spam/scam analysis?

paleolith · 15 Apr 2017, 05:24 AM

Can anyone point me to a place that explains or analyzes specific scams and attacks? Just searching the web, I haven't been able to find any such place.

I ask because of one I received this morning. I can't figure out what the attacker is up to. I'm not posting the details as it appears that would violate the forum rules ("CANNOT BE DISCUSSED - Specific spam reports of any kind"), just asking if anyone knows where to go.

Thanks,

Edward

TenFour · 15 Apr 2017, 05:49 AM

I'm not sure it is worth it to figure out what the person is up to--just report as spam and ignore, and be certain not to click on any links in the message.

paleolith · 15 Apr 2017, 06:13 AM

Part of my reason for wanting to know is to be able to advise the person being spoofed or hacked -- explain to them how they got hacked/spoofed and what they should do about it.

Part of my reason is to be able to explain such things, and recommend action, in the future.

Sure, I know what to do with junk mail.But I (like you) am among those who know enough to help others. For that, it's worth knowing what's going on behind the scenes.

This particular spam contains no links and no way I can see for the spammer to get information back. That's what I find odd. Again, I'm not posting the details due to the forum rules.

Edward

TenFour · 15 Apr 2017, 06:18 AM

Quote:

Part of my reason for wanting to know is to be able to advise the person being spoofed or hacked -- explain to them how they got hacked/spoofed and what they should do about it.

A lot of times the other person is not spoofed/hacked. The scammer just scans websites, picks up email addresses, then sends out emails pretending to be that person. The good ones do some research so they can appear to be the actual person. Someone where I work recently received an email from the executive director asking for some money to be wired someplace. The ed's email address was used, but their account wasn't hacked or anything--the scammers just pretended to be the ed. I once received what looked like an email from my sister saying her purse had been stolen, but in that case her account had been hacked into and the scammer was sending email direct from her account. Rule of thumb--be paranoid, because they are out to get you!

paleolith · 15 Apr 2017, 06:23 AM

I'm interested in an answer to my question.

I've done a good bit of analysis of the headers which relates to your hypotheses, but the forum rules AFAIK do not allow me to post the details.

Edward

TenFour · 15 Apr 2017, 06:31 AM

I think there are so many possible scams/attacks you will not find a single site that will cover them all. This doesn't answer your question, but here's what I do. Most scams are easy to detect: subject and/or content are classic spamscam; headers give away that it isn't legit; or a quick check confirms. Occasionally, I will receive a message that appears to be from a company I do business with and it sounds like it might be a legitimate message, but I am not sure. I then usually go direct to the website/account, not using any links in the email, and confirm or discover the message isn't legit. If I get a personal message from someone and I am suspicious I just call them on the telephone using a number I have and confirm--works every time for me! Always purchase anything of significance using a major credit card (not a debit card) and you are protected from a fraudulent sale.

15 Apr 2017, 05:24 AM	#1
paleolith Cornerstone of the Community Join Date: Mar 2002 Location: Florida Posts: 545	spam/scam analysis? Can anyone point me to a place that explains or analyzes specific scams and attacks? Just searching the web, I haven't been able to find any such place. I ask because of one I received this morning. I can't figure out what the attacker is up to. I'm not posting the details as it appears that would violate the forum rules ("CANNOT BE DISCUSSED - Specific spam reports of any kind"), just asking if anyone knows where to go. Thanks, Edward

15 Apr 2017, 05:49 AM	#2
TenFour Master of the @ Join Date: Feb 2017 Location: USA Posts: 1,722	I'm not sure it is worth it to figure out what the person is up to--just report as spam and ignore, and be certain not to click on any links in the message.

15 Apr 2017, 06:13 AM	#3
paleolith Cornerstone of the Community Join Date: Mar 2002 Location: Florida Posts: 545	Part of my reason for wanting to know is to be able to advise the person being spoofed or hacked -- explain to them how they got hacked/spoofed and what they should do about it. Part of my reason is to be able to explain such things, and recommend action, in the future. Sure, I know what to do with junk mail.But I (like you) am among those who know enough to help others. For that, it's worth knowing what's going on behind the scenes. This particular spam contains no links and no way I can see for the spammer to get information back. That's what I find odd. Again, I'm not posting the details due to the forum rules. Edward

15 Apr 2017, 06:23 AM	#5
paleolith Cornerstone of the Community Join Date: Mar 2002 Location: Florida Posts: 545	I'm interested in an answer to my question. I've done a good bit of analysis of the headers which relates to your hypotheses, but the forum rules AFAIK do not allow me to post the details. Edward

15 Apr 2017, 06:31 AM	#6
TenFour Master of the @ Join Date: Feb 2017 Location: USA Posts: 1,722	I think there are so many possible scams/attacks you will not find a single site that will cover them all. This doesn't answer your question, but here's what I do. Most scams are easy to detect: subject and/or content are classic spamscam; headers give away that it isn't legit; or a quick check confirms. Occasionally, I will receive a message that appears to be from a company I do business with and it sounds like it might be a legitimate message, but I am not sure. I then usually go direct to the website/account, not using any links in the email, and confirm or discover the message isn't legit. If I get a personal message from someone and I am suspicious I just call them on the telephone using a number I have and confirm--works every time for me! Always purchase anything of significance using a major credit card (not a debit card) and you are protected from a fraudulent sale.