Re: VPN-enabled advance fee fraud

[Jay Hennigan <jay () west net>]

On 3/19/22 21:23, Andrew G. Watters wrote:
> Nutshell version: a group of criminals who appear to be in Mexico have 
> created an entire fake law firm and deal flow in the U.S., with 
> Photoshopped notary seals and wire instructions.  They reportedly use 
> ExpressVPN-- the owner of the IP block used by the suspects states that 
> it leased the IP block to ExpressVPN under a Letter of Authorization.
>
> The suspects make money by causing victims to wire advance fees to 
> Mexico as part of selling their timeshares, and possibly other 
> transactions.  My client has lost $70k or so thus far. 

At $70K losses I'd recommend getting law enforcement involved rather 
than trying to solve this DIY. There are likely other victims.

--
Jay Hennigan - jay () west net
Network Engineering - CCIE #7880
503 897-8550 - WB6RDV