Friday, December 13, 2013

Boing Boing's report on scammers

Boing Boing has a very interesting article and video on scammers

the story originated here:
http://whambamthankyouscam.com/

http://boingboing.net/2013/12/12/australian-man-travels-to-thai.html




"This story is one of deceit, theft, police incompetence, international loopholes and the apathy of a major corporate bank. It is also his story of how almost entirely on his own he tracked down a sophisticated gang of fraudsters.
This is his second time in Bangkok in two years, and exactly as before, he’d rather not be there, but unfortunately, sometimes, there are things that you just have to do whether you like it or not. He’s about to board an overnight train to Chiang Mai, a 14 hour journey to the north of Thailand. He’s making this film as a record of the atrocious and ridiculous events that have lead him to this point. He’s also making it as some sort of catharsis. Finally, he’s making it as a stark warning to others.
Life can be strange sometimes. One minute, you can be travelling along thinking that everything is okay, and almost out of nowhere, the malicious actions of another person can affect your life forever. His story begins back in Australia. He was working from his office one day, when the phone rang. It was the company calling themselves Humphrey Capital Investments, a global financial services group with offices in California and Singapore. Over the coming weeks, he had several informal conversations with their senior portfolio manager John Thompson. One of his recommendations was to invest in Nokia shares. This seemed to present a good buying opportunity.
Humphrey Capital Group sent him client forms, and after processing his application, they bought Nokia shares on his behalf. He subsequently paid the invoice by bank transfer to their company account at an HSBC bank in Hong Kong. Over the coming weeks, John Thompson rang him several times to discuss his portfolio, but at the end of the month, he rang to tell him that his company had been bought out by a group called Wellnic Investments. His new advisor would be Edward Martin, the Vice Chairman of Wellnic Investments. Wellnic’s credentials looked similarly impressive, and their website showed detailed information on the company.
A few days later, he had a call from Edward Martin, and like his predecessor, Edward had an American accent and came over as professional and friendly. He explained that he’d be his new advisor, and he looked forward to a long and profitable relationship, and that’s exactly how it turned out to be. Over a very long period, Keith Jones purchased a variety of low-risk US stocks, trusts and deposits. All trades were paid for through account at a HSBC Bank in Hong Kong.
Subsequently, like the proverbial lamb to the slaughter, he continued to make investments through the Wellnic Group. Within 12 months, he’d invested over $110,000 US dollars. Even saying it now makes him feel quite sick. You often hear that people are scammed through greed, and where unrealistic returns are involved, but most of his investments with Wellnic were supposed to pay around 10 to 12 percent per annum; good, but at the time, not unrealistic. In fact, it was only when things started to sound too good to be true that he became suspicious."

Tuesday, December 3, 2013

hacker experiences

Recently a server at the office I work for, was hacked by some chinese dude.
The guy managed to log into the server, create his own profile with his (chinese) name and change the passwords of the other users, effectively locking us out.

After gaining control of the server, I found out that he had downloaded and installed 2 programms
one called 360 safety guard, the other called safedog.

Now I am not sure what exactly those are, but from their webpages, it seems that they are antivirus software and firewall, from what  gather.
Quite odd that a hacker would secure the system he just hacked in...

Wednesday, November 13, 2013

scam job emails continued, Email απάτη για εύρεση εργασίας @job-greece.com (TOBLER GROUP)

Είχα καιρό να ανανεώσω αυτή τη λίστα, αλλά δυστυχώς δεν σταμάτησαν να έρχονται αυτά τα σκουπιδοημεηλ δήθεν προσφέροντας εργασία. Το κακό στην υπόθεση είναι ότι χρησιμοποιούν masking για να κρύψουν την πραγματική διεύθυνση αποστολής όπως φαίνεται πιο κάτω από διευθύνσεις της google και εμφανίζουν ως email αποστολής, email εταιριών ή και ατόμων που ουδεμία σχέση έχουν μαζί τους.
(update: βλέπω έχουν και αγγελία στο Poulato.gr
http://www.poulato.gr/asdfasfd-81798 )

Myron@job-greece.com
Gerard@job-greece.com
Natalie@job-greece.com
Briana@job-greece.com
Rodney@job-greece.com
Evan@job-greece.com
Natasha@job-greece.com
Genaro@job-greece.com
Tod@job-greece.com
Tanisha@job-greece.com
Dora@job-greece.com
Melody@job-greece.com
Mel@job-greece.com
Brandy@job-greece.com
Jon@job-greece.com
Lorenzo@job-greece.com
Millard@job-greece.com
Kirk@job-greece.com
Gale@job-greece.com
Cody@job-greece.com
Marcelino@job-greece.com
Joseph@job-greece.com
Daryl@job-greece.com
Raymundo@job-greece.com
Irvin@job-greece.com
Jamie@job-greece.com
Jermaine@job-greece.com
Natasha@job-greece.com
Rolland@job-greece.com
Sylvia@job-greece.com
Errol@job-greece.com
Matthew@job-greece.com
Gavin@job-greece.com
Luther@job-greece.com
Katherine@job-greece.com
Humberto@job-greece.com
Sonny@job-greece.com
Darlene@job-greece.com

madonnar0@vodafone.com
barracudaw702@livenirvana.com
spanish00@vodafone.com
lathertgl@vodafone.nl
slanderersh8@ups.com
duhe87@gmail.com
exhibitedko597@google.com
collectiveow065@google.com
moused@google.com
molierenu71@google.com
watersidesg@google.com
brutef61@google.com
communicativenv26@google.com
fraud@aexp.com
posterity0@google.com
vinegaryu4@google.com
pertest5@google.com
reapej0@google.com
mutesus87@google.com
condimentc@google.com
bayouf1@google.com
spokenyn@google.com
roentgenuqx@google.com
jayapuraiu0@google.com
vest21@google.com
surnamesc0@google.com
whig98@google.com
cookingi9@google.com
delphic36@google.com
comforters80@google.com
stepfathersi4@google.com
walleyedf95@google.com
supervenedh888@google.com
overbite62@google.com
abortionistg41@google.com
warlock8127@google.com
mazarintke6@google.com
christeningsqs20@google.com
buildsu664@google.com
tsunami77@google.com
autoingf91@google.com
slantwisei14@google.com
pedimentud3@google.com
mudguardsj343@google.com
tearfullyvx0@google.com

Ακολουθεί ένα παράδειγμα του τύπου των email που στέλνουν


Απαιτείται Επιχειρησιακός διοικητής

ΘΕΣΗ: Επιχειρησιακός διοικητής

ΓΙΑ ΤΗΝ ΕΤΑΙΡΕΙΑ
Tobler Group δημιουργήθηκε για εξαιρετικούς ανθρώπους με χαρακτήρα.
Εκείνους οι οποίοι διαθέτουν ηγετικές ικανότητες και τα ταλέντα στις πωλήσεις, η εταιρία τους οδηγεί στην κορυφή της επιτυχίας. Η εταιρεία δημιουργήθηκε για επαγγελματίες, οι οποίοι προσπαθούν να φθάσουν το ανώτατο όριο του επαγγελματισμού τους.

Ελπίζουμε ότι θα θελήσετε να γίνετε ένα πολύτιμο μέλος της αποκλειστικής ομάδας μας και σας προσκαλούμε να μάθετε περισσότερα για την εταιρεία και τις συναρπαστικές προοπτικές που σας περιμένουν στη Tobler Group.

Πράκτορες πωλήσεων της Tobler Group – είναι μια επίλεκτη ομάδα των αποδεδειγμένων εμπειρογνωμόνων στον τομέα ακίνητης περιουσίας με εμπειρία, γνώσεις και δεξιότητες που επιτρέπουν στους πελάτες μας το καλύτερο επίπεδο εξυπηρέτησης.

Με χαρά σας καλωσορίζουμε μεταξύ μας!

ΥΠΟΧΡΕΩΣΕΙΣ ΤΗΣ ΘΕΣΗΣ
Τήρηση του ακριβούς μητρώου συναλλαγών.
Διαχείριση και παρακολούθηση των συναλλαγών πληρωμών.

ΑΠΑΙΤΗΣΕΙΣ Κατά προτίμηση, η βασική δευτεροβάθμια εκπαίδευση ή πτυχίο λυκείου.
Η προσοχή στη λεπτομέρεια.
Η ικανότητα να κάνετε πολλές εργασίες ταυτόχρονα.

Μισθός - βασίζεται στην επαγγελματική πείρα.

ΝΑ ΥΠΟΒΑΛΩ ΤΗΝ ΑΙΤΗΣΗ ΤΩΡΑ:
Παρακαλούμε να στείλετε το βιογραφικό σας σημείωμα στο Myron@job-greece.com και θα διαβιβαστεί στο Τμήμα Ανθρώπινου Δυναμικού.


We are looking for fresh, fun and friendly people to join our great team.
Shifts are Monday - Friday with weekend hours on request.
Working schedule is no more than 2 hours a day and no later than 6 pm.
The only experience we require is your own.

We hire regional Representatives from all European countries.
We are looking for friendly people who can assist our clients with basic front line support (mainly advertising of products).
The position is open to nationals and those with working holiday visas.
Salary ranges from 1500 EUR to 2500 EUR per month depending on experience.

Please note that it is a distant hiring and you can work from anywhere spending only few hours a day.

Like to know more? For further details, please provide your contact information (e.g. your First and Last name, country of residence, telephone number and email address) and our HR representative will call you to provide detailed explanation.

A few simple questions will be asked so we advise you prepare for this.
Questions will not be about the role/industry but rather your past experience and future goals.

Do not hesitate to contact us at any time if you have any queries.
We look forward to hearing from you soon.


please contact us at the following e-mail address: Briana@job-greece.com.

Monday, November 11, 2013

http://www.pcmshop.info/ extreme caution suggested

I was looking to buy something as always and I stumbled upon this website
http://www.pcmshop.info
now the price seemed decent, but I decided to do some searching first.
My observations:
The prices I see are listed in british pounds. While the "contact us" information states they are based in the US. Now that is not unlikely, but usually you have to choose your currency. Automaticaly is turned in the currency the company is based on.
They do not list a phone number.

the most striking thing though was that in the contact page they mention that
"1) We do not sell. 
 2) Our site provides only information."

What the fuck?
I am going to pay 100 quid to receive information?

the other interesting thing is that they do seem to have a shopping cart, but no button to buy the items you want.
What the heck Jose?

Friday, August 30, 2013

The Longform Guide to Craigslist Crime

Slate has an interesting article about online scammers on Craigslist.


Sunday, August 18, 2013

RODOS ELECTRONICS: Η ΕΠΙΤΟΜΗ ΤΗΣ ΑΠΑΡΑΔΕΚΤΗΣ ΕΞΥΠΗΡΕΤΗΣΗΣ ΠΕΛΑΤΩΝ/ RODOS ELECTRONICS: The epitome of unacceptable customer service

Μπήκα λοιπόν στο RODOS ELECTRONICS για να ρωτήσω αν υπάρχει κάτι για να φτιάξω κάτι ηλεκτρονικό που έχω κατά νου. Κάτι έτοιμο αν υπάρχει, ή κάτι να φτιάξω από το μηδέν. Ρωτάω λοιπόν τον πωλητή εκεί, κάτι άρχισε να μου λέει, μετά με ρώτησε τι το ήθελα αυτό, και μετά από ένα λεπτό συζήτησης παρεμβαίνει ο τύπος στο βάθος.
- Τι θες να κάνεις;
- Αυτό.
- Φιλαράκι, μπλα μπλα μπλα;
- Δεν ξέρω για αυτό ήρθα εδώ για να βοηθήσετε αν θέλετε Θέλω να κάνω αυτό υπάρχει κάτι απλό και έτοιμο ή όχι και αν όχι να το φτιάξω.
- Τι θες να κάνουμε; Τη θεωρία της ηλεκτρονικής; 
- Μα...
- Υπάρχει κάτι κάνει 100 ευρώ, θες;
- Ήλπιζα σε κάτι πιο οικονομικό αν υπάρχει.
- Είναι να να πηγαίνεις σε ένα μπουρδέλο και να θες ψηλή, ξανθιά, γαλανομάτα Ρωσίδα με 10 ευρώ γίνεται; Δεν γίνεται.

Σε αυτό το σχόλιο έμεινα πραγματικά άφωνος. Τι να του απαντήσω; Ότι παρομοίαζε το μαγαζί του με μπουρδέλο; Ότι μιας και φαινόταν γνώστης θα ήθελα να ήξερα αν η γυναίκα του ξέρει ότι πάει σε μπουρδέλα; Ότι βρίσκω δωρεάν ψηλές γαλανομάτες Ρωσσίδες αν θέλω; Ότι μπορεί να μην είμαι ηλεκτρονικός, αλλά διαβάζω και μαθαίνω; Ότι είναι απαράδεκτος από κάθε άποψη; Ότι με κάτι τέτοιους η Ελλάδα έφτασε να κολυμπάει στα σκατά;
Έκανα μεταβολή και καθώς έφευγα άκουσα ένα θόρυβο σαν να καθαρίζει τα χέρια του δείχνοντας φαντάζομαι στον άλλο που εν τω μεταξύ είχε καθίσει στο γραφείο του στο βάθος πως ξεμπερδεύουν από ανθρώπους που δεν θέλουν να πετάξουν 100 ευρώ.

Όπως και να έχει, κατάφερε αυτό που ήθελε: το πόδι μου εκεί μέσα δεν το ξαναπατάω σε καμία περίπτωση.
UPDATE: Μετά από ψάξιμο 15 λεπτών στο Ιντερνετ, βρήκα την απάντηση που ήθελα SPDT relay.
http://www.quasarelectronics.co.uk/dc-motor-reversing-circuits-automatic-remote-control
Χωρίς να μάθω ηλεκτρονική θεωρία, χωρίς να πάω να ξοδέψω το χρόνο μου να με μάθει ο παραπάνω απαράδεκτος τύπος, χωρίς να πετάξω δεκάρα τσακιστή σε αυτόν και το μπουρδέλο του.
Και το κόστος αυτού; 10 ψωροευρώ.
http://www.quasarelectronics.co.uk/Item/8045-2-channel-5a-spdt-mains-relay-board
Θα πάω να το ψωνίσω στον Φρατζή και αν δεν έχει, θα το παραγγείλω online.

The story in english.

So I walked in RODOS ELECTRONICS to ask if there is something to make something electronic I have in mind. Something ready if exists, or something to make it from scratch. So I asked the seller there, he started telling me something, then asked me what I wanted this, and after a minute discussion the guy in the back of the store got involved.
-Rep- What are you doing?
-Me- This.
-Rep- Dude, blah blah blah?
-Me- I have limmited knowledge on the matter and I came here seeking for advice. If you want to help and this is something simple and ready manufactured or if not, make something from scratch.
-Rep- What do you want me to do? Teach you the theory of electronics?
-Me- But ...
-Rep- There something that costs 100 euros. Do you want?
-Me- I was hoping for something cheaper if exists. (considering that all e-shit are manufactured in China for pennies)
-Rep- Dude let me tell you this: Is it like going to a brothel and wanting a tall, blonde, blue-eyed Russian for 10 euros. Is it possible? It is not.

That comment left me really speechless. He was comparing his shop to a brothel; He was telling me that he is familiar with brothels and I was wondering if his wife knew about it. Should I mention that I can find tall, blue-eyed, Russian or other ethnicity girls for free if i wanted to? I may not be an electronic engineer but I read and learn. Should I tell him that he is unacceptable from any aspect? This kind of behavior brought Greece in the deep shit we are currently in.
I turned to leave and as I was leaving I heard a noise like cleaning his hands I imagine pointing to the other rep in the shop who in the meanwhile sat at his desk at the back of the shop how to dismiss people who do not want to throw away 100 euros.

Anyway, he succeed: I am not stepping my foot in his shop ever again for any fucking reason.

Update: After a 15 minute search online i found the answer I was looking for: SPDT relay.
http://www.quasarelectronics.co.uk/dc-motor-reversing-circuits-automatic-remote-control
Without learning the whole of electronic theory, without wasting my time for the above unacceptable dude, without wasting a dime to him and his whorehouse.
And the cost of the spdt relay? 10 fucking euros.
http://www.quasarelectronics.co.uk/Item/8045-2-channel-5a-spdt-mains-relay-board
I will buy it at Fratzis shop and if he doesn't have it, I will buy it online.
So long mothafaka

Tuesday, June 4, 2013

Analysis on how ransomware works

Brian Krebs offers an in-depth look at a "cashout" service used by ransomware crooks to get money from their victims. Ransomware is malicious software that encrypts your personal files and demands that you pay a ransom for the key to decrypt them; the crooks who run the attacks demand that their victims buy prepaid MoneyPak cards and send the numbers for them by way of payment. But converting MoneyPaks to cash is tricky -- one laundry, which pipes the money through a horse/dog-track betting service -- charges a 60% premium.First seen on Boingboing
Actual link on Krebsonsecurity