For those that get "Paypal" and "Ebay" emails

Keith Fellmy · #1 09-14-2005, 10:46 AM

This has been posted several times here but I am going to post on the subject again:

I got an email from "Paypal" saying that my account has been compromised and that I need to log in. Well we all know that it is "phishing" so they can get your account and password. I clicked on the link to see the address and it was "http://hometown.aol.de/elisabeth2211/". So it is a complete fake and worse the hacker is lazy. Can't even at least try to make the address look like paypal. These guys are scum.

gambool · #2 09-14-2005, 10:54 AM

I was listening to a radio news article the other day, and it said that within hours of hurricane Katrina hitting, fake websites started to appear taking donations. Thats pretty sick.

SirPsycho · #3 09-14-2005, 04:42 PM

[ QUOTE ]
I was listening to a radio news article the other day, and it said that within hours of hurricane Katrina hitting, fake websites started to appear taking donations. Thats pretty sick.

[/ QUOTE ]

Yea, actually, there were many domains registered with some form of "Katrina" and "charity" or donation related words before it even hit. As soon as it was clear that Katrina was going to cause damage, the scammers prepared. How sick it is to actively try to scam and make money on someone else's downfall.

I wish I would be out some night to have a random person brag about how much they made on a disaster. I would quickly register a domain name in that person's name because they would soon need some charity of their own.

mackthefork · #4 09-15-2005, 11:30 AM

[ QUOTE ]
I was listening to a radio news article the other day, and it said that within hours of hurricane Katrina hitting, fake websites started to appear taking donations. Thats pretty sick.

[/ QUOTE ]

Thats the unpleasant face of capitalism, anything for a $.

Mack

Tater10 · #5 09-14-2005, 11:16 AM

thanks for the link in the OP. I put my info on the site, and it told me my account will not be frozen.

actually, i like putting in fake usernames with passwords as "GoF***Yourself"

ChipFish · #6 09-14-2005, 03:49 PM

[ QUOTE ]

actually, i like putting in fake usernames with passwords as "GoF***Yourself"

[/ QUOTE ]

I do that too!

Joe Taylor · #7 09-14-2005, 02:45 PM

When I get these, and I have some time to kill, I often will fill out everything with false, but close to real, information. Figure that the least I can do is make them go off on a wild goose chase with bad information. [img]/images/graemlins/smile.gif[/img]

captZEEbo1 · #8 09-14-2005, 02:49 PM

[ QUOTE ]
When I get these, and I have some time to kill, I often will fill out everything with false, but close to real, information. Figure that the least I can do is make them go off on a wild goose chase with bad information. [img]/images/graemlins/smile.gif[/img]

[/ QUOTE ]

you are probably wasting more of your time than you are of their time

#9 09-14-2005, 03:23 PM

THX for the post.

CORed · #10 09-15-2005, 12:48 AM

[ QUOTE ]
When I get these, and I have some time to kill, I often will fill out everything with false, but close to real, information. Figure that the least I can do is make them go off on a wild goose chase with bad information. [img]/images/graemlins/smile.gif[/img]

[/ QUOTE ]

I once went to one of these phishing web pages, saved the page to my hard drive, and modified it by putting a javascript loop in it to keep sending the data over and over. If you put a "target" attribute on the HTML form so that the data returned from the site goes into a different window the loop will keep executing--at least in the older version if IE that I was using at the time. I know a test credit card number which has a valid check digit and will pass most validation routines but isn't actually a valid number. I also set up the javascript to put 1 of n where n was the number of iterations I had set the loop for, in one of the address lines. I put obscenities, death threats, descriptions of what their cell mates would do to them in prison, etc. in other fields, but always put my correct email address in. Over the course of a weekend, I sent several hundred thousand submissions to them. Curiously enough, after doing this, the number of phishing emails I get went from 4 or 5 per week to maybe only 4 or 5 per year. This leads me to believe that it's a fairly small group of people that are doing most of these emails, and that they are sharing information.