Warning MAJOR Scam (Full Version)

All Forums >> [General] >> General Discussion



Message

siRkid -> Warning MAJOR Scam (10/14/2004 2:57:11 AM)

If you get an e-mail telling you that you've won a free game, delete it. This is what I just got in the mail. Almost fell for it because they duplicated the company's web site to the letter.

POINT OF ATTACK 2
The most comprehensive and detailed modern combat simulator ever created.
POA2 is a modern tactical level simulation that depicts combat at the platoon and individual vehicle level. By Scott Hamilton.

First top 50 customers get FREE and you are one of them

The most comprehensive and detailed modern combat simulator ever created.
POA2 is a modern tactical level simulation that depicts combat at the platoon and individual vehicle level. By Scott Hamilton.
First top 50 customers get FREE and you are one of them



siRkid -> RE: Warning MAJOR Scam (10/14/2004 3:00:47 AM)

They gave me a number and a link. When I used the link, it took to to a Web site that looked like the real thing. I was entering information into the form but stopped when they asked for my ATM PIN #. Next I used my favorites to go to the the real site and they have a BIG warning posted not to fall for the scam.



tsimmonds -> RE: Warning MAJOR Scam (10/14/2004 3:50:35 AM)

f**king bastards. they should all die.



fbastos -> RE: Warning MAJOR Scam (10/14/2004 4:00:01 AM)

quote:

f**king bastards. they should all die.


I second that! Let's burn them all!!

Oh, wait... not talking about Corporate executives... well, about the scam... yeah, let's burn them too!!!!! [:)]



KPAX -> RE: Warning MAJOR Scam (10/14/2004 5:01:14 AM)

quote:

ORIGINAL: irrelevant

f**king bastards. they should all die.


They all will someday, I promise ......[8D]



Admiral DadMan -> RE: Warning MAJOR Scam (10/14/2004 5:28:51 AM)

quote:

ORIGINAL: Kid

...they duplicated the company's web site to the letter...



And that is sooooo easy to do. I used to sell Network Security, I've seen it and sold on the fear factor.


Here was the biggest tip off for me:

"First top 50 customers get FREE and you are one of them"

Bad Grammar is the #1 tip-off for a scam.



Belce -> RE: Warning MAJOR Scam (10/14/2004 5:48:33 AM)

paypal scams are some of the good ones, once saw one that had all of the links actually go to the correct part on the paypal site and this from an email address that displayed as @paypal. You had to look at the actual header to see it wasn't and view the link as it actually was to see it went to someplace in Rommania instead. Other tell tales were the generic address "Dear Customer", people you do business with like paypal will use your name in emails that request you confirm your credit card information and display the url as http://ourplace/blah/blahblah/ instead of clickable link "paypal" or "this link".

These people are true evil doers.



ckk -> RE: Warning MAJOR Scam (10/14/2004 6:35:25 AM)

Screw the B**tards



siRkid -> RE: Warning MAJOR Scam (10/14/2004 7:23:59 AM)

Here is another one I got a few days ago. Again note the bad gramer "nearest time"

[image]local://upfiles/5534/Ec877328474.jpg[/image]



WiTP_Dude -> RE: Warning MAJOR Scam (10/14/2004 7:48:08 AM)

I got the CitiBank one a few months ago and reported it to the real citibank. Doesn't look like they've done much about it.



fbastos -> RE: Warning MAJOR Scam (10/14/2004 8:05:48 AM)

I'm no network specialist, but I thought that when you buy a domain like "citibank.com", then you would have control over the DNS entries on that domain (like a.citibank.com, xyz.citibank.com, gugu.gaga.citibank.com, etc...).

Therefore, how come someone managed to register a name like web.da-us.citibank.com?

I'm mighty curious about that. Perhaps they managed to steal web.da-us.citibank.com, set their own IP address, and now live of it being replicated around DNS servers on the net?

Mighty curious...

F.



Ron Saueracker -> RE: Warning MAJOR Scam (10/14/2004 8:15:27 AM)

Let's get pissed and go get 'em![:D]



Bodhi -> RE: Warning MAJOR Scam (10/14/2004 8:29:01 AM)

quote:

ORIGINAL: fbastos

I'm no network specialist, but I thought that when you buy a domain like "citibank.com", then you would have control over the DNS entries on that domain (like a.citibank.com, xyz.citibank.com, gugu.gaga.citibank.com, etc...).

Therefore, how come someone managed to register a name like web.da-us.citibank.com?

I'm mighty curious about that. Perhaps they managed to steal web.da-us.citibank.com, set their own IP address, and now live of it being replicated around DNS servers on the net?

Mighty curious...

F.


The displayed address on a web-page or in an html-formatted email isn't necessarily the same as the link address.



WiTP_Dude -> RE: Warning MAJOR Scam (10/14/2004 8:33:18 AM)

quote:

web.da-us.citibank.com


The link probably doesn't actually go to that URL.



Tankerace -> RE: Warning MAJOR Scam (10/14/2004 8:35:37 AM)

You'd think Hackers would finally realize that not everyone on the net is a complete idiot.... oh well, maybe someday.



fbastos -> RE: Warning MAJOR Scam (10/14/2004 8:36:43 AM)

quote:

The displayed address on a web-page or in an html-formatted email isn't necessarily the same as the link address


Ah, good point... these guys are doing a really dumb scheme. Thought they had some sophisticated exploit. Just a bunch of morons passing misleading links around.

F.



WiTP_Dude -> RE: Warning MAJOR Scam (10/14/2004 8:37:57 AM)

There is still enough idiots out there to make it worth their time, expense, and risk. However it should be noted that they are getting more sophisticated in their scams. They are able to get their sites to look almost actually like the real ones.



fbastos -> RE: Warning MAJOR Scam (10/14/2004 8:40:07 AM)

quote:

You'd think Hackers would finally realize that not everyone on the net is a complete idiot.... oh well, maybe someday


Hehehe... don't count me out of the idiots list yet. I typed in web.da-us.citibank.com, and as a page loaded and the links on the page worked I thought "geez, these guys page look very similar to the Citibank one... they are good".

I didn't realize I was on the real Citibank page.. [:)]

F.



WiTP_Dude -> RE: Warning MAJOR Scam (10/14/2004 8:46:28 AM)

Go here and check how they do it. You can't even tell by looking at the address bar:

http://www.fraudwatchinternational.com/fraud_alerts/040430_221_citibank.htm



Nikademus -> RE: Warning MAJOR Scam (10/14/2004 8:56:49 AM)

there's a real easy foolproof way to ID the real mccoy vs the hacker sites.

I'll share my inside knowledge to the first 50 people who PM me their ATM pin #'s......

ACT NOW!



fbastos -> RE: Warning MAJOR Scam (10/14/2004 8:58:30 AM)

quote:

You can't even tell by looking at the address bar:


Oh, these guys managed to place a fake URL on the address bar! Not so dumb scammers...

/renews respect for not-so-dumb scammers
/still hopes the FBI will catch them and send them to Guantanamo Bay

F.



Bodhi -> RE: Warning MAJOR Scam (10/14/2004 9:11:12 AM)

quote:

ORIGINAL: fbastos
Oh, these guys managed to place a fake URL on the address bar! Not so dumb scammers...
F.


Not really, there's a well-known flaw in MS IE (which I assume many people use) which allows an incorrect URL to be shown in the address bar. I guess MS should have fixed it by now, but you can check if your browser is affected at this site http://secunia.com/internet_explorer_address_bar_spoofing_test/



Ron Saueracker -> RE: Warning MAJOR Scam (10/14/2004 10:11:43 AM)

quote:

ORIGINAL: Nikademus

there's a real easy foolproof way to ID the real mccoy vs the hacker sites.

I'll share my inside knowledge to the first 50 people who PM me their ATM pin #'s......

ACT NOW!


Teehee![:D][&o]



Bill Durrant -> RE: Warning MAJOR Scam (10/14/2004 11:11:00 AM)

Guys

I spent a number of years investigating these type of scammers. The majority originate from West African 419 scams - they've just moved on from faxes to e-mail.

If you want to see some great, legal, retribution log on to

www.419eater.com

Make sure you click the important link that will alleviate you of any worries about racist overtones

Enjoy!



strawbuk -> RE: Warning MAJOR Scam (10/14/2004 12:53:55 PM)

quote:

ORIGINAL: Bodhi

quote:

ORIGINAL: fbastos
Oh, these guys managed to place a fake URL on the address bar! Not so dumb scammers...
F.


Not really, there's a well-known flaw in MS IE (which I assume many people use) which allows an incorrect URL to be shown in the address bar. I guess MS should have fixed it by now, but you can check if your browser is affected at this site http://secunia.com/internet_explorer_address_bar_spoofing_test/


@ Bodhi
And that link set my IT helpdesk alarm bells ringing why...?



Bodhi -> RE: Warning MAJOR Scam (10/14/2004 1:25:58 PM)

Don't know why, I'm pretty sure Secunia are a bona fide Danish IT security firm.

The test is just a page with a link showing as www.microsoft.com, and the URL contains a %00 after the www.microsoft.com (and a non-printing character to blank the rest of the line), after which comes the real URL, the Secunia page URL again. If your browser is vulnerable, you'll see www.microsoft.com both in the status bar if you hover over the link, and also in the address bar if you click the link. Maybe your IT desk looks for the classic spoofing "%00" in the address?

BTW, I've just tested it in a version of IE with the latest patches and it seems to display the full URL when you hover over the link and page not found on click. There is another javascript test on the site where you can get www.yahoo.com in the address bar, but a Secunia page displayed. This one's a bit more obvious though as you get the yahoo page displayed for a short time before the Secunia page. The first problem was around for ages before MS finally fixed it, I just wonder how many people aren't aware of it and don't have updated versions of MS IE.



Captain Cruft -> RE: Warning MAJOR Scam (10/14/2004 1:58:32 PM)

<Blatant plug>

You can avoid many of these browser security problems by using the Firefox browser.

http://www.getfirefox.com

</Blatant plug>

P.S. I would never under-estimate the ignorance of the average Internet user. It's a problem that will only go away as the more computer aware younger generations grow up ...



Bobthehatchit -> RE: Warning MAJOR Scam (10/14/2004 2:46:51 PM)

quote:

ORIGINAL: Ron Saueracker

Let's get pissed and go get 'em![:D]


You get the pickup truck and i'll get ma shot guns![sm=00000106.gif]



Admiral DadMan -> RE: Warning MAJOR Scam (10/14/2004 4:10:21 PM)

quote:

ORIGINAL: Captain Cruft


P.S. I would never under-estimate the ignorance of the average Internet user. It's a problem that will only go away as the more computer aware younger generations grow up ...

You're forgetting this: "There's a sucker born every minute."

These email "phishing" scams are the easiest ones to propogate. When they get into actual site hijacking (via poisoning a DNS Server or BGP router) is where the fun really begins.



freeboy -> RE: Warning MAJOR Scam (10/14/2004 8:12:15 PM)

Things thatmake you want to see public executions for high crimes



Page: [1] 2   next >   >>

Valid CSS!




Forum Software © ASPPlayground.NET Advanced Edition 2.4.5 ANSI
1.265625