Rubriik: Pettused

Spämmijad hüvitavad kogu kahju

Minuga võttis ühendust ÜRO peasekretär isiklikult 🙂

Ban Ki-Moon kirjutab nimelt, et pidas 7 kuud Nigeeria pealinnas Abujas ÜRO peasekretäriga (ma saan nii aru, et siis iseendaga) koosolekuid ning otsustas kompenseerida rahalise kahju, mida paljud isikud on petuskeemides kandnud. Näib, et justnimelt mina olen üks 221-st õnnelikust, kellele ÜRO on otsustanud joosvale arvele kanda pool miljonit dollarit, kusjuures ma ei pea isegi tõendama, et mult üldse raha on varastatud. Vastupidi, mul palutakse kogu lugu salajas hoida ning saata oma andmed kähku Londonisse, Iirimaale, et nende põhjal mulle tÅ¡ekk välja saata.

Ups, ega ma vist poleks pidanud seda kirja siia lisama ka:

Dear BENEFICIARIES.

SCAMMED VICTIM/$500,000 BENEFICIARIES.
REF/PAYMENTS CODE: 02007 $500,000,00.USD.
This is to bring to your notice that We have been having a meeting for the passed 7 months which ended 2 days ago with the secretary to the UNITED NATIONS. On this faithful recommendations, I want you to know that during the last U.N. meetings held at Abuja, Federal Republic of Nigeria, it was alarmed so much by the world in the meetings on the lost of funds by various individuals to scams artists operating in syndicates all over the world today.

In other to compensate these victims, the U.N Body is now paying 221 victims of this operators $500,000,00.USD each in accordance with the U.N recommendations.

Due to the corrupt and in-efficient Banking Systems in Federal Republic of Nigeria, the payments are to be paid by UNION BANK PLC as corresponding paying bank under funding assistance by United Nation body.
Benefactor will be cleared and recommended for payment by UNION BANK PLC Nigeria.According to the number of applicants at hand, 184 Beneficiaries has been paid, half of the victims are from the United States ,we still have more 37 left to be paid the compensations of $500,000,00.USD each.
Your particulars was mentioned by one of the Syndicates who was arrested as one of their victims of the operations, you are hereby warned not to communicate or duplicate this message to him for any reason what so ever as the U.S. secret service is already on trace of the other criminals.

So keep it secret till they are all apprehended.Other victims who have not been contacted can submit their application as well for scrutiny and possible consideration. You can receive your compensations payments via, DRAFT/CHEQUE PAYMENTS.
You are advised to contact Dr. Davidson Moor of UNION BANK PLC, as he is our representative in Nigeria, contact him immediately for your Cheque/International Bank Draft of $500,000,00.USD This funds are in a Bank Draft for security purpose ok? so he will send it to you and you can clear it in any bank of your choice.
Therefore, you should send him your full Name and telephone number/your correct mailing address where you want him to send the Draft to you.
Contact Person: Dr. Davidson Moor
Director,International Banking Dept
UNION BANK PLC
Email: uniontransferhomeplc1@london.ir

Thanks and God bless you and your family.
Hoping to hear from you as soon as you receive your payment.
Making the world a better place.

Regards,
Mr. Ban Ki-MoonSecretary General (UNITED NATIONS).
SCAMMED VICTIM/REF/PAYMENTS CODE: 02007 $500,000,00.USD.

Ausalt öeldes ma otse imetlen spämmikoostajate leidlikkust ja omapärast huumorimeelt 🙂

Domeeniskämm

Veidi enam kui kuu aega tagasi suleti turvakogukonna ühiste jõupingutuste toel üks suurimaid pahatahtlike domeenide registraatoreid Atrivo (ülevaade Atrivost, PDF, 2MB). Ent kurikaeltele tuleb au anda – selmet nina norgu lasta ja endale muud rakendust otsida, said nad raskest olukorrast hoopis inspiratsiooni uue skämmi tarbeks:

Saatja: eNomCentral Tech Support [mailto:info2@enom.com]
Saatmisaeg: 29. oktoober 2008. a. 9:16
Adressaat: XXXX
Teema: Warning: Inaccurate whois information.

Dear user,

On Wed, 29 Oct 2008 10:15:37 +0300 we received a third party complaint of invalid domain contact information in the Whois database for this domain Whenever we receive a complaint, we are required by ICANN regulations to initiate an investigation as to whether the contact data displaying in the Whois database is valid data or not. If we find that there is invalid or missing data, we contact both the registrant and the account holder and inform them to update the information.

The contact information for the domain which displayed in the Whois database was indeed invalid. On Wed, 29 Oct 2008 10:15:37 +0300 we sent a notice to you at the admin/tech contact email address and the account email address informing you of invalid data in breach of the domain registration agreement and advising you to update the information or risk cancellation of the domain. The contact information was not updated within the specified period of time and we canceled the domain. The domain has subsequently been purchased by another party. You will need to contact them for any further inquiries regarding the domain.

PLEASE VERIFY YOUR CONTACT INFORMATION – http://www.enom.com

If you find any invalid contact information for this domain, please respond to this email with evidence of the specific contact information you have found to be invalid on the Whois record for the domain name. Examples would be a bounced email or returned postal mail. If you have a bounced email, please attach or forward with your reply or in the case of returned postal mail, scan the returned letter and attach to your email reply or please send it to:

Attn: Domain Services 14455 N Hayden Rd Suite 219 Scottsdale, AZ 85260

LINK TO CHANGE INFORMATION – http://www.enom.com

Thank you,
Domain Services

[IncidentID:32225]

Ehk siis kirja saajat hirmutatakse, et keegi on nende domeeni enda nimele registreerinud, omanikuvahetusprotsess on juba käimas ning halvima vältimiseks tuleks koheselt uuendada oma kontaktandmeid. Kirjas toodud link viitab pealtnäha maailma suuruselt teisele domeeninimede jae- ja hulgimüügifirmale eNom, kuid viib tegelikult saidile, mille kohta Firefox annab niisuguse hoiatuse:

Kui hoiatusi ignoreerida, sarnaneb avanev lehekülgki eNom-i omaga. Ilmselt kasutatakse siis “andmeid täpsustavate” domeeniomanike andmeid nende domeenide tegelikuks skvottimiseks. Viimased on küllap siis ainult kergelt pahased: näh, jäingi hiljaks…

Libatõrjujad näitavad sinist ekraani

Libatõrjujad on võtnud uue suuna, hirmutades arvutikasutajaid Blue screen of death’iga

Allikas: TrendLabs Malware Blog
Allikas: TrendLabs Malware Blog

Tegelikul on see aga ekraanisäästja, mis teatab, et arvutis kasutatakse mitteregistreeritud Antivirus 2009 versiooni. Muudetakse ka Windowsi stardipilti:

Allikas: TrendLabs Malware Blog
Allikas: TrendLabs Malware Blog

Paljud inimesed lähevad selle pealetükkiva triki õnge ja ostavad pakutava libatarkvara. Nii saavad küberkurjategijad lisaks veel ka nende krediitkaartide andmed ning saavad seeläbi nende rahakotti tühjendada. Kui olete  langenud taolise triki ohvriks, tuleb kindlasti võtta ühendust oma pangaga ja küsida, kuidas oleks kõige parem edasi toimida.

Võib olla, et krediitkaardilt ei hakatagi kohe raha tõmbama. Samuti võidakse kontorekvisiitide abil ka raha liigutada.

Kui teil on selline libatarkvara arvutisse sattunud, siis soovitaksin kasutada Superantispywaret.

Ühendriikide suurimas krediitkaardipettuses osales ka Eesti kodanik

Ühendriikide võimud esitasid üheteistkümnele isikule süüdistuse 40 millioni kreedit- ja deebetkaardi numbrite varastamises ning mahamüümises. Ühendriikidest, Hiinast, Ukrainast ja Valgevenest pärit kurikaelte hulgas oli ka Sillamäelt päri Aleksandr Suvorov.

Süüdistuse kohaselt kopeeriti kreeditkaardi numbrid, kontoinformatsoon ning paroolid tänavalringi sõites ja traadita võrkudesse sisse häkkides. Muuhulgas pandi pihta ka moepoodide TJ Maxx ning Barnes ja Noble klientide andmed. Kokku langes pättide saagiks 41 miljonit kaardikirjet, välja jõuti võtta kümneid miljoneid dollareid. Täpsemalt saab lugeda näiteks Postimehest.

Arvatakse, et identideedivargused lähevad Ühendriikides igal aastal maksma miljardeid dollareid. 2006. aastal lõi valitsus identideedivarguste erirühma, mis koosnes seitsmeteistkümnest föderaalosakonnast ja agentuurist.

Ka Eestis pole identiteedivargus väga harv juhus. Õnneks pole seni veel kuulda olnud, et ettevõtetest oleks klientide krediitkaardiandmeid lekkinud, küll aga on kahju kannatanud paljud eraisikud, kes on neid sisestanud petusaitidele või siis usaldanud oma pangaparoolid pahatahtlikule juhututtavale. Väikest õpetlikku klippi saab vaadata siit.

Nüüd siis ka Läti petukirjad

Mulle kirjutab Igors Dolomanovs, Mihhail Hodorkovski endine assistent, kellel oleks hädasti vaja abi Jukosest järgijäänud 16 miljoni dollari lahtikülmutamisel. Minu osa noosist oleks 20%.

Tegelikult ei ole muidugi kindel, et härra Dolomanovsil ka tegelikult Lätiga midagi pistmist on, samas on mu postkasti viimase paari nädala jooskul tõepoolest keskmisest rohkem just Lätist saadetud spämmi laekunud.

Aga kiri ise ka:

Dear Friend,

My name is Mr. Igors Dolomanovs, Personal Assistant to Mr. Boris Mikhail Khodorkovsky, the arrested Chairman/ CEO of Yukos Oil and Bank Menatep SPB in Russia who is presently in jail.

I have the documents of a large amount of funds which he handed over to me before he was detained and tried in Russia for financing political parties (the Union of Right Forces, led by Boris Nemtsov and Yabloko, a Liberal/ Social Democratic Party led by Gregor Yavlinsky) opposed to the Government of Mr. Vladmir Putin, the former President and now the current Prime Minister of Russia, thereby leading to the freezing of his finances and assets.

You can read more about his ordeal from the following sites:
Http://www.supportmbk.com
Http://news.bbc.co.uk/2/hi/business/3042850.stm
Http://www.nationmaster.com/encyclopedia/Mikhail-Khodorkovsky

After searching through the books of your Country’s Chambers of Commerce and Industries here in Russia, I am contacting you to assist me to re-profile the funds and equally invest same on his behalf. The total amount of funds to be re-profiled is Sixteen Million United State Dollars (USD$16,000,000.00) and you will be paid 20% for your management services.
All I need from you is to stand as the beneficiary of the above quoted Sum and I will re-profile the fundwith your name, which will enable the European Bank transfer the sum to you.

As soon as I receive your acceptance through my personal email address below:
dolomanovs@aol.co.uk

I will send you the necessary details and my personal identification documents.

Yours Sincerely,
Mr. Igors Dolomanovs

Yukos Oil/Gas and Bank Menatep SPB

Nagu näha, kasutatakse juba Nigeeria kirjadest tuttavaid ettekäändeid, ka summad on sarnased. Kas on kellelegi veel vaja korrata, et ei ole mõtet härra Igorsile oma teeneid pakkuda?