Feeds

Money mule scam offers CAPTCHA-protected malware

Small biz owners targeted by 2in1 scam

Beginner's guide to SSL certificates

Fraudsters are seeking to hoodwink small business owners into signing up as money mules.

The splendidly named Megatech Service Ltd is seeking "Tier 2" payment processing agents from the ranks of small business owners, their partners, or anyone who otherwise has access to a small business banking account. Would-be marks are promised they will be handling larger transactions, and therefore have much higher weekly earnings, than run-of-mill mules processing agents.

Earning an extra $1,500 or more per month might seem like a useful source of secondary income to hard-pressed businesses. Unfortunately the work on offer would be illegal, namely funneling money from compromised bank accounts in the US to fraudsters overseas, probably somewhere in Eastern Europe.

And, as net security firm Bluecoat notes, those who respond to the ad expose themselves to both fraud and malware.

Would-be applicants are asked to complete an online psychometric test, which actually offers Windows-based malware. Before marks can get their hands on this malicious software they are confronted with what would appear to be a CAPTCHA. However the challenge is not a genuine Turing test, because the download is then initiated irrespective of whether the surfer correctly responds to the supposed test or types in any old garbage, Blue Coat reports. The security company adds that in reality the supposed-CAPTCHA is purely there to add a veneer of legitimacy to the scam site.

Even if you don't encounter malware (Mac users are taken via a different sign-up route and not targeted for infection) having anything to do with Megatech Service Ltd – especially if this involves handing over business bank account details – is a very bad idea, Blue Coat warns.

"Needless to say, giving an external entity like this access to your business/corporate bank account is a very unwise thing to do," the security company warns, "especially since business bank accounts typically do not have the same fraud protections associated with traditional consumer accounts." ®

Top 5 reasons to deploy VMware with Tegile

More from The Register

next story
BIG FAT Lies: Porky Pies about obesity
What really shortens lives? Reading this sort of crap in the papers
Assange™ slumps back on Ecuador's sofa after detention appeal binned
Swedish court rules there's 'great risk' WikiLeaker will dodge prosecution
You think the CLOUD's insecure? It's BETTER than UK.GOV's DATA CENTRES
We don't even know where some of them ARE – Maude
prev story

Whitepapers

Why and how to choose the right cloud vendor
The benefits of cloud-based storage in your processes. Eliminate onsite, disk-based backup and archiving in favor of cloud-based data protection.
Getting started with customer-focused identity management
Learn why identity is a fundamental requirement to digital growth, and how without it there is no way to identify and engage customers in a meaningful way.
10 threats to successful enterprise endpoint backup
10 threats to a successful backup including issues with BYOD, slow backups and ineffective security.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?
The hidden costs of self-signed SSL certificates
Exploring the true TCO for self-signed SSL certificates, including a side-by-side comparison of a self-signed architecture versus working with a third-party SSL vendor.