Slashdot Mirror
Web Fraud 2.0 — Point-and-Click Cracking Tools
An anonymous reader writes "The Washington Post's Security Fix blog is running a fascinating series that peers inside some of the Web-based services cyber crooks are using to ply their trade: from masking their identity, to defeating CAPTCHAs, to creating counterfeit documents and validating stolen credit and debit cards. Everyone familiar with this space hears about these kinds of tools and services all the time in the abstract, but the Post blog includes screen shots and background details on the popularity of the services and how each one is helping to bring cyber crime that much closer to the realm of even the most newbie scam artists." Many of these tools require a working knowledge of Russian. Wouldn't surprise me to learn that Chinese-language tools exist too.
Many of these tools require a working knowledge of Russian. Wouldn't surprise me to learn that Chinese-language tools exist too.
Damn. And here I was looking for fraud tools in Klingon. No wonder I can't ever find anything.
Finally, a use for all the Russian courses I took in high school and college.
Faster! Faster! Faster would be better!
Except it isn't a stereotype...it's a statistical certainty. Wouldn't surprise me to learn that English-language tools exist too?
See how stereotype doesn't apply? Probably not.
Often wrong but never in doubt.
I am Jack9.
Everyone knows me.
http://www.spamhaus.org/statistics/countries.lasso
1 United States 1571
2 China 428
3 Russian Federation 305
4 South Korea 197
5 Germany 180
6 United Kingdom 180
7 France 177
8 India 153
9 Japan 147
10 Brazil 147
In other words, the US beats the next 7 countries combined, Germany, France and the UK together beat China and every two of them beat Russia.
We'd be a lot better at fighting the bad guys if we wouldn't assume that "we" are the good guys.
It won't help with intangible goods and isn't practical with gift items, but stores that ship tangible goods can require that the shipping address be the same as the billing address and verify the billing address against information held by the credit card company.
Even verifying only the postal code will make it hard for me to order a computer using your credit card if I'm not prepared to visit your locale to take delivery.
Another technique is to allow exceptions but only if a person picks up the item at the post office or carrier's depot in person, presents ID, and smiles for the camera.
There will need to be a solution for gifts and intangible items.
Knowledge is how to play a game, intelligence is how to win, wisdom is knowing what game to play.
Is today global stereotype day and did I miss the memo ?
Hitting on the Russians seems to be in real fashion these days, you'd almost think there was a political motive behind it. Is France out of fashion or so ?
Really, the reason these tools exist is because there are several requirements before you can deploy these tools, which are:
- access to international banking
- a large base of hackers, preferably unemployed
(I use 'hacker' in its original form)
- organized crime
The USA, China, Germany and Russia all have these in abundance so that's where you will find your toolkits.
MP3 Search Engine
All this really means is that script kiddies can now do identity theft as easily as they can perform DDoS attacks...
http://www.spamhaus.org/statistics/spammers.lasso
1 HerbalKing India
2 Vincent Chan / yoric.net Hong Kong
3 Alex Blood / Alexander Mosh / AlekseyB / Alex Polyakov Ukraine
4 Nikhil Kumar Pragji / Dark-Mailer Australia
Queensland
5 Ruslan Ibragimov / send-safe.com Russian Federation
6 Leo Kuvayev / BadCow Russian Federation
7 Pavka / Artofit Russian Federation
8 Russian Business Network Russian Federation
9 Yambo Financials Ukraine
10 Alexey Panov - ckync.com Russia
If you want made-in-USA tools for this, try searching Google for "craigslist auto posting tool". Google offers seven paid ads for spamming tools and crackers. ("The worlds Best Selling Craigslist software. Works with new CAPTCHA!") Three of them (including one that advertises "Only Automated Solution for the new captcha. Nobody else is automated.") are available through Google Checkout.
This has been going on for months, despite press coverage. I'm beginning to wonder if Google is deliberately promoting tools to kill Craigslist.
The stereotype doesn't imply that the statement is wrong, but why was that statement made about Chinese and not English tools? According to the Spam origin data, English tools are a lot more likely then Chinese tools, so while in itself not wrong the decision to focus on one correct statement while omitting another correct statement speaks of bias and creates an incorrect impression to the casual reader (and if you know the data then you don't need news articles in the first place).
Register of *known* Spammers. I'd expect the much better/less bribe-able police services in the US would encourage Spammers there to stay much deeper underground...
Africa is not a nation. Africa is a continent containing many nations.
512 MB RAM, 20 GB disk, 200 GB transfer, five datacenters. $19.95/month.
Best Western.
Thanks to the War on Drugs, it's easier to buy meth than it is to buy cold medicine!
This data looks good until you consider the fact that a major profit center for certain Chinese nationals is the practice of compromising huge numbers of servers hosted outside China, for the purpose of sending SPAM that won't be stopped by GeoIP restrictions.
Who's making assumptions now?
512 MB RAM, 20 GB disk, 200 GB transfer, five datacenters. $19.95/month.
It is not a stereotype to say that many burglaries are committed by blacks, as this can easily be backed by data. It is stereotypical, however, to say, "All blacks commit burglaries", "Most blacks commit burglaries", or "He is black so he's probably committed burglary."
here.
Best Slashdot Co
Utterly meaningless statistic. Foreign spammers know that their spam must originate from the U.S. or it has an almost 0% chance of reaching American mailboxes. Consequently, they search constantly for server and user machines in the U.S. they can easily compromise.
Are agnostics skeptical of unicorns too?
Offtopic, but I'm glad to learn that there's at least one other person out there who shares my view that santa == satan.
I'd imagine that Klingons would dish out some pretty massive punishment when scammers get caught, so you're unlikely to see many Klingons using these tools.
Perhaps you'd be better to search in Ferenghi?
The botnets that send those spam messages from the Unites States are controlled by Russia(ns). Remember the news a few weeks ago when Russia invaded Georgia and 80% of the world's spam stopped while the botnets switched to attacking the Georgian government's web page?
"I zero-index my hamsters" - Willtor (147206)
Your comment just proves how clueless you are about the spam situation in China.
China is, and has been for several years, a bastion of "bulletproof" hosting. Since you're so clueless about spam, I probably have to explain bulletproof hosting. Bulletproof hosting is a contract with a hosting provider and/or ISP with IP space to burn that doesn't care what you do with that hosting/IP space so long as you pay your bills.
China is also a haven of phishing sites, largely for the same reason and courtesy of a few rogue registrars operating in China.
There's nothing racist about criticizing China for its conduct. What next? You'll be telling us it's racist to criticize Nigeria for being the source of most of the world's 419 spam?
Silly me. I hadn't heard that scammers, spammers, and those who give them shelter constituted a race.
heheh... I don't recall the backstory behind this, but SATAN actually distributed for a while with a utility called "SANTA" that would change the name of the tool (and all references in the docs and so forth) from "Security Analysis Tool for Analyzing Networks" to something like "Security Analysis Network Tool for Administration" in order to get rid of the potentially disturbing acronym.