Phish on the line

By joining our community you will have the ability to post topics and access other forums reserved for members. Registration is quick, simple and absolutely free. Join our community today by clicking here.

Hello I'm New here! Joined: 17 May 2007 Posts: 3

Hi,

I'm not really a scambaiter, but a friend of mine replied to a yahoo phish and his e-mail was hijacked.

Once that was done the phisherman sent emails to all the contacts saying he is stranded in africa and needs money to get home.

I replied that I could send 1000 of the 1500 he asked for, and that I thought he was in Guatamala.

at any rate, I have him waiting for money to be sent to the western union.

My friend has tried to contact yahoo, but as yet, hasn't gotten a reply.
Western Union told him to file a complaint with the fbi white collar crime site.

Anyone have any ideas how we can bust the phisher?

Thanks

Posted: Sat May 19, 2007 2:50 am

As stated a lot here, if you're using your real information (email address, etc.) drop correspondence with this person. Read the Stickies on how to bait safely first. You can then re-bait from an anonymous email account with the same message, since the scammer won't be checking your address first.

You can post the mail headers here (omitting any personal information) and we'll see if we can assist in telling you the location of the scammer. I'll be surprised if the scammer is actually anywhere in Africa at all.

Posted: Sat May 19, 2007 4:55 am

Nothing you can do about phishers. Nothing much you can do about the scammer either. I don't quit understand what happened. If your friend gave out his account info and password then hopefully he learned something. I also hope he didn't use that same password for all his other accounts. I assume he doesn't have access to the account any longer. They got into the account using his info and changed the password. Yahoo can disable the account.

Just ignore the emails and move on.

Hello I'm New here! Joined: 17 May 2007 Posts: 3

Thanks for your replies.

He replied to a yahoo phish, gave info. Phisher changed his password and personal info so the victim couldn't recover the account.

Hello I'm New here! Joined: 17 May 2007 Posts: 3

Her's the header info.

X-Originating-IP: [66.163.178.179]
Return-Path:
Authentication-Results: mta192.mail.mud.yahoo.com from=yahoo.com; domainkeys=pass (ok)
Received: from 66.163.178.179 (HELO web34513.mail.mud.yahoo.com) (66.163.178.179) by mta192.mail.mud.yahoo.com with SMTP; Mon, 14 May 2007 11:04:44 -0700
Received: (qmail 73163 invoked by uid 60001); 14 May 2007 18:04:44 -0000

Received: from [213.181.88.76] by web34513.mail.mud.yahoo.com via HTTP; Mon, 14 May 2007 11:04:44 PDT
Date: Mon, 14 May 2007 11:04:44 -0700 (PDT)

Mod edit - edited to break long lines in header to stop forum blowout - SP

Baiting Guru Joined: 08 Jul 2004 Posts: 11857 Location: UK

^^^^^ The headers show the IP is from Nigeria:

Quote:

WHOIS results for 213.181.88.76

Location: Nigeria (high) [City: ]

As has been pointed out, not much you can do apart from contacting Yahoo, which you have done to tell them what happened, they could possibly give you the account back.