Cataloguing Phishing and Scamming Attacks

[|3lack|ce]

Do please enlighten us with that url Donkey Punch?

[dinowuff]

This really wouldn't be a bad idea. I agree that there are differences. So you categorize the catalog:

Phishing
Scam
Virus

But then you get into the virus arena where the virus creates an email stating that you need to "click the following link to reset your password" signed computer/company staff.

Of course you only get infected by clicking the link, well wait....

Now I'm confused - it's a virus because it replicates itself
You were tricked into launching the virus (Phishing)
The Trojan installed allows a remote user to steal you bank info (Scam)

S**T this is going to keep me awake all night

Never mind Trend already did this http://www.trendmicro.com/vinfo/default.asp?sect=SA

[b3mok]

Originally posted here by |3lack|ce
I negged you because, yes, that was a very bad post you made. You contributed nothing to the ongoing thread, which has good potential to be used as a learning tool. Evidently someone else agreed with me because the thread quickly became extremely negative. I then greened the original poster and the thread itself to try to keep things going here.

Some of us would dearly love to read and learn about the various scams and phishes going around. This is usually the place where we see them first.

|3lack|ce u negged me coz you can you don't have to give an excuse.
Now if you can keep your ****ing mouth shut let me concentrate on that mails header and by the way have you ever before seen a mail header son?

[MrLinus]

Now I'm confused - it's a virus because it replicates itself
You were tricked into launching the virus (Phishing)
The Trojan installed allows a remote user to steal you bank info (Scam)

I thought worms replicated themselves. I don't know if I'd include Scam in there since it's a trojan (active program rather than social engineering) that steals the info. Most scams usually require the user to do legitimate activities (e.g., transferring of funds) under false pretenses (e.g., the idea that they are going to get rich). The scammer tends to be rather passive for this.

...let me concentrate on that mails header and by the way have you ever before seen a mail header son?

Don't hurt yourself, sweetie.

[dinowuff]

Thanks MsM - I stand enlightened.

I thought that the definition of a virus was 'a program that replicates itself'

I didn't consider the programming vs social engineering aspect.

Yea and b3mok WTF?

[Donkey Punch]

http://personalcreditservices.com/Default.html

Have fun looking around and seeing what you can find that is illegit.

[MrLinus]

I thought that the definition of a virus was 'a program that replicates itself'

Viruses tend to need help replicating continually. It's not just a matter of clicking but doing activity that will cause it to replicate (e.g, macro viruses). Worms, while initially getting help to get started, once started are quite independent creatures.

At least that's the way I understand it.

[vlad warghoul]

Well here is a legit site that tracks phishing scams through the feedback of the user comunitty and there own staff. It will also lend some insight into the world of these scams and how they work. Training, training, training is the answer. Make your users, family members, etc. aware of these and they will not be as effective. Enjoy...

http://www.antiphishing.org/

[Tiger Shark]

b3mok:

Before I neg you... In case you gat banned and I never get a chance to say this.....

I'm negging you because you have all the experience and skill of a retarded slug..... This stuff is at least four years old. HT only received one recently... So what? there are reasons why and I won't speculate on them here.

I'm also negging you because you not only took a stupid shot at HT but you had the incredible stupidity to take one at Ms. M. It shows that you don't pay attention to detail.... Detail is what computer security is all about.... It's the little things like looking to see who the hell Ms. M. _might_ be.... It takes but 30 seconds research to work out that she is, and has been for a long time, the senior administrator here and is well respected by everyone who has ever read anything she posts or responds to. but I guess, in your desperate wandering through the headers of the email trying to prove your worth you forgot the "details" didn't you......

Oh, and, by the way:-

Now i have been a member of this site for some time

registering in Dec 2004 hardly makes you an "old timer".... There are annoying insects that live longer than you have been here....

Now, to the subject at hand......

let me concentrate on that mails header and by the way have you ever before seen a mail header son?

I'll take this in two parts if I may:-

1. What, _exactly_, are you going to show me from these headers? That the email originated from a UK or Dutch ISP, (that's where they often come from), but that the originating IP, if it is present, (some ISP's block the originating IP, did you know that? Didn't think so...), is somewhere in, gosh, Africa????? OMG, unbeleivable..... Son, (and I'm pretty sure i can say that with authority), you will hit a dead end before you start.... It will be an Internet Cafe somewhere in Woga-Woga Chad, (Chad is a country in Africa.... trust me on this one.....). Give up before you start... we've all been down this road years ago....

2. It's cute that you call people "son". You need one of two things to carry it off, preferably both. First you need some age.... I can't say how much of that you have so we'll drop that part. But then, even with the age bit in place you need some experience in what you are talking about coupled with actual knowledge.... Otherwise the "age" thing just becomes "grandpappy yelling at the grandkids" _because_ he's older..... You just did the grandpappy thing.... and failed dismally.... Blackice may not be as old as you but I do know he's smarter than you... I learned that from experience....

Give up reading the headers... this **** is old hat.... Quit abusing people who's shoes you couldn't shine and quit calling people "son".... You don't have the credentials to carry it off....

Now... It's Bam time..... You ever watch Emeril?

[Edit]

OUCH.... A grey down to two reds....

Ohhh.... the power....

Let him be folks.... I'm dying to see the response....

[/Edit]

[Donkey Punch]

It could of been somebody that got banned then signed up again, but it does not sound that way. On with the program