Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Phishing sites targeting scammers and thieves

krebsonsecurity.com

Post reply on HN
Print view View original

11–19 of 19 posts

Re: Phishing sites targeting scammers and thieves

#11

Post by mannerheim »

burnished wrote: post #5
j_walter wrote: post #2

Good! If people are too stupid to realize a scam like this or pay for something illegal then they deserve to get bilked for a few hundred bucks.

I just want to contest the "too stupid to realize a scam" bit, in part because of the idea that stupid people are deserving of mistreatment (they aren't), but mostly because stupidity has very little to do with it. Vulnerability has a lot to do with. Most of the time, most people aren't vulnerable to scams. Thats the trick though, a successful scam is about finding people who are temporarily vulnerable. And everyone…

I'd agree, but the victims in this case seem to be buying stolen credit cards. They fully deserve to get ripped off in this case, it's instant karma.

Also the perfect victims - what are they going to do, complain to the police that their stolen credit card vendor ripped them off?

Re: Phishing sites targeting scammers and thieves

#12

Post by wmf »

unstatusthequo wrote: post #9
0xbadcafebee wrote: post #3

This reminds me of my friends that used to take over botnets and turn them on the C&C servers of other botnets. One guy tried to pay in bitcoin to get his botnet back. That would have been a couple million dollars worth these days... :-/

And unfortunately “hacking back” is still hacking according to the laws of the U.S. currently. Which might explain why cyber crime is way up. No downside for threat actors.

I think there have been a few exceptions where US authorities have authorized "technical action" against botnets and such.

Re: Phishing sites targeting scammers and thieves

#13

Post by Y_Y »

r00fus wrote: post #10
unstatusthequo wrote: post #9

Earlier quoted context omitted.

And unfortunately “hacking back” is still hacking according to the laws of the U.S. currently. Which might explain why cyber crime is way up. No downside for threat actors.

So do we need some "privateers" or would that be too dangerous?

Just live in Tunisia or Barbados like a real pirate.

Re: Phishing sites targeting scammers and thieves

#14

Post by logshipper »

> DomainTools’ record for briansclub[.]com says the domain was abandoned or dormant for a period in 2019, only to be scooped up again by someone in May 2020 when it became a phishing site spoofing the real BriansClub.

Reminded me of the recent AskHN thread on the profitability of domain squatting: https://news.ycombinator.com/item?id=28106113

I wonder if we'll see more of such criminal-scamming operations after the government sting operation that leveraged a compromised app: https://www.washingtonpost.com/world/2021/06/08/fbi-app-arre...

Re: Phishing sites targeting scammers and thieves

#16

Post by mrkramer »

wmf wrote: post #12
unstatusthequo wrote: post #9

Earlier quoted context omitted.

And unfortunately “hacking back” is still hacking according to the laws of the U.S. currently. Which might explain why cyber crime is way up. No downside for threat actors.

I think there have been a few exceptions where US authorities have authorized "technical action" against botnets and such.

Unauthorized computer access in still unauthorized doesn't matter if you hack back and take over a botnet from cyber-criminals.

Yea there are exceptions where US authorities together with Microsoft sinkhole, takeover and shut down botnets. Why Microsoft? Because majority of botnets are botnets of compromised Windows computers.

Re: Phishing sites targeting scammers and thieves

#17

Post by 0xbadcafebee »

gricardo99 wrote: post #4
0xbadcafebee wrote: post #3

This reminds me of my friends that used to take over botnets and turn them on the C&C servers of other botnets. One guy tried to pay in bitcoin to get his botnet back. That would have been a couple million dollars worth these days... :-/

sounds fascinating, and fraught with peril. I'd be worried that either I'd make myself a target for these hackers/scammers, or law enforcement. Granted most of the hackers/scammers probably aren't very skilled, but if you crossed one that really knew what they were doing... yikes! I'd also be worried the FBI would eventually come knocking. I'm not so sure the FBI would distinguish between someone "liberating" a botne…

It's not that risky. Most people over-estimate both the criminals and law enforcement.

In general, the FBI aren't looking for you. Somebody has to lose a lot of money and report you, or rat you out, or make up some bullshit about terrorism (like SWATing for black hats). It's also not hard to hide your connections from them. The people who get caught are ratted out by their friends and are very predictable.

In terms of "crossing someone"... these are script kiddies who paid for some malware on a forum, or paid for someone to build them a botnet. Most takeovers happen via social engineering... these people aren't very smart. Even if a criminal gang wanted to track someone down, it would be pretty hard if you did the least amount of covering yourself and didn't tell anyone. But hackers can be lazy and have big mouths, so...

Re: Phishing sites targeting scammers and thieves

#18

Post by daveray120 »

Mr Jim Uber helped me to recover back my lost bitcoins just by using a software which I paid for and He asked me to recommend more friends.

I will recommend anyone looking for how to recover back their lost Bitcoins to contact Mr Jim Uber right now,

contact his email now : jimuberservices@gmail.com or whatsapp him now +19784003014

because he is a Professional and He works with BlockChain company.

regards

Re: Phishing sites targeting scammers and thieves

#19

Post by JanDietch »

Get in touch with coinwalletrecoup . com to help you recover all your scammed funds. I got in touch with them when i was scammed by Tradestation to be precise, having deposited over $75,000 but still couldn’t withdraw any funds. They kept on telling me to deposit more to reach a certain amount but still couldn’t withdraw then it dawned on me that these people were playing games with my money. Within a week of contact, Coinwalletrecoup . com did the impossible, they recovered everything and also my ROI for the agreed duration of investment. Dont hesitate to contact them if you need any help. They’re the Best out there.
Post reply on HN