Feeds

Sophisticated parcel mule scam unpicked

Middlemen stung by work-from-home scam

  • alert
  • submit to reddit

Internet Security Threat Report 2014

Details of a sophisticated re-shipping scam that tricked US residents into working as freight-forwarding middlemen for eastern European crooks, have been exposed by security researchers at RSA.

The web-based fraudulent operation received applications from around 1,900 people, hiring 33 marks to take delivery of high-value goods purchased with stolen credit cards and forward them to a warehouse in Latvia. Electronic goods such as iPhones, Sony PlayStation 3 consoles and laptops were among the items dispatched. More than $36,000 worth of merchandise was shipped out every month as part of the scam, which lasted around a year.

These items were purchased in the US by fraudsters, dispatched through middle-men not involved with the purchase and sent to eastern Europe, where the masterminds behind the scam sold the goods. RSA reckons that few if any of the parcel mules ever got paid. Carders, who made the purchases, and fraudsters, who ran the scheme, split the money 30/70, it reckons.

The scam hid behind the professionally designed and maintained website of an operation calling itself Air Parcel Express. The same name is used by a legitimate firm based in Miami, which is completely unassociated with the fraudulent operation.

RSA said the sophistication of the fraudulent website established by the crooks marks it out from other previous parcel mule scams. "The professional investment in recruitment created a perception of legitimacy," Sean Brady, product marketing manager of identity protection and verification at RSA, told El Reg.

Security researchers at RSA Anti-Fraud Command Centre came across the scam during their daily work in shutting down phishing and Trojan-related attacks on behalf of customers.

The security firm circulates its findings to a network of law enforcement agencies on a regular basis. The site that was central to the scheme has been taken offline. It's unclear if any arrests have been made.

More details on the Air Parcel Express scam can be found here.

The emergence of similarly sophisticated scams is likely, especially in the current tough economic climate when many are desperate for work. Tips on spotting such scams can be found on the website of the Privacy Rights Clearinghouse here and US Federal Trade Commission here. ®

Internet Security Threat Report 2014

More from The Register

next story
George Clooney, WikiLeaks' lawyer wife hand out burner phones to wedding guests
Day 4: 'News'-papers STILL rammed with Clooney nuptials
Shellshock: 'Larger scale attack' on its way, warn securo-bods
Not just web servers under threat - though TENS of THOUSANDS have been hit
Apple's new iPhone 6 vulnerable to last year's TouchID fingerprint hack
But unsophisticated thieves need not attempt this trick
PEAK IPV4? Global IPv6 traffic is growing, DDoS dying, says Akamai
First time the cache network has seen drop in use of 32-bit-wide IP addresses
Oracle SHELLSHOCKER - data titan lists unpatchables
Database kingpin lists 32 products that can't be patched (yet) as GNU fixes second vuln
Researchers tell black hats: 'YOU'RE SOOO PREDICTABLE'
Want to register that domain? We're way ahead of you.
Stunned by Shellshock Bash bug? Patch all you can – or be punished
UK data watchdog rolls up its sleeves, polishes truncheon
prev story

Whitepapers

Forging a new future with identity relationship management
Learn about ForgeRock's next generation IRM platform and how it is designed to empower CEOS's and enterprises to engage with consumers.
Storage capacity and performance optimization at Mizuno USA
Mizuno USA turn to Tegile storage technology to solve both their SAN and backup issues.
The next step in data security
With recent increased privacy concerns and computers becoming more powerful, the chance of hackers being able to crack smaller-sized RSA keys increases.
Security for virtualized datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.
A strategic approach to identity relationship management
ForgeRock commissioned Forrester to evaluate companies’ IAM practices and requirements when it comes to customer-facing scenarios versus employee-facing ones.