Email account phishing bait - ideas

By joining our community you will have the ability to post topics and access other forums reserved for members. Registration is quick, simple and absolutely free. Join our community today by clicking here.

419Eater is my life Joined: 10 Jul 2008 Posts: 366

My RL email address gets a lot of phishing email. A few times a year something like this shows up.

Quote:

Subject: Webmail Account Verification Update!
Date: Thu, 06 Aug 2009 05:04:46 +0200
From: Webmail Service Help Desk <[email protected]>
Reply-To: [email protected]
To: [email protected]

Your mailbox quota has been exceeded the storage limit which is 20GB
as set by your administrator, you are currently running on 20.9GB.

You may not be able to send or receive new mails until you re-validate
your mailbox.

To re-activate your account please click the link below:

http://www.logiforms.c0m/formdata/user_forms/22769_4612653/73972/

Thanks and we are sorry for the inconviniences

Localhost.

----------------------------------------------------------------
This message was sent using IMP, the Internet Messaging Program.

82.128.15.41 Lagos Nigeria

Clicking the link (do this with a separate secure computer) gets a formatted screen looking for

Quote:

Webmail Verification Form
In order to verify your webmail account, please enter your full name, e-mail address, user id and password in the space provided below.

First Name:
Last Name:
Email:
Username:
Password:
Please confirm password:
SUBMIT

The hacked website page in this case should be down within an hour or two.

A few months ago Wrightbhindu posted a mass bait for someone who had been victimized by this type of phishing email.

The real question is starting from the phishing email can we find a way to seriously disrupt this lad. It might be setting up an email account with list of baiter accounts as personal directory list. We can kill the phishing URL in the same way we do now after the bait email information gets through.

That is quite a bit of work with a low protential result.

Ideas?

p.

Not quite a Newb Joined: 05 Aug 2009 Posts: 49

best thing i could think of is, find someone who has an email bomb email and put it in an account and hand it over to the phishers.

you can easily make the email name something like "bank details" or something like that, you know theyll have to open it then haha.

the dumbasses probably have no clue about m@lwarebytes and c0mb0fix

419Eater is my life Joined: 15 Apr 2009 Posts: 296

@pablo

There's a bait running at the moment doing exactly what you're talking about- in the hints & tips forum, entitled "Why would a scammer want a hotmail password". It's an excellent, excellent bait, and has caused the lad many months of pain and has even led to a new M7CN 5ecure world record. Wink

I highly recommend trying same tactic with your own phisher, it's great fun.

Posted: Thu Aug 06, 2009 4:08 pm

Pocket Fisherman, Welcome to Eater! You might want to read the FAQ's found here: http://forum.419eater.com/forum/viewtopic.php?t=5413

And particularly this topic: http://forum.419eater.com/forum/viewtopic.php?t=5413#disallow

Quote:

We do not support the sending of viruses and “trojans” to the scammers, nor attempts to hack or hijack their email accounts and/or computers. Viruses and “trojans” will be unknowingly spread to the computers of innocent people and we are only trying to make it difficult for the scammers. On top of that, the spreading of viruses and hacking attempts is an illegal activity in the UK, where this Board is located, as well as many other jurisdictions. Please do not start topics on such subjects. Such threads can and will be deleted on sight.

419Eater is my life Joined: 10 Jul 2008 Posts: 366

@@Scammy Scameroo Looks like the the general approach I was looking for. I get these once every six weeks or so.

p.

Hellish Taskmaster Joined: 31 Dec 2008 Posts: 537

You could also try phishfighting.com. It types in fake entries so lads don't get many legit bank info.

Posted: Thu Aug 06, 2009 7:51 pm

@ pocket_fisherman

HarvestMoon is correct, we don't send any nasties to the lads. They all operate from internet cafes and it only hurts the cafe owner, not the lad. It's also illegal.

And, Welcome here! Smile

Not quite a Newb Joined: 05 Aug 2009 Posts: 49

@harvest and jose.

yeah, your right. i did read that stuff, but forgot about it. although, youre technically not sending it to them if they are hacking into and email account and taking it lol.

but yeah, would suck for the cafe owners. and probably for someone the lad decided to unleash it on.

419Eater is my life Joined: 10 Jul 2008 Posts: 366

@@GSN_fan ^^^In this case the phishing is for email account information. We do have a chance to misdirect them, perferably to a trap. Even so the trap set up time is quite high to the proability that they will take the bait.

In the bank phishing scams the lads use the bank to validate the information automatically and as good as it may feel they know when they get the information that it is fake or more likely is automatically discarded and they never see it.

The only thing that is even a modestly effective tool in the bank phishing is to take down the hacked page needed for the intermediate transfer point as soon as possible.

Email phishng scams have a lot of lad uses. By taking over an account to some degree they point blame back to the account owner for their activities. Some of them exercise contact lists to send out "I'm Stranded" messages asking for WU cash transfers. Some normally smart high profile people have been caught in this type of scam.

p.

Email account phishing bait - ideas	View next topic View previous topic