MGD
Premium,MVM
join:2002-07-31
Fort Lauderdale, FL
4 edits | reply to MGD
Re: Ebook websites, fraud charges, Devbill/DigitalAge/Pluto
Clearly these organized criminal scum are now leveraging the current global economic crisis by aggressively targeting those now looking online for available jobs.
Within the past few days another C&C recruiting and associated hijacked card fraud laundering operation was uncovered, and you can see where the crime syndicate's focus is.
Though all of these are new themes, the analysis of this group reveals that they are using similar tactics as was used in the Globus / Photo / Picture division. Thanks again to music man  and mae_aa419 for their behind the scenes work in uncovering components of this operation.
There have not been too many days where one can slap hi fives around when combating this global organized crime syndicate. However, with respect to this group of card fraud charging and laundering, there was reason to celebrate. Many thanks to the quick work from within the financial system. As soon as this group was uncovered via a joint operation, these merchant and related bank accounts were frozen within hours. Though several of these entities were already processing fraud charges, the accounts were cut off before any fraudulent proceeds could be wired out of the country, an excellant feat. The criminals were suprised, and appeared a tad upset. All the work and time recruiting and cultivating the cyber-mules. Setting up the LLCs & DBA, bank and merchant accounts. Then processing layers of card data which they hijacked and licking their lips at the pending cash fraud haul. Now they wake up, and little by little, they find out it is all under ice ..... out of reach.
The organized crime syndicate's fraudulent recruiting operation seeking to dupe and recruit cyber-mules:
Neu Commerz GMBH aka NEUCOMMERZ.COM »www.neucommerz.com
Contact details
Phone number: +45 65 74 23 48
E-mail: info@neucommerz.com
Address: Degnestavnen 12, st. th. Copenhagen
2400 NV Denmark
Office hours: 10:00-19:00 Monday - Friday
Neu Commerz GMBH aka NEUCOMMERZ.COM is a fraud operated by Russian cyber criminals. Neu Commerz is used to try and recruit cyber-mules to set fake front websites businesses. The LLCs / Corps set up by these duped cyber-mules will be used exclusively to commit major crimes. They will launder credit data which they have hacked from within the financial system, and convert it into cash. The cyber-mules function is to then wire the fraud laundering proceeds out of the country to foreign banks.
The entire website Neu Commerz GMBH aka NEUCOMMERZ.COM is fake, all false, designed to lure victims into participating in a global organized cybercrime operation.
this is all made up, false:
quote:
Neu Commerz GMBH is a dynamic Danish company providing a range of intermediary and consulting services to on-line corporate entities in the field of international business management and organization.
The practice began in February 2002 under the direction of Gerritt Christensen the founder and president of Neu Commerz GMBH. Back in 1999, when Mr. Christensen was working for Foreign Exchange Division at Department of Trade and Economic Cooperation of Hundested municipality, he came up with the idea of a company that would help businesses make access to international markets, at the same time bypassing existing barriers posed to international trade. This idea later evolved into a business plan and then a successful business entity.
Registrant:
Domains by Proxy, Inc.
DomainsByProxy.com
15111 N. Hayden Rd., Ste 160, PMB 353
Scottsdale, Arizona 85260
United States
Domain Name: NEUCOMMERZ.COM
Created on: 12-Sep-08
Expires on: 12-Sep-09
Last Updated on: 12-Sep-08
.
No they are not really in Denmark:
Contact details
Phone number: +45 65 74 23 48
E-mail: info@neucommerz.com
Address: Degnestavnen 12, st. th. Copenhagen
2400 NV Denmark
Office hours: 10:00-19:00 Monday - Friday
They are not really in Poland either, on this identical cloned fraud cyber-mule recruiting site!!
POLSKADIGITAL.COM aka POLSKA DIGITAL
Contact details
Phone number: +48 12 376 5423
E-mail: info@polskadigital.com
Address: ul Kabacki Dukt 6/42,
02-792 Warszawa, Poland
Office hours: 10:00-19:00 Monday - Friday
Registrant:
Domains by Proxy, Inc.
DomainsByProxy.com
15111 N. Hayden Rd., Ste 160, PMB 353
Scottsdale, Arizona 85260
United States
.
Domain Name: POLSKADIGITAL.COM
Created on: 12-Sep-08
Expires on: 12-Sep-09
Last Updated on: 12-Sep-08
.
POLSKADIGITAL.COM was being recruited for by another of the crime syndicates shadow HR sites, called RECRUITINGDYNASTY.COM now taken off line:
Registrant:
Domains by Proxy, Inc.
DomainsByProxy.com
15111 N. Hayden Rd., Ste 160, PMB 353
Scottsdale, Arizona 85260
United States
.
Domain Name: RECRUITINGDYNASTY.COM
Created on: 16-Sep-08
Expires on: 16-Sep-09
Last Updated on: 16-Sep-08
.
You are being contacted regarding an opening for a position of Business Representative. My name is Hannah Wilson, I am a senior human resources analyst at Recruiting Dynasty, London. Recruiting Dynasty provides wide-range of recruitment services across all business sectors in the UK on a local, national and international basis. For more information, visit our web-site at » www.recruitingdynasty.comAfter an in-depth analysis and thorough review of your resume, posted on Job.com web-site, you have been chosen as the primary candidate, with a compliance score of 86%. Bellow I have provided some general information about the employer and position offered. Detailed description of this job offer, provided by the employer, is available via this link: » www.recruitingdynasty.com/polska_digital---------------------------------------------------------------------- About Polska Digital Company ---------------------------------------------------------------------- Polska Digital is a fast growing, Polish company working on the European market since 2002. The main activities of the company in Europe include but are not limited to: Electronic wholesales and retailing Online e-content sales E-business systems development ---------------------------------------------------------------------- Business Representative Position ---------------------------------------------------------------------- In connection with forthcoming expansion into the United States market Polska Digital is looking for an honest, entrepreneurial, focused and highly motivated individual, who is willing to work in a professional, value-driven environment. Business Representative is responsible for organization on the local level, daily operation and funds management - working to address multiple business objectives through communication and cooperation with head quarters. The remuneration for Business Representative position starts at US $3000/month plus 1% commission, calculated out of the overall monthly sales figure (up to 5% depending on quarterly figures and overall performance). Estimated annual gross salary is $ 65,000.00 US (sixty five thousand dollars). The position of Business Representative does not require full-time employment and is \"on-demand\" basis. The applicant is not required to quit a current job, as well as not limited to being employed elsewhere on a full-time/part-time basis. Vast majority of tasks can be carried out remotely, via phone and/or Internet. IMPORTANT: If you are interested and would like to accept this offer, you need to fill out an on-line application within the next 72 hours. If no correspondence from you is received, this offer will be extended to another candidate. On-line application is available via the following link: >http://www.recruitingdynasty.com/index.php?action=register Dont hesitate to contact. Sincerely, Hannah Wilson ---------------------------------------------------------- Department of Personnel Recruiting Dynasty hwilson@recruitingdynasty.com European Service Desk 12 Egerton Terrace, Knightsbridge, SW3 2BX, London UK. Tel: +44 20 3286 3341 __________________
music man may have some other search hits of their recruiting activities that he can p ost.
Some of the fake cyber-mule fronted card fraud laundering operations, which this organized crime syndicate set up to process their hijacked card data, while masquerading as:
Neu Commerz GMBH aka NEUCOMMERZ.COM
THE RESUME & EMPLOYMENT FRAUD CHARGE LAUNDERING GROUP:
ANKERSOLUTIONSLLC.COM AKA ANKER SOLUTIONS LLC 262-510-0045 706-819-4216
»www.ankersolutionsllc.com
Note the "Secure" https set up, to automate victims who dispute the fraud charges into req uesting a refund online, thereby enabling the criminals from incurring the additional c h a r ge back fees:
quote:
Ankersolutions LLC Support is available during normal business hours Monday tho u g h Friday, 9:00am to 5:00pm EST. The number to call is (706) 819-4216. If a support e ng in ee r is not available, you will receive a call back based on a first come, first se rve d b asi s.
John Cohen
support@ankersolutionsllc.com
(262) 510-0045
When submitting a request via email, please include all relevant information pertaining to the problem, your name and the best time to contact you.
All the names are fake, just like the Globus Group
Note the slick pricing schedule which covers both the $7.95 fraud charge, and the list of various small amounts of "add ons" for variables. Also perfect for covering ping charg e s , which are used to validate the hijacked card data:
How it works:
How much:
Ankersolutionsllc.com, as with the others, are hosted on dedicated GoDaddy IP addresses, a nd have a GoDaddy domian privacy cloaked registration:
Domains by Proxy, Inc.
DomainsByProxy.com
15111 N. Hayden Rd., Ste 160, PMB 353
Scottsdale, Arizona 85260
United States
.
Domain Name: ANKERSOLUTIONSLLC.COM = IP 72.167.204.85
Created on: 10-Dec-08
Expires on: 10-Dec-09
Last Updated on: 31-Dec-08
.
As you may recall when fraud victims complained to the Globus group of sites, they were em ailed a "someone used you card on our site" note along with a user id, password and IP a d d ress for added effect. Same M.O. again:
quote:
01-23-2009,
Dumbest CC fraud ever - I hope
So I am checking my bank account online, and I see a charge for $13.50 to some name that i s unfamiliar. I check with my wife, hey, did you put anything on the debit card to so- a n d - so? Nope, she replies. Hmmm.
So I suspect it must be an annual auto-renewal to some online something I'd subscribed to a year ago, or something in that vein. I do a google lookup of the name listed on the t r a n saction, and it turns out it is some job hunt/hire site. A place that apparently w il l pu t your resume out on a lot of sites for you or, if you are hiring, hunt a lot of si tes fo r r esumes for you. (Anker Solutions LLC, fwiw.)
OK - I know for sure I never signed up to these guys. So I send them an email asking what' s up, never subscribed to you guys, here's the charge. They reply back the next mornin g - sorry, we do occassionally see online fraud, we're crediting your bank account, he re 's t he info we have on this new account.
And it is my name, username chosen was jefflackey, and they give me an IP address that was logged with the transaction. They tell me that they will lock the account, do some fu r t h e r investigation to determine who committed the fraud, etc.
...
..
Of course, what bugs me a lot is how anyone got my debit card info to begin with.
Not a good way to end the week - sigh.
Ref: »www.quartertothree.com/game-talk···=1611880
.
DDV-ENTERPRISES.COM aka DDV ENTERPRISES LLC 636-364-9432 706-819-4216 »:/ /ddv-enterprises.com
quote:
DDV Enterprises Support is available during normal business hours Monday though F r iday, 9: 00am to 5:00pm EST. The number to call is (706) 819-4216. If a support engi ne er i s not ava ilable, you will receive a call back based on a first come, first serve d b asi s.
Jenn Goodman
support@ddv-enterprises.com
(636) 364-9432
When submitting a request via email, please include all relevant information pertaining to the problem, your name and the best time to contact you.
Registrant:
Domains by Proxy, Inc.
DomainsByProxy.com
15111 N. Hayden Rd., Ste 160, PMB 353
Scottsdale, Arizona 85260
United States
.
Domain Name: DDV-ENTERPRISES.COM = IP 97.74.11.55
Created on: 10-Dec-08
Expires on: 10-Dec-09
Last Updated on: 10-Dec-08
.
How it works:
How much:
.
RET-NEK.COM AKA Ret-Nek LLC, 913-232-2266 706-819-4216 »ret-nek.com
quote:
Ret-Nek Support is available during normal business hours Monday though Friday, 9 : 00am to 5:00pm EST. The number to call is (706) 819-4216. If a support engineer is no t av ailable, you will receive a call back based on a first come, first served basis.
Sterling McGuire
support@ret-nek.com
(913) 232-2266
When submitting a request via email, please include all relevant information pertaining to the problem, your name and the best time to contact you.
The fictitious McGuire name was used during the Globus phase as well.
Same listed prices to match card fraud laundering charges:
Domains by Proxy, Inc.
DomainsByProxy.com
15111 N. Hayden Rd., Ste 160, PMB 353
Scottsdale, Arizona 85260
United States
.
Domain Name: RET-NEK.COM = IP 97.74.76.186
Created on: 09-Dec-08
Expires on: 09-Dec-09
Last Updated on: 26-Dec-08
.
.
RAPIDADVERTS.COM AKA DWG Consulting & Services 803-667-3922
quote:
DWG Consulting & Services (rapidadverts.com) Support is available during normal b u siness h ours Monday though Friday, 9:00am to 5:00pm EST. The number to call is (803 ) 66 7- 3922. If a support engineer is not available, you will receive a call back based on a fir st come, f irst served basis.
DWG Consulting & Services (rapidadverts.com)
Telephone: (803) 667-3922
Manager: Nita Edward
support@rapidadverts.com
When submitting a request via email, please include all relevant information pertaining to the problem, any screenshots you may have, your name and the best time to contact you . I f you need to fax us a sample, please fax the documents and refer to the fax in you r em ai l.
.
FLARETRAFFIC.COM aka FLARETRAFFIC = Assumed Name of DAVES ENTERPRISES LLC
865-940-0556 »flaretraffic.com
quote:
100% Refund
Refund requests submitted online are processed automatically.
Customer Service:
Telephone: (865) 940-0556
Manager: Jared Sutphin
support@flaretraffic.com
Business hours:
Our normal business hours are nine am (9) to five pm (5) Eastern standard time, Monday thr ough Friday.
Address:
126 Causby Road Powell, Tn 37849
Registrant:
Domains by Proxy, Inc.
DomainsByProxy.com
15111 N. Hayden Rd., Ste 160, PMB 353
Scottsdale, Arizona 85260
United States
.
Domain Name: FLARETRAFFIC.COM = IP 216.69.138.106
Created on: 24-Oct-08
Expires on: 24-Oct-09
Last Updated on: 24-Oct-08
.
MGD
EDIT= replaced last 4 images with lower res |
