Trade Me phishing scam going around

Forums › Off topic › Trade Me phishing scam going around

1 | 2 | 3

1916 posts

Uber Geek
+1 received by user: 105

#441754 20-Feb-2011 21:32

SaltyNZ: Heh, nice. Unlike this guy though, Econet eventually came through, eh Mauricio? ;-)

Econet is bs... They deserted the project.

Nokia2012

108 posts

Master Geek

#441756 20-Feb-2011 21:38

only noobs fall for this the newbies that just buy a computer and go on to the internet

SaltyNZ

8892 posts

Uber Geek
+1 received by user: 9619

Trusted

2degrees

Lifetime subscriber

#441796 21-Feb-2011 07:09

SteveON: bs...

... I need an emoticon for rolling my eyes...

iPad Pro 11" + iPhone 15 Pro Max + 2degrees 4tw!

These comments are my own and do not represent the opinions of 2degrees.

Chainsaw

358 posts

Ultimate Geek
+1 received by user: 15

#441817 21-Feb-2011 09:19

I feel special - I got it this morning at work. ;)

freitasm

BDFL - Memuneh
80682 posts

Uber Geek
+1 received by user: 41136

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#443604 26-Feb-2011 11:01

I will step in with a comment many will think is trolling but it is not.

If you visit this page with Firefox or Chrome you see the request to login... If you visit it with Internet Explorer you receive a red page saying "this site is unsafe" and a link saying you can proceed at your own risk.

And that makes me think, which browser is safer in this situation?

Referral links: Quic Broadband (free setup code: R587125ERQ6VE) | Samsung | AliExpress | Wise | Sharesies

Support Geekzone by subscribing (browse ads-free), or making a one-off or recurring donation through PressPatron.

freitasm

BDFL - Memuneh
80682 posts

Uber Geek
+1 received by user: 41136

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#443606 26-Feb-2011 11:03

Also, garvani managed to get a screenshot for us:

Referral links: Quic Broadband (free setup code: R587125ERQ6VE) | Samsung | AliExpress | Wise | Sharesies

Support Geekzone by subscribing (browse ads-free), or making a one-off or recurring donation through PressPatron.

Geekzone

Want to support Geekzone and browse the site without the ads? Subscribe to Geekzone now (monthly, annual and lifetime options).

SaltyNZ

8892 posts

Uber Geek
+1 received by user: 9619

Trusted

2degrees

Lifetime subscriber

#443643 26-Feb-2011 13:11

I got another this morning. I went to the site -- a different one this time -- and entered about 30 random emails & passwords just to waste a bit of their time. Also informed the owner of the actual domain, who is an artist and would appear to have been hijacked. F***ers.

iPad Pro 11" + iPhone 15 Pro Max + 2degrees 4tw!

These comments are my own and do not represent the opinions of 2degrees.

SaltyNZ

8892 posts

Uber Geek
+1 received by user: 9619

Trusted

2degrees

Lifetime subscriber

#443645 26-Feb-2011 13:17

freitasm: I will step in with a comment many will think is trolling but it is not.

If you visit this page with Firefox or Chrome you see the request to login... If you visit it with Internet Explorer you receive a red page saying "this site is unsafe" and a link saying you can proceed at your own risk.

And that makes me think, which browser is safer in this situation?

IE hasn't been supported on my platform for a while. ;-) OTOH you can add Safari to the list of ones that doesn't popup a warning.

OTOOH there's no attempt to obfuscate the URL; it quite clearly says trademe.co.nz.lots.of.extra.bits.etc... There are some people who would ignore a popup that said "Click here to be brutally murdered" Ok/No Thanks/Fwd to a friend.

iPad Pro 11" + iPhone 15 Pro Max + 2degrees 4tw!

These comments are my own and do not represent the opinions of 2degrees.

SteveON

1916 posts

Uber Geek
+1 received by user: 105

#444414 1-Mar-2011 13:07

Just in...

Your account has a negative balance.

You need to maintain a positive balance on your account. If your account has a negative balance you will not be able to place new listings or use other features that are limited to authenticated members until you credit your account.

You cannot use the funds in your Trade Me account to pay for goods you have purchased on Trade Me or to pay SafeTrader. A $10 minimum payment amount applies, payments for less than $10 may incur a processing fee.

Check your account balance
Credit your account

We appreciate your business!

Administrative Department Team.

SteveON

1916 posts

Uber Geek
+1 received by user: 105

#444415 1-Mar-2011 13:10

Funny how when I login with

f**you
Yourmummas@fat.com

it lets me in and then asks for my credit card details.

SaltyNZ

8892 posts

Uber Geek
+1 received by user: 9619

Trusted

2degrees

Lifetime subscriber

#444416 1-Mar-2011 13:11

Wow, they didn't even spring for a fake domain name. CLASSY. :-)

iPad Pro 11" + iPhone 15 Pro Max + 2degrees 4tw!

These comments are my own and do not represent the opinions of 2degrees.

Mighty Ape

Shop now at Mighty Ape (affiliate link).

SteveON

1916 posts

Uber Geek
+1 received by user: 105

#444417 1-Mar-2011 13:13

And when I pay with the credit card
#: 0000 0000 0000 0000
Name: You F**** C****

It says thanks.

Anyone able to build a bomb script?

SaltyNZ

8892 posts

Uber Geek
+1 received by user: 9619

Trusted

2degrees

Lifetime subscriber

#444419 1-Mar-2011 13:17

SteveON:

Anyone able to build a bomb script?

Was going to say it's probably some poor bastard with a trojaned PC, but the IP belongs to a hosting service:

[greens@ps0kpr ~]$ dig -x 200.87.226.156

; <<>> DiG 9.3.6-P1-RedHat-9.3.6-4.P1.el5_5.3 <<>> -x 200.87.226.156
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 61431
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;156.226.87.200.in-addr.arpa. IN PTR

;; AUTHORITY SECTION:
226.87.200.in-addr.arpa. 3600 IN SOA ns.entelnet.bo. hostmaster.entelnet.bo. 2007041201 3600 900 3600000 3600

;; Query time: 1334 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Tue Mar 1 13:16:24 2011
;; MSG SIZE rcvd: 106

[greens@ps0kpr ~]$

iPad Pro 11" + iPhone 15 Pro Max + 2degrees 4tw!

These comments are my own and do not represent the opinions of 2degrees.

SaltyNZ

8892 posts

Uber Geek
+1 received by user: 9619

Trusted

2degrees

Lifetime subscriber

#444421 1-Mar-2011 13:20

Oh wow, that's the first Bolivian spam I've ever seen...

Dominio: entelnet.bo

CONTACTO ADMINISTRATIVO:
Organizacion: ENTEL
Nombre: ENTEL
Pais: Bolivia
Ciudad: La Paz
Direccion: Ayacucho

CONTACTO TECNICO:
Organizacion: Entel
Nombre: Entel
Pais: Bolivia
Ciudad: La Paz
Direccion: Ayacucho

CONTACTO FINANCIERO:
Organizacion: Entel
Nombre: Entel
Pais: Bolivia
Ciudad: La Paz
Direccion: Ayacucho

Fecha de registro: 2004-11-19
Fecha de vencimiento: 2011-11-19

iPad Pro 11" + iPhone 15 Pro Max + 2degrees 4tw!

These comments are my own and do not represent the opinions of 2degrees.

SteveON

1916 posts

Uber Geek
+1 received by user: 105

#444426 1-Mar-2011 13:24

SaltyNZ:
SteveON:

Anyone able to build a bomb script?

Was going to say it's probably some poor bastard with a trojaned PC, but the IP belongs to a hosting service:

[greens@ps0kpr ~]$ dig -x 200.87.226.156

; <<>> DiG 9.3.6-P1-RedHat-9.3.6-4.P1.el5_5.3 <<>> -x 200.87.226.156
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 61431
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;156.226.87.200.in-addr.arpa. IN PTR

;; AUTHORITY SECTION:
226.87.200.in-addr.arpa. 3600 IN SOA ns.entelnet.bo. hostmaster.entelnet.bo. 2007041201 3600 900 3600000 3600

;; Query time: 1334 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Tue Mar 1 13:16:24 2011
;; MSG SIZE rcvd: 106

[greens@ps0kpr ~]$

So they would have the bandwidth to bomb 100,000 fake cards?

1 | 2 | 3