Feeds

Money mule scam offers CAPTCHA-protected malware

Small biz owners targeted by 2in1 scam

Beginner's guide to SSL certificates

Fraudsters are seeking to hoodwink small business owners into signing up as money mules.

The splendidly named Megatech Service Ltd is seeking "Tier 2" payment processing agents from the ranks of small business owners, their partners, or anyone who otherwise has access to a small business banking account. Would-be marks are promised they will be handling larger transactions, and therefore have much higher weekly earnings, than run-of-mill mules processing agents.

Earning an extra $1,500 or more per month might seem like a useful source of secondary income to hard-pressed businesses. Unfortunately the work on offer would be illegal, namely funneling money from compromised bank accounts in the US to fraudsters overseas, probably somewhere in Eastern Europe.

And, as net security firm Bluecoat notes, those who respond to the ad expose themselves to both fraud and malware.

Would-be applicants are asked to complete an online psychometric test, which actually offers Windows-based malware. Before marks can get their hands on this malicious software they are confronted with what would appear to be a CAPTCHA. However the challenge is not a genuine Turing test, because the download is then initiated irrespective of whether the surfer correctly responds to the supposed test or types in any old garbage, Blue Coat reports. The security company adds that in reality the supposed-CAPTCHA is purely there to add a veneer of legitimacy to the scam site.

Even if you don't encounter malware (Mac users are taken via a different sign-up route and not targeted for infection) having anything to do with Megatech Service Ltd – especially if this involves handing over business bank account details – is a very bad idea, Blue Coat warns.

"Needless to say, giving an external entity like this access to your business/corporate bank account is a very unwise thing to do," the security company warns, "especially since business bank accounts typically do not have the same fraud protections associated with traditional consumer accounts." ®

Choosing a cloud hosting partner with confidence

More from The Register

next story
MI6 oversight report on Lee Rigby murder: US web giants offer 'safe haven for TERRORISM'
PM urged to 'prioritise issue' after Facebook hindsight find
Assange™ slumps back on Ecuador's sofa after detention appeal binned
Swedish court rules there's 'great risk' WikiLeaker will dodge prosecution
NSA mass spying reform KILLED by US Senators
Democrats needed just TWO more votes to keep alive bill reining in some surveillance
'Internet Freedom Panel' to keep web overlord ICANN out of Russian hands – new proposal
Come back with our internet! cries Republican drawing up bill
prev story

Whitepapers

Why and how to choose the right cloud vendor
The benefits of cloud-based storage in your processes. Eliminate onsite, disk-based backup and archiving in favor of cloud-based data protection.
Forging a new future with identity relationship management
Learn about ForgeRock's next generation IRM platform and how it is designed to empower CEOS's and enterprises to engage with consumers.
Driving business with continuous operational intelligence
Introducing an innovative approach offered by ExtraHop for producing continuous operational intelligence.
10 threats to successful enterprise endpoint backup
10 threats to a successful backup including issues with BYOD, slow backups and ineffective security.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?