Scammers and Targeted Spear Phishing Attacks

Tuesday, August 24, 2010

Robert Siciliano

37d5f81e2277051bc17116221040d51c

I make a portion of my living speaking professionally. That means I get on a platform and present in front of an audience on issues revolving around personal security and identity theft.

So when I got this email, I was so happy to see I was being invited to England to speak to the esteemed Middlesex University in England.

I had to shorten the dialog to keep in tune with your attention span.

______________

8:09am

SCAMMER: From: Professor Wayne Erickson <middlesexuniversityconference@gmail.com>
Company: MIDDLESEX UNIVERSITY.


To: Respected Robert Siciliano, (
I am ‘Respected”, NICE!)

Am Professor Wayne Erickson from the Middlesex University
Here in London UK. We want you to be our guest speaker at this
Year Middlesex University Seminar which will take place here in
UK.

We are taking care of your traveling and hotel accommodation expenses including your speaking fee. If you will be available for our event, include your speaking fees in your email so it can be included in your CONTRACT AGREEMENT.

Stay Blessed
Professor Wayne

________________

8:10am

ME: Wonderful. Fee is $10,000. What are the next steps?

________________

8:38am

SCAMMER: It is really nice hearing back from you; we are over delighted to have
you honor our invitation. I will have loved to give you a call
so as to deliberate more on arrangements, but am out of office on an
official duty and will not be back until WEDNESDAY morning, we can only
communicate through emails at the moment.

We have agreed to buy your flight ticket and to pay your hotel
accommodation expenses. Also your Speaking fee is amounted to
10,000 USD 7,000 (SEVEN THOUSAND USD) deposit is to be paid as
soon as you procure all relevant travel documents so as to avoid any
disappointment. You are informed to get across your Work Permit to us
so your deposit can be approved according to our mandated rules and
regulation.

You are advised by the Event Organizing committee to immediately
contact our BRITISH EMBASSY here in the UK to procure your UK Work
Permit as soon as possible

This will enable us to proceed with all arrangements to welcome you
here in London. Contact the British Embassy official
information below.

BRITISH EMBASSY.  Name: Dr Owen Loren Email:britishembassycustomerservice@gmail.com

______________

8:40am

ME: Dr. Owen Loren, need work permits.

______________

9:11AM

SCAMMER: I acknowledged the receipt of your mail. I understood all the
contents. Without any waste of time and due to short time we have left
to proceed with the issuance of these important documents .Fortunately
for you I will be processing some files today at the UK BORDER AGENCY.
You are advised to immediately provide me with the listed
requirements.

View attachment below and immediately get back to me with all
requirements so I can proceed on the procurement of your PERMIT.

In your service,
Dr Owen Loren,
British Embassy Official.

In the attached document, the scammer requests for 550 pounds (837.277 USD)

____________

9:21am

SCAMMER: As soon as you get the PERMIT procured send me a copy of it so I can forward it to our FINANCIAL DEPARTMENT for your DEPOSIT to be sent
over to you, I will also begin with all reservations ASAP.

We also await the signed copy of your CONTRACT AGREEMENT.

Note: The UNIVERSITY has promised to reimburse all the expenses spent
on your PERMIT alongside your DEPOSIT.

We await meeting you in LONDON,

Stay Blessed,
Professor Wayne
Bye.

________________

9:30am

ME: This is such a fantastic opportunity. Please send photos of yourselves of your highest dress attire in your most coiffed hair with the attached document printed out. I will post them on my website to promote my esteemed engagement. I will get on my motorbike shortly after I received these wonderful photographs of your handsomeness and go directly to western-union to pay the fabulous fee to work. I need these photographs ASAP. Please include a handheld printable version of my name (as attached) in your hands (both hands) with the photograph to show my American colleagues how lucky I am to work with such incredible official as yourself. I look forward to these photographs ASAP and will provide to my webmaster then I will go on my motorbike to pay the fee. I am ready and awaiting your quickest timeliest response.

Your Esteemed Colleague and Most Wonderful Speaker

Robert Siciliano

NEW Demo Video http://YouTube.com/watch?v=mrcvMg1UDro
Robert Siciliano
http://IDTheftSecurity.com

_________________

All they need is one person each month to respond to this scam and they make bank. $850.00 is enough money for them to feed themselves all month. This isn’t such a sophisticated scam.

However, speakers I know have fallen for it. The documentation and the targeted attack make it an effective ruse. Lawyers are getting scammed in a similar way.

What makes this “spear phish” (a targeted scam) so scary is they sought ME out, they know my profession and who I am. But, apparently they don’t really know what I do, which is exposing their scumminess to the world. I feel dirty just communicating with them.

Robert Siciliano personal security expert to Home Security Source discussing home security and identity theft on TBS Movie and a Makeover. Disclosures

Possibly Related Articles:
3247
Phishing
Phishing
Post Rating I Like this!
Default-avatar
Julie Verive Just got a request from an agent trying to book this very speaking engagement and asking me to procure a WORK PERMIT. I found your article and was able to advise the agent of this scam! THANK YOU!
1282763162
37d5f81e2277051bc17116221040d51c
Robert Siciliano Julie you are the second person this week who read the article and saved themselves from getting hooked here: http://twitter.com/RobertSiciliano/status/21966772472
1282763592
85ac6feb584b665e85664974c546cfec
Ray Tan Why those scammers use gmail instead of a company alike mailbox?
1282800873
Default-avatar
Farah Mendlesohn Thank you very much for this post. A friend received the scam email and asked me about it because I *do* work at Middlesex University. I had already reached the "no such person on faculty" stage, but thought to google the email the scammer used, and this came up.

Much appreciated.
1294640153
The views expressed in this post are the opinions of the Infosec Island member that posted this content. Infosec Island is not responsible for the content or messaging of this post.

Unauthorized reproduction of this article (in part or in whole) is prohibited without the express written permission of Infosec Island and the Infosec Island member that posted this content--this includes using our RSS feed for any purpose other than personal use.