Scammers Are Scamming Other Scammers Out of Millions of Dollars (wired.com) 34
Nobody is immune to being scammed online -- not even the people running the scams. From a report: Cybercriminals using hacking forums to buy software exploits and stolen login details keep falling for cons and are getting ripped off thousands of dollars at a time, a new analysis has revealed. And what's more, when the criminals complain that they are being scammed, they're also leaving a trail of breadcrumbs of their own personal information that could reveal their real-world identities to police and investigators. Hackers and cybercriminals often gather on specific forums and marketplaces to do business with each other. They can advertise upcoming work they need help with, sell databases of people's stolen passwords and credit card information, or tout new security vulnerabilities that can be used to break into people's devices or systems. However, these deals often don't go to plan.
The new research, published today by cybersecurity firm Sophos, examines these failed transactions and the complaints people have made about them. "Scammers scamming scammers on criminal forums and marketplaces is much bigger than we originally thought it was," says Matt Wixey, a researcher with Sophos X-Ops who studied the marketplaces. Wixey examined three of the most prominent cybercrime forums: the Russian-language forums Exploit and XSS, plus the English-language BreachForums, which replaced RaidForums when it was seized by US law enforcement in April. While the sites operate in slightly different ways, they all have "arbitration" rooms where people who think they've been scammed or wronged by other criminals can complain. For instance, if someone purchases malware and it doesn't work, they may moan to the site's administrators. The complaints sometimes lead to people getting their money back, but more often act as a warning for other users, Wixey says. In the past 12 months -- the period the research covers -- criminals on the forums have lost more than $2.5 million to other scammers, the analysis says. Some people complain about losing as little as $2, while the median scams on each of the sites ranges from $200 to $600, according to the research, which is being presented at the BlackHat Europe security conference.
The new research, published today by cybersecurity firm Sophos, examines these failed transactions and the complaints people have made about them. "Scammers scamming scammers on criminal forums and marketplaces is much bigger than we originally thought it was," says Matt Wixey, a researcher with Sophos X-Ops who studied the marketplaces. Wixey examined three of the most prominent cybercrime forums: the Russian-language forums Exploit and XSS, plus the English-language BreachForums, which replaced RaidForums when it was seized by US law enforcement in April. While the sites operate in slightly different ways, they all have "arbitration" rooms where people who think they've been scammed or wronged by other criminals can complain. For instance, if someone purchases malware and it doesn't work, they may moan to the site's administrators. The complaints sometimes lead to people getting their money back, but more often act as a warning for other users, Wixey says. In the past 12 months -- the period the research covers -- criminals on the forums have lost more than $2.5 million to other scammers, the analysis says. Some people complain about losing as little as $2, while the median scams on each of the sites ranges from $200 to $600, according to the research, which is being presented at the BlackHat Europe security conference.
Scammers scamming other scammers's scams (Score:2)
Re: Scammers scamming other scammers's scams (Score:4)
Re: (Score:2)
Re: (Score:1)
Re: (Score:3)
It's evil turtles all the way down to Turtle Hell, which is composed of another stack of endless turtles.
I wonder if there is physical retaliation among hackers the same way there is among street-gangs? Do hacker heads mysteriously end up floating ashore in lakes or whatnot?
Re:Scammers scamming other scammers's scams (Score:5, Funny)
More scam!
Hello, friend scammer. Have you been scammed by some other scammer? We can help! For details, email us at recovery@YouAreSuchADumbShitYouDeserveWhatsComing.biz with your banking details, and we will get your money back or there's no fee.
A week later ...
Scammer: Hey, we didn't get our money back!
We said WE would get your money back. Not YOU would get your money back. And we did. Check your bank account for details - WE got ALL your money, sucka!
Re: (Score:2)
Scammer: Hey, we didn't get our money back!
It appears recovery@YouAreSuchADumbShitYouDeserveWhatsComing.biz was hacked. To recover this account, please send the Bitcoin equivalent of 1000 USD to my Bitcoin account 1Awyd1QWR5gcfrn1UmL8dUBj2H1eVKtQhg. I also have some videos of you masturbating while scamming scammers who have been scammed by scammers that I will send to all your contacts unless I receive this payment within 48 hours.
Re: (Score:2)
Scammer: Hey, we didn't get our money back!
It appears recovery@YouAreSuchADumbShitYouDeserveWhatsComing.biz was hacked. To recover this account, please send the Bitcoin equivalent of 1000 USD to my Bitcoin account 1Awyd1QWR5gcfrn1UmL8dUBj2H1eVKtQhg. I also have some videos of you masturbating while scamming scammers who have been scammed by scammers that I will send to all your contacts unless I receive this payment within 48 hours.
From: recovery@YouAreSuchADumbShitYouDeserveWhatsComing.biz
THOSE videos? I already turned them into NFTs. But thanks for your oh so generous offer.
Re: (Score:3)
Well, the scam, eggs, sausage and scam, that's not got much scam in it.
Re: (Score:3)
Scamalot!
Scamalot!
Scamalot!
it's just a model
Shhhh,..
Criminals - providing crypto's value floor (Score:3, Insightful)
This is why Bitcoin is hovering around $16-17k lately instead of crashing into oblivion. Scummy criminal types still use it because you're not buying exploits, malware, or stolen credentials on eBay with PayPal.
Re: (Score:2)
And also because they don't take rubles anymore.
Re: (Score:2)
You aren't buying it with BTC anymore, either. Too easy to trace that shit.
Re: (Score:2)
This is why Bitcoin is hovering around $16-17k lately instead of crashing into oblivion. Scummy criminal types still use it because you're not buying exploits, malware, or stolen credentials on eBay with PayPal.
The thing about BTC is that it doesn't need to drop to $0 to be worthless. It just has to be worth less than the power/outlay required to mine it... hence scalpers are selling "lightly used" graphics cards by the ton these days
There is no honour among thieves (Score:2)
If you can't trust a scammer who can you trust.
Re: (Score:1)
If you can't trust a scammer who can you trust.
But he told me he was the Prince of Nigeria...
Who you hang out with matters. (Score:3)
One of the major disadvantages of being a criminal is hanging out with other criminals. 50 years ago it was hard to sell stolen TV's to honest people, but other criminals will buy them up. So you have to risk that they will show up with a gun instead of cash.
Same thing now, but it's all e-crime.
poetry corner (Score:2)
Siphonaptera
Great fleas have little fleas upon their backs to bite 'em,
And little fleas have lesser fleas, and so ad infinitum.
And the great fleas themselves, in turn, have greater fleas to go on;
While these again have greater still, and greater still, and so on
Let me guess... (Score:2)
The cruel bastards !
Spaniard Proverb (Score:3)
"Quien roba a un ladrÃn, tiene cien años de perdÃn."
"Who steals from a thief, have hundred years of pardon."
Re: (Score:2)
Re: (Score:2)
Re: (Score:3)
Not sure about country of origin, but if we're doing proverbs:
"You can't con an honest man".
Of course it's not an absolute; but it's often easier to con people by praying upon their own desire to participate in cons--e.g., "Want to buy this Rolex for $200?". The buyer is assuming it's hot. Of course it's a $20 fake.
Re: (Score:1)
Grandchild scam, but with Vladimir Putin's voice (Score:2)
This would rope in the QAnoners - at least those who are not already dying of long Covid.
No honor among thieves. (Score:1)
What goes around comes around.
Re: (Score:1)
What goes around, comes around!
That old saying is true (Score:1)
Yo dawg... (Score:2)
What? (Score:2)
There's no honour among thieves?
Re: (Score:1)