Feeds

How the net changed the ancient art of the con

The art of deception

Intelligent flash storage arrays

This in turn has stimulated the emergence of 419-baiters, people who pose as dupes in a bid to out-cheat con artists or to simply waste their time so they're less likely to find gullible marks.

In popular culture, such as films like The Sting, this interaction (through set-up, hook, tale and sting) is playing out face to face for dramatic effect. In cyberspace, 419-baiters chronicle how they lead fraudsters on a merry dance on various websites (such as this), to no less entertaining effect. Our particular favourite is how scam-baiter "Shiver Metimbers" managed to persuade a hapless fraudster into carving a wooden Commodore 64 keyboard in the hopes it might lead to a generous scholarship.

Superb.

From Russia without love

Fraudsters sometimes cultivate a different approach online by trying to hook prospective marks frequenting dating websites. After cultivating a relationship, grifters claim they are unable to leave their home country and need to borrow money to visit their sweetheart. Naturally, the scammer never makes the trip and the victim is left broken-hearted, and broke.

One common form of get-rich-quick scam email involves so-called pump and dump scams. Crooks seek to inflate interest in a low-value stock on the back of bogus insider information in the hopes of selling the stock on a high before the inevitable crash and burn.

Malware authors have also begun dabbling in confidence tricks. A scam called the badger game - where a married mark is tricked into a compromised position with another woman and threatened with exposure unless extortion demands are played - has been reapplied in cyberspace.

Browser hijacking programs might leave indications of visits to porn websites on compromised PCs and we've heard of a handful of cases where victims are threatened that their actions will be reported to the police unless they hand over the booty. More commonly, threats that users' systems are been monitored by the authorities are tricks designed to fool users into opening record files (actually malware executables) or visiting maliciously constructed websites.

Any pretext will do

Cyber ruses and deception are not always for financial gain. Social engineering techniques, similar to those used in fraud, can manipulate people into performing actions (such as disclosing confidential information) at the behest of an attacker, who typically never meets his target.

For years, reformed computer hacker Kevin Mitnick was the most notable proponent of this technique. But this year "private detectives" hired by HP gave him a run for his money with their use of pretexting to trick phone companies into handing over confidential call records of HP board members and several journalists as part of an ill-fated mole hunt.

Is there a lesson to learned? As one long-time scam watcher says:

"Con games never remain stationary. The principle may be old, but the external forms are always changing, for con men know they must adapt their schemes to the times. This is especially true of the Big Con. A good grifter is never satisfied with the form his swindle takes; he studies it constantly to improve it; as he learns more about people, he finds a way to use what he has learned", from The Big Con, by David Maurer

®

Intelligent flash storage arrays

More from The Register

next story
Regin: The super-spyware the security industry has been silent about
NSA fingered as likely source of complex malware family
Why did it take antivirus giants YEARS to drill into super-scary Regin? Symantec responds...
FYI this isn't just going to target Windows, Linux and OS X fans
Privacy bods offer GOV SPY VICTIMS a FREE SPYWARE SNIFFER
Looks for gov malware that evades most antivirus
Home Office: Fancy flogging us some SECRET SPY GEAR?
If you do, tell NOBODY what it's for or how it works
HACKERS can DELETE SURVEILLANCE DVRS remotely – report
Hikvision devices wide open to hacking, claim securobods
'Regin': The 'New Stuxnet' spook-grade SOFTWARE WEAPON described
'A degree of technical competence rarely seen'
Syrian Electronic Army in news site 'hack' POP-UP MAYHEM
Gigya redirect exploit blamed for pop-rageous ploy
Astro-boffins start opening universe simulation data
Got a supercomputer? Want to simulate a universe? Here you go
prev story

Whitepapers

Designing and building an open ITOA architecture
Learn about a new IT data taxonomy defined by the four data sources of IT visibility: wire, machine, agent, and synthetic data sets.
A strategic approach to identity relationship management
ForgeRock commissioned Forrester to evaluate companies’ IAM practices and requirements when it comes to customer-facing scenarios versus employee-facing ones.
5 critical considerations for enterprise cloud backup
Key considerations when evaluating cloud backup solutions to ensure adequate protection security and availability of enterprise data.
Reg Reader Research: SaaS based Email and Office Productivity Tools
Read this Reg reader report which provides advice and guidance for SMBs towards the use of SaaS based email and Office productivity tools.
Protecting users from Firesheep and other Sidejacking attacks with SSL
Discussing the vulnerabilities inherent in Wi-Fi networks, and how using TLS/SSL for your entire site will assure security.