Category: Fight Back

Spamnesty Sharon

Spamnesty at https://spa.mnesty.com/ is a website for creating automated responses to scam and spam messages.

Below is a summary of one such thread of messages generated by spamnesty and the scammer’s replies.

The original scam message is a typical 419 scam – the sender offers the contents of a bank account belonging to someone known to the recipient and there is an odd story about why the recipient is the only who can get the money before the bank shuts down the account. That message is in German.

Spamnesty replies with a computer generated random response

‘Hello,
I talked to my colleagues about this but they seemed to have some apprehensions; namely, they’re worried that the offer isn’t fleshed out enough. Would you be able to go into more detail about exactly how this would be structured?’

As that reply is in English, the scammer switches to English as well.

‘aloha

what is your age?

Where do U now?

I need to consummate talks

I am alone chief 31 y.o. Lady born in Russia’

A strange response by the scammer who seems to have moved onto a romance scam instead of the 419 scam.

Scamnesty replies

‘Hello,
We need more details from you. My colleagues are worried that the offer isn’t fleshed out enough. Could you explain more about exactly how this would be structured?’

Next the scammer switches back to pages of details about the supposed fortune left in a bank account and offers to split the fortune 50:50.

Scamnesty sends a reply

‘Hi, Great, thanks. Could we have a short call to discuss the specifics? What are your contact details? Also, what is your pricing model like?’

The scammer seems to be confused again and sends another strange romance message with excerpts in French this time

‘Bonzur My:-) Let’s smooth small talk!
could we speak?
Where do You stay now?’

Another reply from Scamnesty and the scammer changes to German, then Russian and then Ukrainian and changes tack to offering website design services.

All very confusing, but it was Scamnesty that wasted the scammers time and the scammer got nothing from the exchanges.

Well done Spamnesty

If you have any experiences with these scams do let me know, by email.

Fightback Ninja Signature

Goldman Sachs Fined in Fraud

Goldman Sachs, one of Wall Street’s oldest and most prestigious banks was charged with conspiracy to violate the anti-bribery provisions of the Foreign Corrupt Practices Act, which forbids companies or individuals from paying foreign governments to retain business. The bank will have to pay $2.9 billion in fines over its involvement in a Malaysian bribery scheme.

$1.3 billion will go to the Justice Department; $606 million to Malaysia; $400 million to the U.S. Securities and Exchange Commission; and $154 million to the Federal Reserve. The rest will be split among foreign financial regulators in the United Kingdom, Hong Kong and Singapore.

The Justice Department alleged that Goldman Sachs ignored signs of fraud among some of its senior bankers in a scheme that ultimately led to a Malaysian government-backed economic development corporation being defrauded out of $2.7 billion. About $1.6 billion was used to pay officials in Malaysia and the United Arab Emirates to secure work issuing and selling bonds in international markets.

Goldman earned $600 million in fees for helping that corporation, 1Malaysia Development Berhad, raise $6.5 billion to support energy development in Malaysia, but much of the money was looted, with some used to buy luxury real estate and yachts.

The Malaysian branch of Goldman reached a $3.9 billion settlement with Malaysian prosecutors in July and pleaded guilty to violating federal anti-bribery law in a Brooklyn federal court. Former Malaysian prime minister Najib Razak was sentenced to 12 years in prison by a Kuala Lumpur court for money-laundering connected with the scandal.

If you have any experiences with these scams do let me know, by email.

Fightback Ninja Signature

Spamnesty

The website is spa.mnesty.com and it’s about wasting the time of the scammers and spammers.

This is how they describe their ‘time-wasting’ service.

Spamnesty is a way to waste spammers’ time. If you get a spam email, simply forward it to [email protected], and Spamnesty will strip your email address, pretend it’s a real person and reply to the email. Just remember to strip out any personal information from the body of the email, as it will be used so the reply looks more legitimate.

That way, the spammer will start talking to a bot, and hopefully waste some time there instead of spending it on a real victim. Meanwhile, Spamnesty will send you an email with a link to the conversation, so you can watch it unfold live!

It interacts with the spammer by sending fairly open anodyne responses to each message until the spammer gets bored and gives up. The replies are generic e.g. I’ve talked with my colleagues and we are definitely interested. Can you tell me more’.

Or ‘ That’s impressive. I’m excited to hear more’ Can you provide references?’

And so on.

It doesn’t stop spammers but does occupy them fruitlessly.

If you have any experiences with these scams do let me know, by email.

Fightback Ninja Signature

723 Serious Cyber Attacks Stopped

The job of the National Cyber Security Centre (NCSC) is to protect the UK against cyber threats, whether that’s from hostile nations and groups or simply criminals.

Since it became operational in 2016, GCHQ’s cyber crime defence centre has defended the UK against 1,167 serious such threats.

The majority of the attacks were carried out by hackers “directed, sponsored or tolerated” by foreign governments, according to NCSC chief executive Ciaran Martin.

“These groups constitute the most acute and direct cyber threat to our national security,” he said.

In these days of coronavirus, NSCSC has also had to help protect scientists working on a vaccine, NHS hospitals, essential infrastructure and more.

The Wannacry ransomware in 2017 did huge damage to the NHS hospitals caught out.

NCSC also work to stamp out phishing and similar scams and what they call ‘high commodity attacks’ including the removal of 138,398 phishing sites between September 2017 and August 2018.

Cyber attacks are increasing in volume, scale and range of targets every year so business and all organisations need to take this seriously and protect themselves accordingly.

If you have any experiences with these scams do let me know, by email.

Fightback Ninja Signature

Macs Scambaiting Tips

Mac loves to bait those evil scammers – playing them at their own game. You can read about Mac’s exploits at http://macsbaitstore.com/tips.html

Here are his tips:-

  • Make a fake persona for yourself before you start scam baiting (name, address, phone, etc.) – this will prevent you from making mistakes that will give you away later to the scammer.
  • Use a free email account for your scambaiting – Yahoo, Gmail, Hotmail, Live.com, etc.
  • Don’t give scammer any real information – for obvious reasons…
  • Consider using a Virtual private Network to disguise your IP address. If you have a floating IP address from your broadband supplier then this is not an issue as floating IP addresses only resolve back to your supplier – not to you
  • Do not give them your home phone number – try a service such as k7.net for messages or a mobile – I use a number that always rings, then make some excuse why I never answer (at work, store, etc.).
  • You can set-up a “catcher” account to receive scam emails, and a “baiter” account to carry on the bait. This is sound advice, but not always necessary – you can actually copy a scam email you find on the web or bulletin board and paste it to a new email to “reply” to a scammer. They send out so many emails, they will never know that they never actually sent an email to you.
  • Scambait with your eyes wide open – remember, these are criminals you are dealing with and everything that comes from their mouth is most likely a lie. In the course of the scambait, you will be sworn out, insulted and even threatened.

Treat the Scammers the Mac Way

  • Make their lives difficult! Remember, they will have certain documents already prepared, so ask for other documents as proof. They will send you a “Certificate of Deposit” for a bank account – ask for a current Account Statement instead. Explain that a Certificate of Deposit only shows what was deposited in the account years ago, but not what is in the account now. They will waste valuable computer time making a fake document…
  • If they send you a Passport ID, ask for a Driver’s License and vice versa. Notice that the picture on both is usually the same…
  • Ask many stupid questions and make sure they answer every question you have. They will try to stick to their script – get them off it.
  • Poke holes in all of their ideas, theories, and routines. The typical scammer knows nothing about business or banking, so correct them, question them, suggest other methods, etc.
  • Question every spelling error – even if you do understand what they meant. This will also waste their valuable time.
  • Point out all of their mistakes in documents – scammers don’t bother about details so pick them out and demand explanations.
  • Scammers are constantly getting their free email accounts shut down. Don’t let them get away with this without a fight! I like to tell them ‘that I contacted Yahoo when the mail came back undelivered, and Yahoo said the account was shut down for fraudulent activities’ – make them explain that one!
  • When a bait starts to peter out or if you haven’t heard from the scammer in a while – send them a message ‘that you sent the money via MoneyGram, did you get it yet’. Nothing revives a dead bait like the promise of money!
  • Never, ever let them get in the last word! Remember, one of the main goals is to keep them busy – if they keep replying to your insults, they are not scamming someone else!

For more information, have a look at http://macsbaitstore.com/tips.html

If you have any experiences with these scams do let me know, by email.

Fightback Ninja Signature