14 DAY TRIAL // Experts from ThreatTrack Security have come across a secret shopper scam that’s hosted on a hacker Bolivian tourism website (amaru-bolivia(dot)com).
The bogus secret shopper page is hosted at amaru-bolivia(dot)com/WMart. Here, users are presented with the following message:
“WalMart is recruiting mystery shoppers, We are recruiting in conjuction with Western union® We are looking to run a mystery shopping assignment in your area and we would like you to participate.
It's fun and rewarding, and you choose when and where you want to shop. There is no charge to become a shopper and you do not need previous experience. After you sign up, you will have access to information via e-mail, fax, postal mail or SMS.”
The page has nothing to do with Walmart and there’s no real mystery shopper job offer. Instead, the site has been set up by cybercriminals who want to recruit money mules. Those who click on the “Apply” button are instructed to hand over their name, email address, phone number, address and other personal information.
Interestingly, as ThreatTrack Security’s Chris Boyd highlights, the fake Walmart mystery shopper site contains a link to a Better Business Bureau page, which allegedly demonstrates that the company is legitimate.
However, if you actually click on the link, you’re taken to the BBB page of Minnesota-based Sights On Service.
Here, the following warning is shown: “The Better Business Bureau of Minnesota and North Dakota, as well as Sights on Service are aware the company's name has been used in association with fraudulent secret shopping checks.”
Those who apply for the job actually help cybercriminals in laundering their criminal proceeds. In case you’re tempted to take the job thinking that you’re not the one who stole the money, keep in mind that in case authorities crack down on the scheme, money mules are the first to be caught.
To learn more about how to identify money mule scams, check out ThreatTrack Security’s blog.
