Feeds

Anti-fraud site targeted in Joe Job attack

Spammers try to discredit Bobbear.co.uk

Internet Security Threat Report 2014

Fraudsters have upped the ante in their fight to discredit a respected UK-based anti-fraud website.

The email address of Bobbear.co.uk, which fights phishing fraud by exposing groups attempting to recruit money mules, was spoofed in obscene emails. The Joe Job attack represents a further attempt to make life difficult for Bobbear.co.uk, which operates on a voluntary basis, and site administrator Bob Harrison.

Just over a week ago the site came under a sustained denial of service attack, which remains ongoing despite largely successful attempts by BobBear in cooperation with ISP Fasthosts to minimise the effect of the assault. "The DDOS continues and the criminals are also now attempting to hurt me by spoofing my email addresses to send obscene emails," reports Harrison. "These are nothing to do with me and have not come from me or my domain. This is called a 'Joe Job'. Do not be fooled by them - simply discard them or use SpamCop to report the source IP. Oh, and I DO NOT send out newsletters - it's the same spoofed spam from the same criminals."

As well as forcing Bobbear to field angry messages about the junk mail and complaints the Joe Job email run has led to thousands of bounce-back messages from spoofed emails sent to non-existent addresses, clogging up the site's mail server.

Forged emails supposedly from Bobbear have been used in an attempt to discredit the site in the past. In October 2007, a spam run sought to ruin the reputation of Bobbear by bombarding intenet users with supposed begging request. In truth the junk mail messages, asking for donations through online payment service e-Gold, were nothing to do with Bobbear.co.uk. Fasthosts temporarily suspended Bobbear.co.uk in response to complaints over these emails at the time but have been far more supportive since, for example going out of their way to get the site up and running during the latest Job Job attacks, Harrison told El Reg. ®

Internet Security Threat Report 2014

More from The Register

next story
George Clooney, WikiLeaks' lawyer wife hand out burner phones to wedding guests
Day 4: 'News'-papers STILL rammed with Clooney nuptials
Shellshock: 'Larger scale attack' on its way, warn securo-bods
Not just web servers under threat - though TENS of THOUSANDS have been hit
Apple's new iPhone 6 vulnerable to last year's TouchID fingerprint hack
But unsophisticated thieves need not attempt this trick
PEAK IPV4? Global IPv6 traffic is growing, DDoS dying, says Akamai
First time the cache network has seen drop in use of 32-bit-wide IP addresses
Oracle SHELLSHOCKER - data titan lists unpatchables
Database kingpin lists 32 products that can't be patched (yet) as GNU fixes second vuln
Researchers tell black hats: 'YOU'RE SOOO PREDICTABLE'
Want to register that domain? We're way ahead of you.
Stunned by Shellshock Bash bug? Patch all you can – or be punished
UK data watchdog rolls up its sleeves, polishes truncheon
prev story

Whitepapers

Forging a new future with identity relationship management
Learn about ForgeRock's next generation IRM platform and how it is designed to empower CEOS's and enterprises to engage with consumers.
Storage capacity and performance optimization at Mizuno USA
Mizuno USA turn to Tegile storage technology to solve both their SAN and backup issues.
The next step in data security
With recent increased privacy concerns and computers becoming more powerful, the chance of hackers being able to crack smaller-sized RSA keys increases.
Security for virtualized datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.
A strategic approach to identity relationship management
ForgeRock commissioned Forrester to evaluate companies’ IAM practices and requirements when it comes to customer-facing scenarios versus employee-facing ones.