Scammers abusing stolen photos of Spc. Jisook Castro

[firefly]

Split from viewtopic.php?f=17&t=85934 where teh fake courier used in scam is reported.

The scammers are abusing stolen pictures of a real person: Spc. Jisook Castro. The scammers stole parts of her biography from an official US Army website: https://www.army.mil/article/200299/for ... f_the_year.
They stole the pictures from the real owner social accounts and from the media articles talking about her.

The real person has nothing to do with the fraudsters pretending to be her online.

Type of messages used in fraud:

Right now, everyone of us is moving out his or her share out of Syria and I right now I have to move my share through the United Kingdom Red cross woman that came to give us treatment as she's about returning to her country today , I contacted a woman among them to help me move my luggage into London and deposit it for me in a security company but i don't have anyone to help me receive it so I'm pleading if you can do me this one favor to receive it and keep it safe for me before I recover fully...I love you and trust you so I need you to help me do this one thing honey.

Gallery: https://scamsurvivors.com/piwigo/index. ... egory/2481

[firefly]

Some of the fake accounts active online abusing the stolen identity:

On Twitter:

Jisook Castro
@JisookCastro4
US ARMY CAPTAIN
Damascus Syria
Joined July 2020
1,882 Following
231 Followers

On loving.singles:

Lawan Castrol
28, Woman, Single
Kabul, Afghanistan
Looks for:
Man
40 - 70 years
Within 0 kms
Long-term dating, Short-term dating, Friendship

On InterPals:

jisookcastro007
jisook castro, 31 y.o.
New York, United States [Current City & Hometown]
Speaks Korean
Learning English
Looking for
Friends
Meeting in person
Joined 1 year ago, profile updated 1 month ago.

[firefly]

On Muslim dating sites:

PEICCASTRO
33
FLORIDA, UNITED STATES
Joined: JAN 24, 2020 05:10

I’m a very nice woman and when people meet me, they sense it before long. I love epic movies because I love adventure, stories of the ancient times and anything related to real life story. Family is what I cherish most in life because family is it that hold the present, the future and generations to come

Stolen pictures used:

[firefly]

Multiple accounts are actively used in fraud on Facebook with the same stolen identity and pictures.

Jisook Jisook Castro
Lives in Damascus, Syria
From Los Angeles, California
Single
Joined August 2019

Stolen pictures used:




g

[firefly]

Jisook Castro
Works at U.S. Army
Studied at Seoul National University
Lives in Seoul, Korea

Jisook Castro Jisook
Life Events 2020
Grew up in California, Usulutan, El Salvador - June 25
Grew up in Abuja, Nigeria - January 22
Moved to Ukpo, Anambra, Nigeria - January 12

[firefly]

Jisook Castro
Lives in Damascus, Syria
From Los Angeles, California
Single

Castro Cindy Jisook
Lives in Damascus, Syria
From Los Angeles, California
Single
Joined September 2015

[firefly]

Posted on behalf of the targeted victim:

The kimcastro844 scammer contacted me 15 days ago through my Instagram. And she(?) sent me DM(direct message) in Instagram and asked me to use KakaoTalk to talk. As times go by, she turn to be a member of Advanced Fee scam team as a scammer. The team has a fake bank home page named Arvest Trust Bank and build up fake on line bank account, showing 94 million USD under my name deposited and an alert message came to me to my email.

Then after a couple of the days, they asked 7,200 USD fee in order to receive Automation Code for Transaction.

It is a typical advanced fee fraud and a lot of victims will be produced by this heartless fraud team.
She insisted that all her pictures were stolen and hacked.

[firefly]

The scammer forwarded an email to the targeted victim, allegedly sent to "her" by an investment company:

------------Original Message------------
Subject : Fwd: D&B HOOVERS INVESTMENT
Date : 2020-10-20 02:50:45
From : Castro Kim <kimcastro844@gmail.com>
To :
Cc :

---------- Forwarded message ----------
From: "Hoovers Investment" <Hooversinvestment@usa.com>
Date: Oct 19, 2020 18:23
Subject: D&B HOOVERS INVESTMENT
To: <Kimcastro844@gmail.com>
Cc:

D&B HOOVERS INVESTMENT
M.D DANIEL COLE
1385 HANCOCK STREET QUINCY
MA 02169 UNITED STATES
14 OCTOBER 2020

Hello Castro Kim


This mail is to bring to your notice that the company has decided to release the sum of $94,000.000 (Ninty Four Million US Dollars) belonging to Engr. Jo Kim to his said beneficairy by name Castro Kim. This Fund is part of his own Stake holder shares alocated to the company few years ago. The evaluated sum above has been deposted with Arvest Trust Bank. Here is the fund security number for claims ATB-005-VC88XX8753e5xxxx
Note, You are to contact the bank through this email for futher inquiries: https: // www. secured.atbsavings.com/


Thanks
M.D Daniel Cole

The stolen pictures used in fraud are already reported above.

Fake documents used in fraud:

[firefly]

The fake bank used in fraud claims to be Arvest Trust Bank.

The real Arvest Bank was founded in 1871 and is located in Bentonville, Arkansas, USA.

The fake one was registered in June by someone pretending to be in Texas.

From the fake website:

We've been in business since 1986, have $15.6 billion of assets under administration (at December 2017) and look after the investments of more than 100,000 customers.

Contact details:

USA ADDRESS
6123 Sunrise Blvd
Citrus Heights CA 95610 USA
Turkey Address
1084 Highway 61 S,
Tunica, MS 38676.
atbsavings@customerscareunit.com
+44-7751-453821

+447751453821
Number billable as mobile number
Country or destination United Kingdom
Original network provider* Telefonica UK Limited

Entry in the aa419 Database of fraudulent websites: https://db.aa419.org/fakebanksview.php?key=146813.

From the domain name registration:

Domain Name: ATBSAVINGS.COM
Updated Date: 2020-08-04
Creation Date: 2020-06-04
Registrar Registration Expiration Date: 2021-06-04
Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com

Registry Registrant ID: Not Available From Registry
Registrant Name: David Bohanan
Registrant Street: 401 prospect street Byers tx z 76357 401 prospect street Byers tx z 76357
Registrant City: Byers
Registrant State/Province: TX
Registrant Postal Code: 76357
Registrant Country: US
Registrant Phone: +1.7068796645
Registrant Email: kennybrown081@gmail.com

This is what the fake website looks like:

The fake bank is operated by the same Nigerian group of fraudsters previously reported in viewtopic.php?f=17&t=58291.

[firefly]

Subject : ARVEST TRUST BANK
Date : 2020-10-26 18:00:08
From : atbsavings@customerscareunit.com
To :
Cc :

Arvest Trust Bank Worldwide
Regional Director: Tony Rex.
Bank Email: atbsavings@customerscareunit.com
Date: 26th October 2020

Dear Esteemed Customer Mr. xxx

By (Law No. 5464) Financial Banking Arvest Trust Bank-XX0099 (Official
International Transfer/ No. 10703 Signed 10.01.1961)
Below is the International Transfer Access/Cot code procedures, you are
directed to view the attached document and for your best understanding,
get back to us in request for the Account details for payment.

Sincerely,
Tony Rex
Regional Director
Arvest Trust Bank

*THANK YOU FOR CHOOSING ARVEST TRUST-BANK *
ARVEST TRUST-BANK | CUSTOMER SERVICE EXECUTIVE |

Subject : ARVEST TRUST BANK
Date : 2020-10-27 20:32:11
From : atbsavings@customerscareunit.com
To :
Cc :

Arvest Trust Bank Worldwide
Regional Director: Tony Rex.
Bank Email: atbsavings@customerscareunit.com
Date: 27th October 2020

Dear Esteemed Customer Mr. xxx

The $7,200(Seven Thousand two Hundred Dollars) That`s demand from you is
the fee for the COT(Cost of Transfer) Once the payment is made, An
Automation code will be attach to your Offshore/Foreign account to
enable you complete the transfer of the money to your personal account.
In a case where you are not okay with the International Remittance
Process you may as well inform the direct beneficiary to contact the
bank to avoid your account been frozen/disable.

Sincerely,
Tony Rex
Regional Director
Arvest Trust Bank

*THANK YOU FOR CHOOSING ARVEST TRUST-BANK *
ARVEST TRUST-BANK | CUSTOMER SERVICE EXECUTIVE |