Showing posts with label nigerian. Show all posts
Showing posts with label nigerian. Show all posts

Tuesday, October 20, 2009

Arrest Me? Say What?

Has anyone gotten a so-called email from the FBI that says something like a Nigerian or other international bank releasing a large sum of money and mention terrorism? Then it finishes with this;

"So to this regards you are to re-assure and proof to us that what you are about to receive is a clean money by sending to us FBI International Clearance and also Diplomatic Immunity Seal Of Transfer (DIST) to satisfy to us that the money your about to receive is legitimate and real money. If you fail to provide the Documents to us, we will charge you either to U S federal Court or international court of justice and take our proper action against you for not proofing the legitimacy of the funds you are about to receive.

"THIS CONDITION IS VALID UNTIL (date) AFTER WE SHALL TAKE ACTIONS ON CANCELLING THE PAYMENT AND THEN CHARGES YOU FOR ILLEGALL MOVING OF FUNDS OUT OF NIGERIA GOVERNMENT. FUNDS WILL BE RELEASED ON CONFIRMATION OF THE DOCUMENTS."

*sniffing the air* Now that's a whole lot of bovine stinky droppings. Anyone want a cow pattie burger with a large urine?

Those two paragraphs make absolutely zero sense...

Wednesday, December 10, 2008

Sorenson Slammed by Congress

Sherlock Steve forwarded me an email related to Sorenson being slammed by Congress amid their refusal to be audited. The PDF file below is a long read.

Deception and Distrust (PDF file)

Some things hop out at me after a bit of reading the entire file.

"In addition to the issue of overcompensation, there are questions as to whether all of the minutes that TRS providers submit for compensation have actually been incurred by people with hearing or speech disabilities, and whether provider costs are accurate."

No kidding.

The Nigerian scams for one. Then there's the teens who abuse the system.

Didn't the operators just get the power or ability to cancel these kinds of calls without harm to their jobs? Just spend a day with a relay operator and they'll see the kind of calls they get, which are not always from those with "hearing or speech disabilities" as it puts it. Just talk with my interpreter coordinator friend at a local college who works on the side with Sorenson as operator. He's complained about teens who spend hours and hours just talking.

This report, if you can call it one, doesn't even begin to address these issues. But of course, it's just the beginning.

Then there's this memo on page 42, exhibit 3. There's this interesting part... Page 44, Part D(1) under 'Other issues that affect the size an integrity of the fund.' Read also D(2).

"Consumer advocates are strongly opposed to permitting the CAs to terminate suspected fraudulent calls because it would require them to step out of their role as an invisible conduit."

That's something here... Consumer advocates? Just who the hell are they kidding? Are they advocating their own pockets! Sometimes a CA has to step out of their role. In fact, I welcome that when the need arises.

But there may be some CAs who claim these illegitimate calls as legitimate. How is their pay system set up?

Exhibit 5, page 49. ooh... Classic frustration memo writing here. Check the final paragraph on page 53.

Exhibit 6, page 55. "Sorenson did not permit us access to their staff and the relevant systems to document and test the controls associated with accumulating and reporting the minutes." ouch... Next exhibit... Now how are they doing the billing?

Once they answer these basic questions, I'm sure they can find ways to improve the TRS services.

Thursday, November 6, 2008

Nigerian Scam Targets Deaf Youngsters

I just returned tonight from having to deal with someone's teenager who was about to get scammed. I got a copy of the chat log and knew just what was going on. I fired off a response email to all involved including the teen's teachers.

This is what I sent;


I've seen this conversation and this is EXACTLY the thing I have been seeing and hearing about all over the place.

To begin, the screen names they hit/contact can be found in two places.

The first would be from DeafVP, as it has been a major source of live AIM screen names. They would hit you with invites to a website to enter your phone number or similar info. If not DeafVP, it would be found in other places like Facebook.

The second is what I have been seeing more and more often, what you saw with the teen.

What they would do is get the AIM SN owner's password somehow. The first would be either through force or through telling them false stories. If they got it through force, they would have you visit a "poisoned" website which would install something to capture your passwords or other information. This last option I've rarely seen.

When they try to get the person's password, they would tell them that they've won money and tell them other stories. They will say they need your AIM password "to open the briefcase" or to help them in getting their money better.

Once they get the password, they take over the account by changing the password and then abuse it. How exactly they abuse it, I don't know. First, they use one of their own accounts, known as Account A, to make first contact using the "taken" account's buddy list. Then the "taken" account, known as Account B, is used to help fool other people if needed.

Account A has been known to refer to Account B, to gain the trust of the person they're talking with, making it seem like they are talking with their friend on their buddy list. Now and then this is used, but I don't see this often.

If they don't go for the password, like you saw with the teen, they would tell the person stories as to how they need to pay a fee to FedEx on delivery of the "money cash" or winnings. They will ALWAYS ask for your name and address, and to send the fee somewhere or wait for the FedEx or other delivery company.

If you try to tell them that they can take the "fee" out of the money you've "won," they will always tell you that's not how it works. It MUST be cash or something made out to the delivery company. They will not stop, just harassing you. Putting them on ignore is only a temporary measure til they get another IM name.

I received something similar some time ago, but in this case, they said they were a police officer in another state and gave me a URL. When I contacted the real person's office, they were VERY interested in getting the chat log. Another one tried to have me send an employment application to a place in the United Kingdom. When I checked the place of business out, I found they were only located here in the United States.

I have blogged about this before, and you can read it here;

Give Out Your Password? NOT! NEVER!

NEVER Give Out Your Password! (Part two)

For the second posting, there is a link to another article of interest.

Internet scammers target deaf community

If you pass all this around, it would help in reducing the number of people being scammed by these idiots.

Thursday, October 9, 2008

NEVER Give Out Your Password! (Part two)

A month ago, I posted this article, Give Out Your Password? NOT! NEVER! It's even more urgent and very important that you do not even give your password out to anyone, not even someone who claims to be your friend. Here's why;

Internet scammers target deaf community

The scam works exactly the same way in every time. They say you've won money or something like that. In reality, you haven't. The account of someone you know is compromised somehow and this person impersonates them. They'll IM everyone on the buddy list. Then this same person on a second account talks to you, and tells you to talk to your friend or your friend will talk to you.

This is your classic confidence or similar scheme.

How do you defend yourself? A good password not found in the dictionary that's at least 6 characters. That plus never giving out your password to anyone. Even better is to actually pay attention to how your "friend" is typing including use of capitals and lower case and English. There's a way to know if it's your friend or not;

- certain things only you and your friend know, change the details of them.
- Ask them about how their husband/wife is, but this time, use a completely different name.
- Ask if they're going to this imaginary event/movie next month with you.
- If the actual owner of the account has an illness, give a different name than what the illness is and ask them about it. For example, if they need surgery on their arm, ask about their broken leg.

If the person doesn't even make corrections to your 'mistakes'...

BUSTED! COVER BLOWN!

It works every time without failure.

Tuesday, September 2, 2008

Give Out Your Password? NOT! NEVER!

There's some AIM screen names, most notably "powerball4real8," that are being used to scam more deaf out there. Watch also for any with "emerson" in it, like "pacemerson247" that kept getting others. This time it's of someone who is trying to ask you for your password to "open the briefcase" to get the person their money.

First, this is another variation of the Nigerian scam.

Second, this is a gross violation of your account security. Plenty of damage they can do with your account.

Third, it's against the TOS of any service out there to give out your password.

So in short, do NOT give out your password, no matter what. I made this mistake some years ago back in college and had it locked down shortly afterwards. Apparently, someone combined a bunch of files into one huge file and sent it to various people, including the system operators and, unbelievably, the head of operations! Needless to say, I had to do some explaining. I've even broken into a few accounts myself due to weak passwords and my knowing the person well.

Worse stuff can be done with more sensitive accounts. Again, do not give out your passwords. A password like cat-0cargo3 is quite difficult to brute-force crack. The longer your password, the longer it takes.