnishings: £2,000 (Yearly)
Entertainment & Recreation: £250.00 (Monthly)
Travel & Events: £550.00 (Monthly):

5.0 PAID LEAVE PERIOD/ TRAVEL

* You are entitled to 2months Paid Leave which can be taken once at a time or 2weeks apart from one different period.

* You will receive 6000.00 Take home for each leave Period.

* Employer for each Inter-continental trip shall pay 550.00 flat rate travel/entertainment allowance to employee. Travel shall be by business class/first class.

* Employer shall also take care of employees' travel ticket including that of employees' family only on employee's early notification to employer and as shall be requested by Employee.

6.0 EXPENSES BEFORE TRAVEL BY EMPLOYEES

Expenses made/incurred by the employee related to job before commencement of duties or expenses made during Travel Plans, Processing of Travel Particulars (Police clearance certificate) will be substantiated with receipts and Employer will reimburse the Employee not later than Five(5) working days after submission of Employee's expense Report and Receipts as proofs of such Expenses.(after one week of arrival to job location)

We however reimburse fully all Travel costs and Expenses made by Employee.

On no account will Employer accept to shoulder costs for Travel Expenses, procuring of police clearance certificate of Employee before Work sign-on. This is to possibly evade losses that may be accrued to Employer should Employee decide to decline Job offer after certain Expenses must have been made by Employer.

This agreement hereby binds Employer and Employee in that re-imbursements will be made fully to Employees upon presentation of Expense Reports and Receipts of Expenses.

The first one month benefit shall be paid in advance before a week orientation Program i.e before any employee of (HILTON FAMILY HOTEL’S) come down to his/her duty post officially, this is to enable any Hilton Staff settle all domestic needs on arrival. As such no excuses will be entertained on assumption of duty relating to default.

Payment of one month benefit is also geared towards making sure that all employees has enough money in his/her Bank account as the United Kingdom Expatriates Financial Statutory Law would demand (UKEFSL)

7.0 SAFETY & SECURITY

Safety and Security (Local/Foreign) and Facilities on Job Locations and communities are no small issues, and have been seriously considered to ensure and assure hitch free operations, all workers are entitled to security both at work locations & Residential Quarters All operations on Job Location are designed to adhere strictly to the Health Safety and Environment (HSE) Policy.

You are entitled to a free and mandatory safety course on Job Locations to be delivered by qualified safety and environment experts.

8.0 FEEDING & ACCOMODATION

Newly recruited staff of Hilton Family (Like You) will reside at the company's Staff estate. There are Single Bed-room and Flat options to choose from. You shall eat at the staff canteen free of charge as there are dietary options for vegetarians and non vegetarians.

9.0 MEDICAL EXPENSES

We will provide you with comprehensive Health care and Medical check up. During the one month training program, the employee will undergo series of medical test Such as HIV test, Malaria test and Tuberculosis.

10.0 OFFICE ASSETS TO BE PROVIDED BY EMPLOYER

Computer resources: Laptop Computer, 1.6 GHz Processor, 256 MB RAM, 24XCD-RW, 30GB Hard Drive, Floppy Drive, Integrated Network Adapter, Internal 56K Modem, Spare Battery and Necessary Software. Full time Internet access is also made available.

Phones: Employer will provide each employee with one (1) landline and one (1) mobile telephone. This shall have a reasonable credit limit application per month.

EMPLOYMENT TERMS

All UK employer's employing expatriate have been tasked by the UK government to make sure that all prospective employee pass through the UK Association of Chief Police Officers (ACRO) criminal records Office and secure police clearance paper that the employee will not be involved in any kind of crime within the time span the employee will remain in UK. Before employer makes the employee's residence and work permit / Visa application, the employee must have the police clearance certificate from the UK Association of Chief Police Officers (ACRO) criminal records Office, for any residence and work permit / Visa application without a police clearance certificate will not be granted. See below one of the accredited travel agncy whom you need to contact via email to secure your police clearance certificate from the UK Association of Chief Police Officers (ACRO) criminal records Office:

CONTACT DETAILS:

Barr. Collins Smith

[Name removed] Travel Ltd
[contact details removed]
Ashford, Kent, TN24 8TQ
E-mail: removed@live.co.uk

Once you have been cleared by the UK Association of Chief Police Officers (ACRO) criminal records Office and issued with the necessary police clearance paper from the UK Association of Chief Police Officers (ACRO) criminal records Office, you are required to send to us via e-mail scanned copies of the following documents which will aid us procure your residence and work permit / Visa from the Isle of Man Home Affair Office:

1. Scan copy of your UK Association of Chief Police Officers (ACRO) criminal records Office Police Clearance certificate

2. Scan copy of your duly Signed Job Offer Letter (Enclosures: 6 below)

3. Scanned Copy of International Passport (Data Page)

4. Scanned Copy of Passport Photograph (Colored) Upon receipt of the above mentioned documents from your side Hilton Family will secure your residence and work permit here in UK and will contact the UK Consulate in your place of Residence and fax all your documents to them to facilitate your Visa.

Note: Any fee payable to the Association of Chief Police Officers for your police clearance is completely your responsibility and we will reimburse this amount back to you the moment we complete securing your Residence and Work permit / Visa from the UK Home Affairs Office; the police clearance document should be submitted to us within one week for speedy processing of your Residence And Work Permit / Visa.


Within a space of 7 working days your papers were faxed to the UK consulate we shall notify you on when to go to the UK Consulate Office in your country of residence for the endorsement of your international passport with your five (5) years (UK) Visa permit. NOTE: You’ll not pay for visa fee, as we shall do that on the process of applying for your visa through the UK Consulate in your country of residence. I understand that I may voluntarily terminate my employment, I further understand that I will not be terminated involuntarily at will, rather it will be with cause or prior notice, at any time, regarding of documents or oral or written issued by Hilton Family or its representatives. With this understanding, I accept the position with the terms as stated above.

Kind Regards,
ROBERT KEN
Human Resources Manager

[Contact details removed]

ENSURE THAT YOU READ AND UNDERSTOOD THE TERMS AND CONDITION. BEFORE SIGNING THIS AGREEMENT WITH TH HILTON FAMILY UK.

I ACCEPT THE OFFER:

. .......................................... ..........................................

SIGNATURE DATE

I DECLINE THE OFFER:

. .......................................... ..........................................

SIGNATURE DATE 

 ============================================

Beware! Its a Cyber World - - Explanation:

This email which claims to be from the UK branch of high profile hotel chain Hilton, offers the recipient a position as a waiter at one of the company's hotels in London. The message describes a lucrative payment, relocation and accommodation package that will be available to the recipient if he or she decides to accept the position. The would-be worker is instructed to contact a specified "travel agent" to arrange the procurement of a police clearance certificate and send copies of his or her passport and other documents to the company's Human Resources Manager.

However, the email is not from Hilton Hotels or any of its affiliates. The promised job is in fact nothing more than the bait used to entice victims into sending money and sensitive personal information to Internet criminals. Those who accept the "job" will be asked to send fees, supposedly to cover the cost of procuring a "police clearance certificate" along with travel costs and other imaginary expenses. The "job offer" promises that all such expenses will be reimbursed as soon as the applicant takes up the position. However, it makes very clear in the offer document that under no circumstances will the company pay these fees upfront.

Unfortunately, those who fall for the ruse and send the requested fees will be left out of pocket. The promised job does not exist and the victim will certainly not be reimbursed for any money he or she sends to these scammers. Money sent will go straight into the pockets of the criminals operating the scam and the victim is very unlikely to ever have it returned, even if the scam is later reported to authorities.

Moreover, victims who comply with the scammer's requests and apply for the bogus job as instructed may also open themselves up to identity theft. The scam "job application" asks victims to send scanned copies of passports and passport photos as well as signatures. During the course of the scam, victims may be asked to provide even more personal and financial information. The scammers may ultimately collect enough private information to enable them to steal their victim's identity.

The scam message comes in the form of a "covering letter" email with an attached .pdf that contains information about the supposed job. The scammers have rather lamely attempted to make their claims seem more credible by using what they obviously believe is official and legal sounding words and phrasing along with Hilton hotel logos. In fact, the result is a very unprofessionally formatted document filled with spelling and grammatical errors.

Internet user should be very cautious of any unsolicited job offers like the one described here. A similar scam claims that Hilton Hotels in New York is the group offering the job. Other job scams falsely claim to be from a variety of other high profile companies around the world. Such job scams are just variations of typical advance fees scams such as Employment Scams and lottery scams. Any offer that asks you to pay upfront fees in order to get a job, receive access to funds in an overseas bank account or claim a lottery win should be treated as suspect. 

Social Networks Vulnerability - - Hacked Facebook Accounts and Ultimate Balckmailing of Victims

 

 Let this serve as a cautionary tale about the perils of social networking in particular and keeping racy photos of yourself in general. Oh wait, should it be the other way around? We’re confused. Never mind. Just read on.

Last Friday California police arrested George Samuel Bronck, an unemployed 23 year-old hacker who broke into his victims’ email accounts to retrieve x-rated/compromising pics of them. He then posted the offending material on their Facebook pages (76 so far), wreaking much havoc and loss of face. One distraught victim was sensible enough to notify the police, who traced Bronck thru an IP address. Child porn has since been found on his hard drive.

The details that surfaced regarding Bronck’s modus reveals an unsophisticated method that once more puts the spotlight on the whole how-much-personal-info-should-be-on-Facebook issue. What he did was change his victims passwords by reading their profiles for personal info. Since Yahoo and Gmail accounts use pre-answered questions for password changes, a lot of educated guesses and persistence allowed him to access the email accounts of 2,300 women. The man was on a perverted mission, you might say.

Click on the source link for extra reportage because we’ve kinda made a point here:Always Beware! Because Its a Cyber World.

Source: Switched

Another Charity Hoax - - 15 Cents to Donate Dell Hospital Expenses of Maria, 5-Years Old Girl Raped Brutally

Beware! Its a Cyber World - - Summary:

Facebook message, circulating wildly, claims that Dell Hospital will donate 15 cents to help pay medical expenses for five year old Maria who is in hospital after being brutally raped by a man who has AIDS.

What's the reality..?? In fact, the claims in the message are utter nonsense. Neither Dell Hospital nor any other organization will donate money to help a sick or injured child when a particular message is forwarded or reposted. All such claims are false. This message is just one more in a long series of absurd hoaxes that claim that a child will receive donations when a message is sent on.

Let's have a look to the contents of the message:

===========================================

This guy raped a five year old little girl. He ruined her life, she is alive & in the hospital can’t move and can never have children, or a normal life. This guy goes by different names he is in hiding & has AIDS. The girl came out positive. Please help us catch this animal. Every time this message is fwd the Dell Hospital will donate $.15 to Maria’s medication & treatment. Please don’t hesitate to fwd this. It could’ve been you’re daughter or sister. God bless. Thank you!. Forward this to as many people as you can.


==============================================

Beware! Its a Cyber World - - Explanation:

According to this message, which circulates via text, email and social networking websites such as Facebook, you can help five year old rape victim Maria simply by forwarding or reposting the information. The message claims that Maria is in hospital with serious injuries and illness after being brutally raped by a man who has AIDS. It further claims that Dell Hospital will donate 15 cents to help pay Maria's medical expenses every time the message is forwarded to another person.

However, the claims in the message are nonsense and have no basis in fact whatsoever. No sick or injured child will receive donations just because an absurd message is forwarded or reposted. Dell Children's Medical Center has denied the claims in an alert published on its website, noting:

ALERT: SPAM Text Message Makes False Claim

A false text message has been circulating that describes an incident involving a 5-year old girl. The message states that every time you forward it to someone, Dell Children's Medical Center will donate 15 cents to cover the child's healthcare expenses. This message is spam and is in no way affiliated with Dell Children's Medical Center or the Seton Family of Hospitals. If you receive this message, please delete it.

In fact this message is just one more in a long and sorry line of similar hoaxes that claim that a sick or injured child will receive donations whenever a particular email, SMS or social networking post is sent on. Any such claim is certain to be false. No legitimate charity, company or individual is ever likely to agree to participate in an utterly ridiculous fund-raising campaign that is based on the random and uncontrolled forwarding of a particular message.

And, even if some foolish and misguided organization did agree to participate in such an absurd scheme, there would be no accurate and reliable way of tracking how many times the charity message was actually sent on, and, therefore no viable method of calculating how much money was to be donated. For example, in this case, the charity message started as a mobile phone text, then quickly moved on to email, then Facebook and beyond. Clearly, it would be impossible to keep track of a message that might be sent on hundreds of thousands of times in several different message formats.

There are no credible reports that describe the particular incident outlined in the hoax message. It is likely that the story was simply made up by the malicious prankster who created the hoax. To make matters worse, some versions of the message circulate with a photograph of a heavily tattooed man who is identified as the rapist. Thus, the person in the photograph is being falsely labelled as a child rapist. Moreover, an earlier version of the hoax included a photograph of a completely different person. Such misidentifications could have a very serious and long-lasting impact on the reputations of innocent people and even put them in danger of attack from angry people intent on revenge.

A simple rule of thumb.

Any message in any format that claims that money will be donated just for forwarding is certain to be a hoax and should not be sent on.

You can rest assured that forwarding such hoax messages will help nobody, least of all a sick or injured child. In fact, such messages may actually be harmful in that they waste the valuable time and resources of charitable or health organizations who find themselves obligated to respond to the claims in these hoaxes. As, noted above, they may also unfairly damage the reputation of innocent people or compromise their safety. If you receive such a hoax message, please do not forward it to others. And please let the sender know that the message is a hoax.

Email Video and Photographs Showing Iceberg Appears on the Ocean Near Cape Town, South Africa - - Reality or Imagination ..??

Beware! Its a Cyber World - - Summary:

Electronically circulating photographs and videos purportedly depict an iceberg floating in the ocean near Cape Town, South Africa.

In fact, the videos and photographs do not depict a genuine iceberg in Cape Town. The shown Cape Town iceberg is in fact part of a viral marketing campaign for South African based fruit beverage maker Liqui-Fruit.

Photographs and video are shown as below:

==============================================

Subject: FW: Iceberg spotted in Cape Town!! Global warming?

This must be the first time ever that an Iceberg was spotted in Cape Town South Africa











===============================================

Beware! Its a Cyber World - - Explanation:

Circulating photographs and videos that appear to show an iceberg off shore at Cape Town, South Africa have generated quite a buzz online. Of course, the arrival of an iceberg in that particular part of the world would certainly be a newsworthy event.

However, the truth is less intriguing. The images and video are in fact part of a viral advertising campaign created for South African based fruit beverage maker Liqui-Fruit. The campaign, part of Liqui-Fruit's Summer Meltdown promotion, was created by South African ad agency, Liquorice. An article about the campaign on the Memeburn website explains:

In fact, it was all CGI-footage and there never was any real iceberg off Clifton.

The campaign was launched by Liqui-Fruit as part of their “Summer Meltdown” which will see 100 activation points all over the country, in the form of icebergs, where people can gather, take pictures of themselves, win prizes and generally be part of the Liqui-Fruit lifestyle.

Details of the full marketing campaign remain vague at this point, which is probably due to the fact that the brand was hoping to keep it mysterious for a little while longer, while they worked on the plan.

The videos and images of the "iceberg" were apparently intended to generate interest and discussion before the release of the full ad, which can be viewed in the following Youtube video:




In recent years, a number of companies have used the "viral video" method to effectively - and inexpensively - promote their products and services. Earlier in 2010, a widely circulated video supposedly showing the new sport of Liquid Mountaineering turned out to be a viral ad for footwear company Hi-Tec. In 2009, another viral video supposedly showing a man rocketing down a giant water slide was later revealed to be an advertising campaign for a Microsoft product. And, in 2008, another famous viral video that appeared to show corn being popped by the radiation from mobile phones was in fact a clever ad for Bluetooth headsets.

Fake Pedophile Warning - - Harry Graham: Another Victim of Rumour on The Facebook

Beware! Its a Cyber World - - Summary:

Earlier few Facebook related rumours have been discussed here. Once again Social network message warns that a 48 year old pedophile named Harry Graham is posing as a 14 year old on Facebook in order to make contact with children.

Like before this is yet another version of a series of totally unsubstantiated and damaging rumours that claim that pedophiles are attempting to contact children via Facebook. While this version names a person called Harry Graham, other versions have used the names of other men. There is no credible evidence to back up the claims in these messages. Spreading scurrilous and unfounded rumours such as this can unfairly damage the reputation of innocent people. This bogus warning is without merit and should not be re-posted.


===============================================

There is someone called harry graham friend requesting kids on facebook at the moment, posing as a 14yr old when actually he is a 48yr old peadophile. He is known 2 the police. Please be aware and tell everyone u know. We must keep our kids safe - please copy and paste



===============================================

Beware! Its a Cyber World - - Explanation:

According to this "warning" message, which is circulating rapidly around social networking website Facebook, a 48 year old pedophile by the name of Harry Graham is posing as a 14 year old on the network in order to befriend children. The message claims that the man is "known to police" and asks that users pass on the message to help protect children.

However, the supposed "warning" is nothing more than an unsubstantiated rumour. There are no credible reports of any kind that back up the claims in the message. Other than the name "Harry Graham", this "warning" does not provide any information whatsoever that might identify this supposed sexual deviant or his current whereabouts. A great many people around the world share the name "Harry Graham". Thus, even if one person somewhere with that name did do something wrong, spreading such a message is likely to achieve nothing other than unfairly damage the reputation of completely innocent individuals that are unfortunate enough to share the same name.

This "Harry Graham" rumour is just yet another variant in a series of recent - and equally unfounded - pedophile warnings. In September 2010, a similar warning began circulating that accused a man named Thierry Mairot of attempting to contact children on Facebook to talk about sex. A later clone of the "warning" changed the name of the accused to one Thomas Cowling.

The Internet makes it very easy for faceless cowards to make unfounded accusations against others, while remaining anonymous. They may never be required to justify their accusations in any way. If malicious individuals want to discredit, embarrass or annoy someone, or indeed destroy his or her reputation, all they may have to do is create a damaging rumour and post it on Facebook or other social networks.

And even a hint of paedophilia or perversion is often enough to raise great ire and concern among parents and others who care for children. Thus, such accusations, even if totally unfounded can be a very powerful weapon when wielded by unscrupulous individuals or groups intent on character assassination. Once started, rumours like this can take on a life of their own. Even if the original accuser belatedly learns that his or accusations were wrong, it may well be impossible to stop the further spread of the rumour as it continues its destructive journey.

Thus, it is totally irresponsible to post on baseless accusations such as this. In fact, the act of reposting such potentially destructive messages without compelling and verifiable evidence to substantiate their claims is immoral and unethical. Even if someone else started such a rumour, Facebook users need to take responsibility for what they post. Virtually any social network user is potentially vulnerable to attack from gutless cowards such as those that create these rumours.

Of course, it is vitally important to keep our children safe online. However, passing on baseless rumours will do zilch and zero to help protect children. Destroying someones reputation by passing on nonsense warnings is certainly not going to help keep our kids safe online. A much more productive method is simply to closely - and continually - monitor the online activities of our vulnerable children. Better still, don't let young children use adult social networks like Facebook at all.

Employment Scam - -"VACANCY FOR ACCOUNT MANAGER" From Rig Groups Construction Company Ghana

Beware! Its a Cyber World - - Summary:

Today I want to share a recent email I received today that can be categorized as "Employment Scam". The mail is from 'Rig Groups Construction Company Ghana' without my formal application.

The mail is being copied below as it is; so that every reader of mine should be aware of the recent strategy of cybercriminals.

===============================================

From: Mr William Mensah (recruit1@wb-constructioncompany.net)
Sent: Thu, October 21, 2010 2:11:59 PM
Subject: VACANCY FOR ACCOUNT MANAGER


Immediate Vacancy for a qualified and experienced person in Accounting work is highly needed in Rig Groups Construction Company Ghana,as mentioned below


ACCOUNT MANAGER

RESPONSIBILITIES: • Reporting to the Managing Director, the incumbent shall be responsible for the company’s financial statements and the overall performance of the Finance and Accounts Dept • The candidate shall assume the responsibilities for systematic review of all areas of revenue and internal control procedures, policies and physical arrangements and be responsible for establishing and maintaining strategic and effective revenue control measures for the organization

Please interested candidates should forward their CV to ENGR WILLIAM MENSAH of Rig Groups Construction Ltd Ghana.

EMAIL: recruitment@riggroups.com

Regards,
Mr William Mensah
Recruiting Manager


Please interested candidates should forward their CV to ENGR WILLIAM MENSAH

EMAIL: recruitment@riggroups.com

==============================================

Beware! Its a Cyber World - - Explanation:

When I searched Rig Groups on Google search I found many scams and frauds relating to this group regarding Employment offers and processing advances. For example:

1. HELLO SIR, ON 12TH MAY I HAVE RECIEVED MAIL FROM
   RIG GROUP CONSTRUCTION COAMPANY & THEN I GOT APPOINTMENT LETTER TO JOINT AT 7 JUNE
   Office Location:
   No. N108/2 Rolings Ave, Greater Accra, Accra, Ghana.
   Telephone: +233-545-247-275, +233-547-477-776
   Fax: +233-214-359-555,
   GIVING ME OFFER TO JOIN THEIR COMPANY WITH SALARY OF 13400USD PER MAONTH.
   BEFORE VISA APPLICATION FOR GHANA THEY HAVE ASKED ME TO REGISTER WITH ASSICATION OF GHANAIAN ENGINEERS . ON INTERNET I HAVE SEARCHED FOR THIS, BUT I HAVE FOUND NOTHING RELATED TO THIS ASSOCIATION . AND HE SEND A.G.E. MEMBERSHIP LETTER AT GHANA, AND HE WANT MONEY,
   REGISTRATION FEE: USD300
   SERVICE FEES: USD220
   TOTAL AMOUNT: USD520
   SO I REQUIEST TO U, PLEASE TELL ME A TRUTH
   SO I M REQUESTING TO U TO FIND TRUTH AND SAVE LIFE OF MANY MORE LIKE ME.PLEASE REPLY SOON.

Source: Consumer Complaints

You can find many of such complaints and mails which are clearly showing what kind of scam it is! My advice is just "Beware! It's a Cyber World." If cybercriminals can take advantage of internet technology; then internet users should also aware of the ways to protect themselves from such criminal acts.