Just a thought: They don't verify

By joining our community you will have the ability to post topics and access other forums reserved for members. Registration is quick, simple and absolutely free. Join our community today by clicking here.

Posted: Wed Dec 09, 2009 3:23 pm

Since my catcher account receives all the 'goodness' that is spam, as it is intended to do, I occasionally come across the phishing emails. Blah blah blah, your bank account, your email address, your paypal, blah blah blah. So, out of sheer boredom (and from my Linux box of course), I decided to click these amusing links to 'their' pages.

One such link was a phishing attempt using Bank of America. Asking the usual account details. So, for all the spaces to fill in, fake name, address, and when it came to account details, I just put crap such as: @#)(*[email protected]#()*$&)@(#*&$ , pin number: Xdjf, and so forth. Got to the end submitted the details, and then got a thank you page and was directed to the actual front page of said bank.

So since either they are too lazy to implement some kind of error checking, (even if the PIN number would have at least had an error stating that it had to be only numerical values), I was wondering. How much of their time can be wasted if many people decided to throw such crap information on their fake sites? You know, just like baiting lads, and wasting their time. At least until their site gets shut down. Would there be any real point? Thoughts are welcome. Just something to think about.

Baiting Guru Joined: 08 Jul 2004 Posts: 11857 Location: UK

You can use this site for automatically filling out phishers forms with fake info:

www.phishfighting.com

Just leave it running in the background after submitting the phishers url.

Posted: Wed Dec 09, 2009 3:47 pm

Even without verification, it would still be more useful to actually put in the expected content, though fake.
When expecting an account number: $#$&#%^$ is obviously fake, 1827645 is not, therefore they'd actually have to try it to find out Wink

Posted: Wed Dec 09, 2009 3:47 pm

Oh COOL!!!! Thanks! Very Happy

Posted: Wed Dec 09, 2009 3:51 pm

Thats true. With certain bank numbers though, it is alpha-numeric and not always just numeric. The only thing that worries me is that they might become a little less lazy and decide to verify on certain things, like CC numbers. Obviously Visa, Mastercard, etc, have beginning numbers that ID them as said card. And I'm too lazy to find out what it is, nor do I even want to obviously give them that much.

I just wanted a way to make it that much more difficult for them to actually get anything of value. Just like baiters do with their lads, Wink

Posted: Thu Dec 10, 2009 2:21 am

Scam Patroller
Thanks for the phishing site info! I'm going to put it to good use!

Posted: Thu Dec 10, 2009 9:11 am

Thanks SP!
I never heard about that, but I'm using it at the moment Very Happy

Just a thought: They don't verify	View next topic View previous topic