Share

Related Links

Related Stories

  • Zeus trojan disguises itself as the tax man
    A recent attack by the Zeus trojan virus used an email and a legitimate Internal Revenue Service (IRS) website to trick users into providing sensitive tax information to cybercriminals.
  • Zeus is king of bank fraud trojan viruses
    Just like the Greek god that is its namesake, Zeus is the king of bank fraud trojan viruses, having been used by thousands of criminals to scam perhaps hundreds of millions of dollars from banking customers around the world for years. The recent busts of Zeus fraudsters in the US and the UK are just the tip of a vast underground of fraud and deception, according to information security analysts consulted by Infosecurity.
  • LinkedIn users targeted by ZeuS-based fake connection requests
    Hard on the heels of the spate of Twitter attacks comes news that LinkedIn members are being targeted by carefully crafted fake connection requests that route users to the ZeuS data-downloading malware.
  • New Zeus campaign uses FedEx notice scam
    Security firm McAfee has alerted the online community to a new Zeus botnet attack using bogus FedEx notification emails.
  • Trusteer detects rapid spread of new polymorphic Zeus trojan
    Trusteer says it has detected a completely new version of the Zeus password stealing trojan that has been designed to steal online banking credentials.

Top 5 Stories

News

Money mules recruit for Zeus botnet through bogus job ads

28 October 2010

Money mules are recruiting unsuspecting victims for the Zeus botnet criminal network through bogus job postings, warned Sunnyvale, Calif.-based network security provider Fortinet.

Money mules, who launder money obtained through the Zeus criminal network, are recruited through legitimate-looking job advertisements, such as “payment processing agent”, “money transfer agent”, and “administrative representative”, the Fortinet warned in its October 2010 Threat Landscape report.

A recent money mule recruitment email that Fortinet discovered began the subject line with "Re: CV". The body of the email offered the recipient an "administrative representative" position for a proposed salary of €5,000 per month plus commission. One of the listed job duties was to "administer day-to-day financial responsibilities for clients", as well as prepare weekly financial reports.

"The majority of opportunities we're seeing today offer prospects roughly 10% commission for any transfers they make. With a few simple clicks, a $10,000 transfer could net the mule roughly $1,000", said Derek Manky, project manager for cybersecurity and threat research at Fortinet.

Fortinet offers the following advice to avoid becoming a money mule: be wary of job opportunities that promise great rewards with little or no work experience; watch out for vague or unclear job descriptions, do not agree to do work that involves money transfers from overseas, and do not provide personal information such as bank a account number.

In addition, the report provides various information security statistics. For example, the US ranks number one in the volume of distinct malware reported in October, with 42%. Distinct malware volume indicates the amount of unique virus names (variants) that has been detected in a given region, as opposed to total malware volume, which indicates the accumulated amount of all reported incidents. Japan ranks second with 40.1%, followed by France with 26%, India with 16.1%, and China with 15%.

This article is featured in:
Internet and Network Security • IT Forensics • Malware and Hardware Security

 

Comment on this article

You must be registered and logged in to leave a comment about this article.