CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

$9736.22 of $21422.68
left sidedonated so farneed $11686.46 donated to reach our goalright side, our goal
Help CastleCops serve the community on new servers, Donate Here to reach our goal.

Donation/Premium
spacer
block bottom
Security Central
spacer
· Home
· PIRT/Fried Phish
· MIRT
· SIRT
· Deutsch
· Wiki
· Newsletter
· O16/ActiveX
· CLSID List
· Contest2007
· Downloads
· Feedback (send)
· Forums
· HijackThis
· Hijacktrend
· LSPs
· My Downloads
· O18
· O20
· O21
· O22
· O23
· O9
· Premium
· Private Messages
· Proxomitron
· Reviews
· Search
· StartupList
· Stories Archive
· Submit News
· WsIRT
· Your Account
· Acceptable Use Policy
block bottom
Survey
spacer
Was 2007 a good year?

Yes it was a wonderful year
Yes, but there is always room for improvement
Status quo
It was a challenge
Other (leave comment)



Results
Polls

Votes: 940
Comments: 25
block bottom
spacer spacer
image News by the Bosses!: $9.95 Scam Phishing Expedition image
CastleCops

Recently UnEarthed Phishing Expedition


re: http://www.davwebsoftinc.com/

by Paul Laudanski and James D. Littell, Sr., Computer Cops
February 16, 2004


Un-named sources from a major U.S. Internet Services Protocol (ISP) company, have unearthed a nasty little Phishing expedition.

While appearing to be a completely legitimate e-business domain website they ask for........... and obtain personal information from the victims.

Perpatrator DavWebSoft Inc., funny ......no cookies. I wonder why?

Said by the vic:

It is the first time I’ve been had by fraud and thankfully it was only for $9.95.

Somehow, somewhere, someone used my credit information to try and sneak past a small charge on my bank statement. The charge of $9.95 came from DAVWEBSOFT. Searching the web for DavWebSoft (DaveWebSoftInc or DaveWebSoft Inc) turns up a very suspicious web site. It appears “professionally” designed, but on closer inspection, many links simply do not work and news items are stolen from other sources.

WebSite: DavSoft’s is a near exact duplicate of these web sites: SBC Web Solutions, Stewart’s Precision Web Design, Eadens Enterprises, Fleming Software LLC, Global WebLine LLC, Studio A Design, Prosoftware Inc., Luministic Technologies, Kazland Software Corp., Bailey Consulting Group LLC, International Web Design, GToolboxes Technology INC., Tanya Web Design, Andersoft Inc., Panaginip Salohin Corp., Web Pages Made Easy LLC, E Software Tech Inc., Webtemp Solutions, Inc., and Resourcepdc Inc. Each site lists different fake addresses and phone numbers. Try contacting the phone number listed on any of the pages and you’re dumped into anonymous voice mail. Much to my amazement all the sites appear identical, wow!

Besides stolen copy, links that aren’t links, and duplicate web sites, the most obviously fraudulent element is that each main page has a link to “Don’t Recognize a Charge?” which then asks for credit and other personal information. Gah! What sort of company prominently displays “Don’t Recognize a Charge?” on their main page?! None, except fraudsters.

All Comments are listed here.

Check out: http://www.globalwebline.com/

The charge came from there and he went to the 'don't recognize a charge' link:
Example........http://www.globalwebline.com/b_order.php.......yields this result.
Customer Service
Please fill in the following information about your order:
Last 6 digits of your credit card number:
Billing Zip:
Your Name:
Phone:
EMail:


And went to the third radial option only to get asked some serious personal information ...
ALL WITHOUT BEING IN AN ENCRYPTED SSL SESSION! Yes, we are yelling here and for good reason. Folks continue to ignore all the warnings.
Talk about transmitting private data over unsecured connections.

This link http://www.globalwebline.com/c_order.php yields this result,
without entering a single piece of data and just clicking continue.
Thank You for the assistance! We will contact you as soon as possible.

All of this example has been easily replicated at DavWebSoft Inc.

If you happen to be a victim of fraud, report it to the FTC and the IFCC.

Source Stareat.us 7/8th's scroll down...........

Direct Link Source

Posted on Monday, 16 February 2004 @ 11:52:51 UTC by phoenix22 (41320 reads)
[ Trackback ]
image

"News by the Bosses!: $9.95 Scam Phishing Expedition" | Login/Create an Account | 120 comments | Search
Threshold
The comments are owned by the poster. We aren't responsible for their content.

No Comments Allowed for Anonymous, please register

Re: Recently UnEarthed Phishing Expedition (Score: 0)
by Anonymous  on Wednesday, 18 February 2004 @ 10:28:47 UTC
We had the same thing come up on our Visa



Re: Recently UnEarthed Phishing Expedition (Score: 0)
by Anonymous  on Thursday, 19 February 2004 @ 00:34:05 UTC
My site, the stareat.us site that reported on this fraud was recently flooded by random spam using my movable type comment system. I applied a captcha security application to prevent the spam-flooding and about two hours ago my site's main paged was hacked, being replaced with the words, ***** YOU ALL!

Funny. Clearly I've irked the criminal nerds behind this fraud.

Again, if you happen to be a victim of fraud, please report it to both the FBI and IFCC so that they are able to build an adequate case file for their criminal investigation and prosecution.

-Eric Rolph



Re: Recently UnEarthed Phishing Expedition (Score: 0)
by Anonymous  on Monday, 01 March 2004 @ 16:53:31 UTC
I got hit too. Good scam they have, if you had a very active account you may not even notice the 9.95 and times that by a few thousands and WOW.
It is my business card and only my computer supply vendors and my ISP have the number. It was only activity in 2004. I have list of all 2003 vendors if that can help. I reported to credit card (Capitol One) and most recent vendor. I am a little shocked, first fraud for me.



Re: Recently UnEarthed Phishing Expedition (Score: 0)
by Anonymous  on Thursday, 04 March 2004 @ 18:18:02 UTC
Im in the UK and have identified a $9.95 payment (£5.49) on my bank statement. It was taken 01st March by DAVWEBSOFT but I don't recall anything unusual. I only use secure websites - I think?



Re: Recently UnEarthed Phishing Expedition (Score: 0)
by Anonymous  on Tuesday, 09 March 2004 @ 13:26:39 UTC
There was a charge for 9.95 put on my Capital One card 1/18 from Prosoftwareink.net. I just discovered it 3/8. I tried calling the 208 number in California; left my telephone number for a return call and now this is bothering me - any danger here? Also e-mailed a note to Prosoftwareinc.com thinking they were the company asking about the charge- was this dumb too? Capital One has reversed the charge. Used card over supposedly secure sites for clothing from reputable companies.



Re: Recently UnEarthed Phishing Expedition (Score: 0)
by Anonymous  on Wednesday, 10 March 2004 @ 23:33:12 UTC
Mine was charged on 2/16 and went through on 2/18 DAVWEBSOFT.COM WOODBURY MN. My credit card people did not have a phone number for this outfit, but the name seemed to arouse suspition as did just the $9.95 charge. They gave me the dispute number to call, which I will. I used my MC over the holidays with Highlights.com, the only connection I see. Hope



Re: Recently UnEarthed Phishing Expedition (Score: 0)
by Anonymous  on Wednesday, 24 March 2004 @ 14:29:24 UTC
On 2/26 we were charged $9.95 by Resourcepdc.com --the most recent of your listed phony corporate addresses. My husband has never been thrilled at the security risk of ordering online, but I have carefully ordered over the Internet for at least four years and never had a problem.(When the option was available I would phone in all but the few final digits of our VISA number.) Indeed, a Computercop sweep of addresses/VISA numbers currently found on lists used by thieves came up clean a year or two ago.I will not be able to order over the Internet with confidence again, and my husband is furious. VISA is issuing a new card and has closed the original account. Eventually these people will put themselves out of bus iness if we're all afraid to order -- and they will take a huge segment of the economy with them.
-s.



Re: Recently UnEarthed Phishing Expedition (Score: 0)
by Anonymous  on Monday, 05 April 2004 @ 21:22:28 UTC
I have NEVER put in a creditcard number unless I see the little lock in the lower portion of the screen. I have used the card on ebay, paypal and amazon.com. Where to we go to contact the FTC and ifcc?



Re: Recently UnEarthed Phishing Expedition (Score: 0)
by Anonymous  on Tuesday, 06 April 2004 @ 19:32:51 UTC
Just checked bank statement, $9.95 taken from Visa debit card. Very concerned... Will notify authorities



Re: Recently UnEarthed Phishing Expedition (Score: 0)
by Anonymous  on Thursday, 22 April 2004 @ 10:42:29 UTC
I had the same $9.95 charge on my card statement from Eadens.net. I called the card company to dispute the charge and they said they would credit that amount as a courtesy since it cost more than that to dispute a charge. So that means these lowlifes GET AWAY WITH IT! What does it take for someone to go after these guys?



Re: Recently UnEarthed Phishing Expedition (Score: 0)
by Anonymous  on Saturday, 24 April 2004 @ 11:47:35 UTC
Yep Ive been hit too, to the tune of approx $140, not impressed as i very rarely use my credit card (thats the only reason I noticed, the hit was nearly 2 weeks ago. Got to contact my bank and everything now



Re: Recently UnEarthed Phishing Expedition (Score: 0)
by Anonymous  on Tuesday, 11 May 2004 @ 13:30:33 UTC
I too was slammed by the charge, in January I had a Paypal transaction, is anyone seeing a pattern here, someone at Paypal is leaking



Re: Recently UnEarthed Phishing Expedition (Score: 0)
by Anonymous  on Wednesday, 12 May 2004 @ 17:48:59 UTC
Tuesday, May 11, 2004



Re: Recently UnEarthed Phishing Expedition (Score: 0)
by Anonymous  on Wednesday, 12 May 2004 @ 17:56:40 UTC
Monday, May 10, 2004 my bank account was charged 9.95 by Pansalcorp.com



Re: Recently UnEarthed Phishing Expedition (Score: 1)
by peachy84  on Thursday, 27 May 2004 @ 14:22:54 UTC
(User Info | Send a Message)
PLEASE PLEASE PLEASE REPORT THIS TO THE FTC AND THE IFCC.

If you have been charged by any of these sites, please reprt it. the more reports received, the better the chances of these ppl getting caught. it takes very little time, about 5 mins to call the FTC, and maybe 10 mins to file an online report with the IFCC.
And watch your statements carefully, let your friends know to watch out as well.



Re: Recently UnEarthed Phishing Expedition (Score: 1)
by f8dy  on Thursday, 03 June 2004 @ 21:17:43 UTC
(User Info | Send a Message) http://diveintomark.org/
The scammers have discovered this site. About six weeks ago, I mentioned Platypus Templates on my weblog and pointed to this article and discussion. Today I got this in my inbox from the scammers' customer service rep (yeah right). He identified himself as Oleg Borisov at olegborisov75@hotmail.com (yes, hotmail).

This is the complete text:



Dear Mark,

My name is Oleg Borisov and I represent Bailey Consulting Group customer service.
I would like to contact you because of the publication you have placed on your website www.diveintomark.org concerning our company.

First I guess I should explain everything to you.
Our company produces webdesign and templates - primary web pages with no content. We have been working successfully for more than two years and continue to develop our products and services.

Mark, I read attentively the information given on your website and we want you to remove the negative information about our company with no delay. It can affect the business we have and the business name severely. I have been in touch with the people from Computer Cops where a simular publication is placed. Is is very strange that somebody calls us scammers having not even contacting a customer service representative. We have nothing to do with any kind of scam and we are not asking for any kind of personal information.

We do have a link What is Bailey Consulting Group LLC billing me for? The use of this link is caused by a system breakdown we had in April when we lost transaction records for seven days and it did happen that some people were charged incorrectly. It resulted in chargebacks from our account and calls from a few irated individuals. In this situation we are suffering financial losses like chargebacks and have to prove having a legitimate business. We are a small company and all these negative results may be fatal for the good business name and the whole business.

Please feel free to get in touch with the at any time and I will be delighted to answer any of your possible questions. One more time: please remove the negative information concerning our company.

Best regards,,
Oleg Borisov.
Bailey Consulting Group LLC Customer Service.

_________________________________________________________________
Is your PC infected? Get a FREE online computer virus scan from McAfee® Security. http://clinic.mcafee.com/clinic/ibuy/campaign.asp?cid=3963




Re: Recently UnEarthed Phishing Expedition (Score: 1)
by Boru  on Saturday, 03 July 2004 @ 19:06:51 UTC
(User Info | Send a Message)
There is a new one. #WP-A-Soft from Schwabach, GB nailed me for $11.00. They charged it on a credit card that I destroyed months ago that was never activated...figure that out.



Re: Recently UnEarthed Phishing Expedition (Score: 1)
by JohnV  on Monday, 26 July 2004 @ 18:49:43 UTC
(User Info | Send a Message)
I just got hit by pansalcorp.com for 9.95. Same anonymous answering machine, same What is PANSALCORP.com billing me for? link on the web site. Apparently they just keep changing the company name, the web address and the colors & fonts on the page. Everything else stays the same.

Apparently they have found something that works, so they're sticking with it. Sheesh. Why isn't the IFCC shutting these people down?



Re: Recently UnEarthed Phishing Expedition (Score: 1)
by That1Guy77 (me@yourmomshouse.com)  on Tuesday, 10 August 2004 @ 23:37:04 UTC
(User Info | Send a Message)
I happened to remember being double charged for something non-related during the month of January and I happened to stumble across what everyone is talking about. Reading all this just got me f*cking pissed. I've got the same bogus phone # everyone else has said they recieved on their billing statements and platypustemplates.com is who took my money.

I'm gonna call up my credit card company first thing in the morning and contact the FTC, IFCC and the FBI via their websites... Also, my neighbor across the street is a District Attorney and a good friend of mine is a private investigator. Someone's gonna f*cked up if I find out who pulled this sh*t off!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!



Re: $9.95 Scam Phishing Expedition (Score: 1)
by chrisadd  on Tuesday, 21 September 2004 @ 19:25:23 UTC
(User Info | Send a Message)
Looks like they're back up with MAC CEE COM (http://www.macceeinc.com). Just got a charge for $9.95 today.


 
Login
spacer
Nickname

Password

Security Code: Type Security Code: Usage signifies