Such a good-looking example of phishing

Take a look at the phish below. In fact, take a look at the source. Anything trigger an alarm?

You can dig and whois against careerbuilders.com, and do the same against icbrd.com, which supplies many of the images used. Apparently this arrangement is legit, with icbdr.com providing hosting for Careerbuilders.

But there it is, right in the open: mailto:[email protected].  Why in the world would anyone working for a company (strangely undefined) with a “high performance business strategy” (I’ll bet) be using Yahoo mail? And notice that the real instructions are to “send us [your personal info] via email.”

We are fortunate, in this case, to see some truly terrible Engfish give away the game. We can’t always count on that. So be aware of the other give-aways that might appear on phishing expeditions like this.

What is the real Control you should be using? Restricting the initiation of communications to one-way. Sure, let Careerbuilder keep sending you notes and such. Just *never reply to them*. Instead, initiate contact from *your* end for any true conversation, **always**.

Here’s what I got:


This popped in to my email today.  It is so poorly written I am almost tempted to respond…

X

From: Ann Lauren [mailto:[email protected]]
Sent: Tuesday, January 11, 2011 9:37 AM
To: X
Subject: CareerBuilder \ For X. Job Offer




Message from Job Poster

CareerBuilder: Assistant Manager Position

Dear X.

Our company is cheerful to propose you our new vacancy. Our team is making a search for Assistant Manager in your city. Hereby we are all excited about the contribution that you could fetch up to our firm.

To begin with, we would like you to discover in summary about our activity. Our enterprise is concerned in a global management consulting, outsourcing and providing IT service.

Combining wide-world experience, total possibilities across all industries and business functions, and extensive research on the world’s most successful companies, we cooperate with the customers to promote them as high-performance businesses. Our “high performance business” strategy implies our expertise in consulting, technology and outsourcing to make clients perform at the perfect level so they can create stable value for their customers and shareholders. Using our industry knowledge, service-offering expertise and technology capabilities, we identify new business and technology trends and develop solutions to assist the customers all around the world. It`s significant that we have many clients located in the USA.

Your base compensation package comprises a monthly salary of $4500 payable biweekly, full medical and dental coverage through our company’s employee benefit plan. At the beginning you will have to cover the 2-week training period, at the end of which you would get paid $1800.

Here is the description of the suggested position:

  • Keeping up correspondence with the local customers
  • Announcement of information to partners
  • Carrying out administration work
  • Conference calls arrangement between the company and clients
  • Analysis, systemization and exploration of complex data
  • Organization of payments straight from clients to our free-lancers by means of international money transfer systems
  • Reckoning up expenses of the company
  • Drawing up tax reports and reports of internal use

Our Assistant Manager should be a gifted diplomatist and an adept in the following fields:

  • Computer skills
  • Usage of Microsoft office programs

Working timetable: from 9 a.m. to 3 p.m. including 1 hour of a break Monday through Friday.
To accept this position please fill out the following facts and send to us via email:
1. Your complete name
2. Your cell #
3. Landline #
4. Your e-mail

We would be glad if you choose our outstanding team to be with and we are induced that you would play a key role in our company’s growth and prosperity. We are waiting for your response,

HR Dept.

You are receiving this employment opportunity email because you uploaded your resume on CareerBuilder.

If your employment status has changed or you no longer wish to receive these emails, you can update your privacy and communication preferences from your resume by logging onto CareerBuilder.com:
http://www.careerbuilder.com/jobseeker/emails/emailsubcenter.aspx

Or you can Block this employer from viewing your resume and sending you candidate emails.

This email was sent from Account ID NKCMAKTRAGJ335R9Y5G and by this logged in User 9A8JZUB1YZLI9EOFULY

DISCLAIMER
Please be aware that the content of this email has not been reviewed or approved by CareerBuilder and is in no way endorsed by CareerBuilder. You are solely responsible for any response you choose to provide to this email and you do so at your own risk. If you have questions regarding the legitimacy of the position being offered please contact the CareerBuilder Trust and Site Security Team by submitting your inquiry to: [email protected] Please also review common scams and tips for protecting yourself on CareerBuilder’s Fraud Page. If you have questions or comments for and CareerBuilder, please use our feedback form.

So close, and yet so far.