From ComputerWorld:
Online scammers prep for Gustav, say researchers
"Nearly 100 domains related to Hurricane Gustav have been registered in the past 48 hours, security experts said Sunday, some of which may be used by bogus charity and relief scams after the storm strikes the U.S. Gulf Coast."
Read the full article
Tuesday, September 2, 2008
Subscribe to:
Post Comments (Atom)
Posts
If someone creates a phony charity site. How is it that they can't be traced back?
ReplyDeleteI actually got an email from a website claiming to be a charity raising money for Gustav victims. I didn't open the email because I thought it was just a scam--looks like I was right!
ReplyDeleteHow are the folks at ISC able to monitor all of these websites? If they know they are fake, why aren't they taking action? Are they allowed to take legal action?
It's sad that people take advantage of situations like this. I know in class we have been talking about how World of Warcraft accounts are the #1 sold item in the computer crime world, but I read the full article that Prof. Chapple posted and this really struck me,
ReplyDelete"Several of the domains, in fact, do appear to be parked, or registered but not fleshed out with content. Others, including helpgustavictims.com and helpgustavvictions.net, were for sale on eBay as of midday Sunday. "
Websites made for scamming people were sold on Ebay!!! What?!?! So I was curious and went to Ebay to try and search for such website, and I didn't find anything. I wonder if people involved in computer crimes have a system of selling websites used for scams under other names, because I feel like selling a website like this on Ebay is extremely traceable.
To follow up on what vyvy said, I also would like to know what the law is. Because I feel like somewhere on the website they could put some kind of disclaimer that gets the phising scammers out of trouble.
Cassie,
ReplyDeleteThere are actually websites out there where one can go to report suspect phising sites.
Symantec owns one in which you provide the URL, agree to the terms of use and enter the provided security characters. It is a very quick process which could result in thousand of people saving money.
Here is the link:
https://submit.symantec.com/antifraud/phish.cgi
And if there are any specific sites you have in mind, please follow up.
Additionally, Microsoft and other on-line 'vigilantes' are cracking down by shutting down or 'killing' web-sites and replaces the site with a warning page - "Warning! This was a scam site."
Internet users can also download free toolbars which when active can alert browsers of previously reported scam sites.
Specifically, Netcraft provides one which lists around 6,600 sites.
Hope this helps.
I have recieved a couple of emails asking me to help in the relief of the victims. I did not open them because I am now paranoid about anything relating to my personal information and its security. But I was wondering if the people running those sites would be able to get any information from me if I just opened the email or would I have to actually type in my information in the link that they want me to visit?
ReplyDeleteAlso, if there are so many fake domains out there, how is a person who actually wants to send money to help those in need supposed to do it? I mean what should the average person who might not be able to just look at a page and realize that it is fake do to insure that there money is being put to a good cause?
Excellent questions, everyone. We'll spend some time in class this afternoon discussing the provisions and effectiveness of the CAN SPAM Act.
ReplyDelete