Chinese scam as AICPA

User avatar
Pigeon
Posts: 18055
Joined: Thu Mar 31, 2011 3:00 pm

Chinese scam as AICPA

Post by Pigeon » Mon Dec 10, 2012 10:15 pm

This spam-o-la might be of interest to accountant types...

You're receiving this information as a Certified Public Accountant and a participant of AICPA.

Having difficulties reading this email? Take a look at it in your browser.

Cancellation of Public Account Status due to tax return indictment

Respected AICPA participant, We have received a complaint about your alleged participation in income tax return affaire on behalf of one of your employees. According to AICPA Bylaw Head #730 your Certified Public Accountant license can be cancelled in case of the act of filing of a incorrect or fraudulent tax return for your client or employer. Please familiarize yourself with the complaint below and provide explanation of this issue to it within 7 work days.The failure to do so within this term would finish in terminatation of your Certified Accountant Career.

Complaint.doc

The American Institute of Certified Public Accountants. Email: service @ aicpa.org Tel. 888.777.7077 Fax. 800.362.5066

This email came of a mail server that appears to be in Greece.

The link that is embedded (shown as complaint.doc) is to a website in New Jersey for an A/C type company.

That link does a redirect to a website (eaglepointecondo.org) which appears to be Chinese.

Code: Select all

<title>Welcome to the AICPA</title>

<script type="text/javascript">
<!--
location.replace("http://eaglepointecondo.org/detects/denouncement-reports.php");
//-->
</script>
<noscript>
<meta http-equiv="refresh" content="0; url=http://eaglepointecondo.org/detects/denouncement-reports.php">
</noscript>
</head>
<h1>You will be redirected to details of purchase</h1>
<h4 style="color:#364dbc;">We must complete few security checks to show your transfer details:</h4>
<h3>Be sure you have a transfer reference ID.<br />You will be asked to enter it after we check the link.<br><br>Important: Please be advised that calls to and from your wire service team may be monitored or recorded.<br /></h3>
<h3>Redirecting to Survey details... Please wait...</h3>
Looks a bit like they are phishing for ACH transfer or other payment data. Not sure how successful this is out of an email.

There is a bunch of faked email, IPs for AICPA, NACHA.org and USB Prime to make it look more believable.

Wondering if these dudes in NJ knows their site is hosting this link or if they are part of it. Some company named 'Cleworth' may not have a clue they are being used in a scam.

User avatar
Royal
Posts: 10562
Joined: Mon Apr 11, 2011 5:55 pm

Re: Chinese scam as AICPA

Post by Royal » Tue Dec 11, 2012 12:16 am

Trying to trick one of the few professions trained to look for scams, to counter-scam the government, and dodge government regulation. Goodluck! lol

I was in the check cashing business for a regional company a couple months in college- New Jersey was not to be trusted.

Usually a company like this would have a host has different sites under one umbrella. Would this company be any different?
Last edited by Royal on Tue Dec 11, 2012 12:37 am, edited 1 time in total.

User avatar
Pigeon
Posts: 18055
Joined: Thu Mar 31, 2011 3:00 pm

Re: Chinese scam as AICPA

Post by Pigeon » Tue Dec 11, 2012 12:27 am

Should I call this place and see what they say. Wonder if they know.

User avatar
Royal
Posts: 10562
Joined: Mon Apr 11, 2011 5:55 pm

Re: Chinese scam as AICPA

Post by Royal » Tue Dec 11, 2012 12:38 am

Yeah, but do it on skype live or record it so I can enjoy your technique. :D

User avatar
Pigeon
Posts: 18055
Joined: Thu Mar 31, 2011 3:00 pm

Re: Chinese scam as AICPA

Post by Pigeon » Tue Dec 11, 2012 1:00 am

hehe...Don't know if one party recording is legal in a conv with NJ.

I might investigate just for grins. How can the site be hacked and they don't know. Willing participants maybe, them or their hired IT person.

User avatar
Pigeon
Posts: 18055
Joined: Thu Mar 31, 2011 3:00 pm

Re: Chinese scam as AICPA

Post by Pigeon » Tue Dec 11, 2012 9:50 pm

Hmm. The url to the directory with the target displays a password entry form. Guess that is the backdoor into it.

User avatar
Pigeon
Posts: 18055
Joined: Thu Mar 31, 2011 3:00 pm

Re: Chinese scam as AICPA

Post by Pigeon » Thu Dec 13, 2012 1:07 am

Still there, guess the site is in on it.

User avatar
Royal
Posts: 10562
Joined: Mon Apr 11, 2011 5:55 pm

Re: Chinese scam as AICPA

Post by Royal » Thu Dec 13, 2012 1:18 am

They didn't make any changes?

User avatar
Pigeon
Posts: 18055
Joined: Thu Mar 31, 2011 3:00 pm

Re: Chinese scam as AICPA

Post by Pigeon » Thu Dec 13, 2012 1:32 am

Still there.

User avatar
Pigeon
Posts: 18055
Joined: Thu Mar 31, 2011 3:00 pm

Re: Chinese scam as AICPA

Post by Pigeon » Thu Dec 13, 2012 3:27 pm

The website

Internal Server Error

The server encountered an internal error or misconfiguration and was unable to complete your request.

Please contact the server administrator, webmaster@xxxx and inform them of the time the error occurred, and anything you might have done that may have caused the error.

More information about this error may be available in the server error log.

Additionally, a 500 Internal Server Error error was encountered while trying to use an ErrorDocument to handle the request.
Apache Server at xxxx Port 80

Looks like someone is fixing it.

Post Reply