esterday the domain cdn.adservecoin.com, registered on the 13th of August 2013 by Alexey Prokopenko via todaynic.com, was caught pushing PWS: Win32/Fareit via a malvertisement on a website with a very high Alexa rank.If we go by the URL scheme, victims might have seen an advertisement urging them to update their Flash Player.The RSN website and all of our publications (including social media) are maintained by our own staff to provide the most up to date information about active scammers from around the world and how to avoid them or recover from them available anywhere.Be sure to use our search feature to locate scammers you may suspect or to report them here.The payload, PWS: Win32/Fareit tries to retrieve stored website passwords from browsers including Chrome, Firefox, Internet Explorer, and Opera.It also tries to steal stored account information from several FTP clients or cloud storage programs.Two Ontario firms have notified us that they received an email from the purported Michael Garry and Artona Textiles looking to retain them with regards to a commercial debt collection.This appears to be a bad cheque scam that presents as legal matter requiring the assistance of a lawyer.
Text is available under the CC BY-SA 4.0 license; additional terms may apply.
Romance Scams Now™ is the world's leading private anti-scams organization. It's founder was involved in combating online fraud since 1991.
As of July 2017, Romance Scams Now is now a privately funded division of the Society of Citizens Against Romance Scams [SCARS].
From: micheal garry [email protected] Subject: debt Date: September 13, 2016 at AM EDT To: [email protected] Reply-To: [email protected] Hello Counsel, On behalf of my Company and as a matter of urgency, we request your legal services and possible representation on a Debt issue. Sincerely, Michael Garry Director of operations ARTONA TEXTILES LIMITED 143 Atlantic Road, Portrush, Co. We use this information for the warnings we post on Avoid AClaim.
Do let us know if you are currently accepting new clients. We do not disclose the names of firms that have provided us with information.