Category Archives: Security

Money Mule Instructions Revealed

It reads like a simple project management list — transfer specific amounts of money using three steps to three people in the Ukraine from three different Western Union locations — under the services title of “IT Outsourcing”.

Krebs has posted an interesting detail from the case last week where $600,000 was stolen in Brigantine, NJ

Below is a screen shot of the alert the Forte Group sent Tharp on the day of the Brigantine breach. Click the image for a larger version.


Kudos to Krebs for publishing it for discussion. The full image on Krebs’ site is said to be from a woman who said she recognized the scam and backed out.

Tharp, who recently lost her job as a buyer for a local automotive supplier, said she figured out the job was a money laundering scam several days before the Brigantine robbery, and closed the bank account she had given her erstwhile employers. But she said the thieves still tried to transfer her $7,394 of the city’s money on Sept. 29. Tharp said she confirmed with her bank that the thieves never managed to deposit the stolen funds.

The instructions have broken English and other inconsistencies. Note, for example:

“Your commision [sic] rate: 0%” and “Your commision [sic] for this task: 0 USD”. However, step two says “Western Union/Money Gram fees along with all other costs, such as bank fees, transportation costs and so on are paid by you and are deducted from your commission.”

The urgency of the request is interesting as well: “As you know our goal is to provide immediate payment service that’s we ask you to complete this task within 1-2 hours. Is it possible?”

The language and style fits within the social engineering study and linguistic analysis we have developed and presented at conferences over the past seven years. Those who have attended our session would immediately have spotted the signs of fraud. It also is further evidence that an automated application of our research will be useful to detect and stop fraud beyond AFF or 419 scams.

“German” al-Qaeda killed by Drone

The big result of a drone attack is further evidence that foreigners are fighting for al-Qaeda in Waziristan

The Germans are neither the first nor the only Western nationals living in these parts.

Indeed, since 2008, an increasing number of Europeans and North American nationals are known to have travelled into Pakistan’s tribal regions.

The Europeans nationalities include Dutch, German, French and British.

It reminds me of a bartender in Hamburg several years ago who insisted that I am German because of my name.

“You are German” he said.

“No, I am American” I replied, trying to sound resolved.

“You are German” he said with the same look and tone, as if I had not heard him the first time. “You should take your land and be proud you are German”.

“Ok, fine, Kerem. You win I am German like you are Turkish” I said. “When will you claim your land in Turkey?”

“No, I am not Turkish. You are German” he said.

It also reminds me of a bartender in Paris who told me he was an Argentinian; he became a French citizen through service with the Foreign Legion under a declared identity. He was completely fluent in English, French, Spanish, Italian, German and probably other languages. I couldn’t figure out why he was a bartender and I wondered if his declared identity is what made him Argentinian.

“I do it for fun, to pass the time” he said.

“Well, then what do you do for vacation?” I asked, perhaps naively.

“Next week I will camp in the mountains of Italy for a week, alone” he explained.

It did not sound like a camping trip. There was no mention of roads, landmarks, a hiking trail or a campsite, just vague references to a region in Italy very near the border of another country. Then he proceeded to tell me about one of his missions in Djibouti where he guarded a border by shooting heavy machine guns at anything that came within range, including school buses. The segue was odd, but not lost on me.

Later, when I assembled the parts of the stories he told me, I realized he most likely was one of the infamous mercenaries that were based in Paris and experts in esprit de corps. Maybe he trained and traded weapons; a consultant for whomever would pay his price. Maybe he ended up being listed as a “foreigner” in a news story like the latest drone strike.

A drone strike in North earlier in September killed a British national named Abdul Jabbar who had been living in Punjab province.

A British security source told the BBC’s Newsnight programme that Jabbar was being groomed to head an al-Qaeda offshoot in the UK.

Edited to add: The BBC also reports that the US has hired mercenaries linked to the Taliban to guard American bases.

A Senate report has found evidence that many Afghan security personnel paid with US taxpayers’ money to guard American bases are hand in glove with the Taliban insurgents hell-bent on killing coalition troops.

While you have Germans working for the Taliban in Afghanistan, it may be the Taliban are working for the US and may even be on bases.

VW Passat Breaks MPG World Record

Favstocks gives details on the amazing feat by a standard production vehicle. The Passat Bluemotion set a Guinness World Record for “hypermiling”

Powered by a Volkswagen 1.6-liter common rail TDI engine developing 105 PS, the Passat BlueMotion used for the record attempt was a standard production model. In common with the Polo and Golf BlueMotion models, the Passat is fitted with aerodynamic modifications to the bodywork, a lower ride height, Stop/Start, programmed battery charging, longer gearing and low rolling resistance tyres. The result is a vehicle that is completely conventional to drive, service and maintain yet among the most efficient vehicles on the road today.

The Passat BlueMotion’s fuel tank was drained before the record breaking journey and filled with 77.25 liters (20.4 U.S. gallons) of standard forecourt diesel, resulting in an overall fuel consumption of 89.83 mpg (3.14 L/100km or 74.8 mpg U.S.). This substantially exceeds the Passat BlueMotion’s official combined figure of 64.2 mpg (4.4 L/100km or 53.45 mpg U.S.).

75 mpg with no battery risks and a significant amount of power, suitable for driving with loads and on highways. Diesel again proves it is the most viable option for efficient energy on the road.

Mobile magazine points out that…

…they were able to record a production car world record of 1,531 miles on a single 20-gallon tank of gas.

To put that in perspective, it means that you can effectively drive all the way from Seattle to Phoenix without ever visiting a gas station.

That is also the distance from Washington DC to Miami, Florida…on just 20 gallons of fuel.

A 2004 2.0 TDI Passat from VW gets 600 miles from a 15 gallon tank of gas (40mpg) so this means VW has engineered almost double the efficiency with diesel for production cars in just six years.

During the same time the much-hyped (and sometimes panned for safety flaws) Toyota Prius hybrid actually has been found to decrease in average efficiency (from 41mpg down to to 37mpg).

When I see a hybrid on the road I often think of a comment from Vinod Khosla last year that keeps popping up:

You can reduce more carbon painting your roof white than by buying a Prius.

Even better, paint your roof and get a clean diesel.

Edited to add: I wrote to VW directly and asked about availability of this car in the US. Their answer is…

The current Passat Sedan and Passat Wagon will phased out for the 2011 model year to make room for Volkswagen’s new midsize sedan, which will begin production in Chattanooga, Tennessee later next year. At this time, no further details are available regarding engine availability or other features.