Comments on: A Stroll Down Victim Lane http://krebsonsecurity.com/2010/05/a-stroll-down-victim-lane/ In-depth security news and investigation Wed, 23 May 2012 21:31:36 +0000 hourly 1 http://wordpress.org/?v=3.3.2 By: N Pham http://krebsonsecurity.com/2010/05/a-stroll-down-victim-lane/comment-page-1/#comment-10095 N Pham Wed, 15 Sep 2010 19:52:33 +0000 http://krebsonsecurity.com/?p=2891#comment-10095 I got the same type of email today. But with a modified domain http://www.thebestcareers.biz in the body. Its the exact same copy the one suspicious thing was that they made up a Sweden contact address but claimed to be out of Memphis, TN. I got the same type of email today. But with a modified domain http://www.thebestcareers.biz in the body. Its the exact same copy the one suspicious thing was that they made up a Sweden contact address but claimed to be out of Memphis, TN.

Like or Dislike: Thumb up 0 Thumb down 0
]]> By: Ron Harding http://krebsonsecurity.com/2010/05/a-stroll-down-victim-lane/comment-page-1/#comment-7270 Ron Harding Wed, 30 Jun 2010 19:30:50 +0000 http://krebsonsecurity.com/?p=2891#comment-7270 i also looked at the website - i noticed a word was misspelled in the top of the home page - not english native no doubt. the plain message keyed me off right away - at least they provide job title, even the indian recruiters do that. I can't stand this crap! i am looking for work and the stinking scammers are going after recruiters now too! got to keep the guard up i guess. i bet it's some loser teenager living with mom/dad with nothing better to do. i also looked at the website – i noticed a word was misspelled in the top of the home page – not english native no doubt.

the plain message keyed me off right away – at least they provide job title, even the indian recruiters do that.

I can’t stand this crap! i am looking for work and the stinking scammers are going after recruiters now too! got to keep the guard up i guess.

i bet it’s some loser teenager living with mom/dad with nothing better to do.

Like or Dislike: Thumb up 0 Thumb down 0
]]> By: James Pannozzi http://krebsonsecurity.com/2010/05/a-stroll-down-victim-lane/comment-page-1/#comment-5879 James Pannozzi Sun, 16 May 2010 14:47:09 +0000 http://krebsonsecurity.com/?p=2891#comment-5879 These things KEEP happening as do terrorist attacks for one fundamental reason -> essential reforms from the bottom up, in all aspects of our institutional infrastructure are badly needed. However, lobbyists and special interests of the institutions, eager to preserve their loopholes, profiteering tricks and other impedimentia, along with the inertia and fear of drastic system changes, slow, or block the reforms from happening. Just LOOK at the mess in the Gulf because improper or non-existent controls were operative, or else the pretence of controls without the substance were in place. How's THAT for one big mess. See what happens when you let special interests, in this case the oil companies, have their way?!! We've already had a major financial meltdown and a major terrorist attack that killed thousands. Exactly how long are we going to acquiesce in this until we demand that our legislators, political leaders, and even the news media start taking action? These things KEEP happening as do terrorist attacks for one fundamental reason -> essential reforms from the bottom up, in all aspects of our institutional infrastructure are badly needed. However, lobbyists and special interests of the institutions, eager to preserve their loopholes, profiteering tricks and other impedimentia, along with the inertia and fear of drastic system changes, slow, or block the reforms from happening. Just LOOK at the mess in the Gulf because improper or non-existent controls were operative, or else the pretence of controls without the substance were in place. How’s THAT for one big mess. See what happens when you let special interests, in this case the oil companies, have their way?!!

We’ve already had a major financial meltdown and a major terrorist attack that killed thousands. Exactly how long are we going to acquiesce in this until we demand that our legislators, political leaders, and even the news media start taking action?

Like or Dislike: Thumb up 1 Thumb down 5
]]> By: Sensible http://krebsonsecurity.com/2010/05/a-stroll-down-victim-lane/comment-page-1/#comment-5868 Sensible Sat, 15 May 2010 17:19:46 +0000 http://krebsonsecurity.com/?p=2891#comment-5868 Is the Ford Company required to provide automobile operators with training and a drivers license? No the government requires the operator to take the training and pass the test. It wouldn't make a lot of sense for the government require Ford to train and test all auto operators before buying a car. Why should banks be required to verify a commercial users internet competence and check the effectiveness of the business internal controls? Not unlike the automobile operator shouldn't the small business be held accountable for something? Legislation that would require banks to pay for losses that are a result of small biz systems being exploited would seem to drive all the wrong behavior. Sarbanes Oxley section 404 requires public companies to have solid internal controls, why not have small businesses verify they understand the risks of ebanking and also that they have adequate controls in place when they get their business license. Is the Ford Company required to provide automobile operators with training and a drivers license? No the government requires the operator to take the training and pass the test. It wouldn’t make a lot of sense for the government require Ford to train and test all auto operators before buying a car. Why should banks be required to verify a commercial users internet competence and check the effectiveness of the business internal controls? Not unlike the automobile operator shouldn’t the small business be held accountable for something? Legislation that would require banks to pay for losses that are a result of small biz systems being exploited would seem to drive all the wrong behavior. Sarbanes Oxley section 404 requires public companies to have solid internal controls, why not have small businesses verify they understand the risks of ebanking and also that they have adequate controls in place when they get their business license.

Like or Dislike: Thumb up 1 Thumb down 1
]]> By: Aaron Jacobson http://krebsonsecurity.com/2010/05/a-stroll-down-victim-lane/comment-page-1/#comment-5847 Aaron Jacobson Fri, 14 May 2010 17:06:19 +0000 http://krebsonsecurity.com/?p=2891#comment-5847 I agree that this problem will continue until someone gives the banks an incentive to fix it. However, it's also important to realize that most small- and medium-sized banks outsource their transaction services (and security) to a handful of large processing companies. These processing companies are perhaps as culpable as the banks themselves. I agree that this problem will continue until someone gives the banks an incentive to fix it. However, it’s also important to realize that most small- and medium-sized banks outsource their transaction services (and security) to a handful of large processing companies. These processing companies are perhaps as culpable as the banks themselves.

Like or Dislike: Thumb up 3 Thumb down 1
]]> By: Me http://krebsonsecurity.com/2010/05/a-stroll-down-victim-lane/comment-page-1/#comment-5846 Me Fri, 14 May 2010 16:49:30 +0000 http://krebsonsecurity.com/?p=2891#comment-5846 They really do go through a lot of work jeez. Taxreturnworld... http://maps.google.com/maps?q=1711+Atlantic+Ave,+atlantic+city&oe=utf-8&client=firefox-a&ie=UTF8&hq=&hnear=1711+Atlantic+Ave,+Atlantic+City,+Atlantic,+New+Jersey+08401&gl=us&ei=DXvtS42ZOsP68Aagm9z9Cg&ved=0CBMQ8gEwAA&ll=39.360416,-74.43233&spn=0.022198,0.038581&t=h&z=15&layer=c&cbll=39.360464,-74.432206&panoid=QXT83DeFLRlCHTQUWxJxuA&cbp=13,343.07,,0,-2.08 There really is a tax business there. The real fun would be visiting the store to try to tie things together They really do go through a lot of work jeez. Taxreturnworld…

http://maps.google.com/maps?q=1711+Atlantic+Ave,+atlantic+city&oe=utf-8&client=firefox-a&ie=UTF8&hq=&hnear=1711+Atlantic+Ave,+Atlantic+City,+Atlantic,+New+Jersey+08401&gl=us&ei=DXvtS42ZOsP68Aagm9z9Cg&ved=0CBMQ8gEwAA&ll=39.360416,-74.43233&spn=0.022198,0.038581&t=h&z=15&layer=c&cbll=39.360464,-74.432206&panoid=QXT83DeFLRlCHTQUWxJxuA&cbp=13,343.07,,0,-2.08

There really is a tax business there. The real fun would be visiting the store to try to tie things together

Like or Dislike: Thumb up 1 Thumb down 2
]]> By: Bert Knabe http://krebsonsecurity.com/2010/05/a-stroll-down-victim-lane/comment-page-1/#comment-5836 Bert Knabe Fri, 14 May 2010 04:54:31 +0000 http://krebsonsecurity.com/?p=2891#comment-5836 We can only hope that if the court provides a definition they enlist the assistance of people like Brian Krebs. Otherwise the definition is likely to be obsolete before the ink is dry on the decision. We must also hope that a jury isn't fooled by fancy footwork into believing the bank isn't culpable. PlainsCapital is counting on getting a judge and/or jury that is naive when it comes to computer security. We can only hope that if the court provides a definition they enlist the assistance of people like Brian Krebs. Otherwise the definition is likely to be obsolete before the ink is dry on the decision. We must also hope that a jury isn’t fooled by fancy footwork into believing the bank isn’t culpable. PlainsCapital is counting on getting a judge and/or jury that is naive when it comes to computer security.

Like or Dislike: Thumb up 1 Thumb down 1
]]> By: KFritz http://krebsonsecurity.com/2010/05/a-stroll-down-victim-lane/comment-page-1/#comment-5739 KFritz Wed, 12 May 2010 06:22:02 +0000 http://krebsonsecurity.com/?p=2891#comment-5739 This mule did actual WORK, and most folks' expectation after work is PAY. Granted, she behaved like a jackass by spending 4.7 K so quickly, but she sounds like far less of a dupe that any other mule previously described.

This mule did actual WORK, and most folks’ expectation after work is PAY. Granted, she behaved like a jackass by spending 4.7 K so quickly, but she sounds like far less of a dupe that any other mule previously described.

Well-loved. Like or Dislike: Thumb up 6 Thumb down 0
]]> By: AnonymousMike http://krebsonsecurity.com/2010/05/a-stroll-down-victim-lane/comment-page-1/#comment-5728 AnonymousMike Tue, 11 May 2010 18:37:08 +0000 http://krebsonsecurity.com/?p=2891#comment-5728 The source of these problems is ultimately an infection on the customer PC, I agree solving that would solve the issue. Banks have a part in helping to stop these fraudulent transactions from occurring. Just like small business owners do as well, end user security practices have to evolve over time just like bank security has to evolve over time. Its no longer acceptable for small business owners to say "I took the same precautions I've taken for the last 5 years" and I got a virus, so its the banks fault. Both parties have a responsibility to implement better security practices, and both parties are clearly not doing so at the moment. Stories like these help drive those changes for both parties, assisted by regulation and guidance etc. The source of these problems is ultimately an infection on the customer PC, I agree solving that would solve the issue.

Banks have a part in helping to stop these fraudulent transactions from occurring. Just like small business owners do as well, end user security practices have to evolve over time just like bank security has to evolve over time. Its no longer acceptable for small business owners to say “I took the same precautions I’ve taken for the last 5 years” and I got a virus, so its the banks fault.

Both parties have a responsibility to implement better security practices, and both parties are clearly not doing so at the moment. Stories like these help drive those changes for both parties, assisted by regulation and guidance etc.

Like or Dislike: Thumb up 1 Thumb down 2
]]> By: Oneway or another http://krebsonsecurity.com/2010/05/a-stroll-down-victim-lane/comment-page-1/#comment-5727 Oneway or another Tue, 11 May 2010 16:29:14 +0000 http://krebsonsecurity.com/?p=2891#comment-5727 If businesses and banks tighten control of the ACH system, fraudsters will utilize a different channel and scheme, possibly a more creative approach to using wires. Mules will still be mules, banks will still deny responsibility and businesses will still be vulnerable. Education plays a key role in prevention. I don't know a single business owner who doesn't want to keep tight control of their finances, i assume they won't have a problem learning something new after they lose a few dollars. Its a shame most won't listen until then. Bootable CD's, non-writable thumb drives or dedicated PC's are all simple, albeit more cumbersome, ways to reduce your risk footprint. I'm sure there was a day when businesses didn't lock their doors, only to be ruined by someone with less of a moral foundation than the majority. Brian, keep telling the stories. Readers keep telling your friends, especially the business owners of the world. If businesses and banks tighten control of the ACH system, fraudsters will utilize a different channel and scheme, possibly a more creative approach to using wires.

Mules will still be mules, banks will still deny responsibility and businesses will still be vulnerable. Education plays a key role in prevention. I don’t know a single business owner who doesn’t want to keep tight control of their finances, i assume they won’t have a problem learning something new after they lose a few dollars. Its a shame most won’t listen until then.

Bootable CD’s, non-writable thumb drives or dedicated PC’s are all simple, albeit more cumbersome, ways to reduce your risk footprint. I’m sure there was a day when businesses didn’t lock their doors, only to be ruined by someone with less of a moral foundation than the majority.

Brian, keep telling the stories. Readers keep telling your friends, especially the business owners of the world.

Like or Dislike: Thumb up 5 Thumb down 2
]]>