Post by headshotlv on Jun 22, 2020 15:00:57 GMT
Phishing scams usually get filtered by spam filters, but this scammer got a innovative solution for bypassing them.
I Came across of these scams few days ago on My old email. This Scammer creates accounts on various sites with victims email address, then he puts his scam text in username, after that He has to only do one thing to get past spam filters. Reset created accounts passwords. His scam now is sent from various legit company's to victims in Eastern Europe and Central Asia countries.
Here's translation from his Washington Times scam text. Of course Victims will see his scam, because it was sent from legit company's.
After careful reading I went digging in. I wanted to make sure that It's a scam and how did that scammer sent these emails.
After clicking his phishing link I got this. It was a fake robot check.
Translation
So I went to the promotion site as they asked. Site was a raffle game. First thing what you get is pop-up. Click three times until you get a gift card. Of course scammer has scripted that you always on third time will get a random value gift card.
Translation of pop-up.
Translation of site.
Below that Gift game was a *online chat*. Scammer scripted it so there was always 60-65 people. Only thing that worked was message function. Here's some pictures of scripts. Of course scammer has targeted Post Soviet Countries. His targets are written in his script. Scammer has putted his contact email in top of script. *The phishing site creators always advertise their jobs! He also is protecting himself with Proton-mail.
After finishing Gift game and messing with chat I ended up here. A scripted operator *Support*. Here's some translation.
After clicking button I ended up here. Of course it asks for your if you have a Bank Card or Bitcoin Wallet. It still wasn't meant for phishing victims card details. It was a fake input. I put in fake details and I ended up here. Translation.
Of course I press button and I end up here. Phishing Page. It asks for victims details and for *service charge*. Translation.
After victims puts their details in, they will get endless loading ring. *340 RUB is about 5 US dollars. Of course it's not a advance fee fraud but a phishing scam.
The worst thing about this innovative phishing scam is that elderly people are easily tricked and their email scam filters are easily bypassed by phishing scam attempts, but if the method were used by 419 scammers it could get really worse.
I Came across of these scams few days ago on My old email. This Scammer creates accounts on various sites with victims email address, then he puts his scam text in username, after that He has to only do one thing to get past spam filters. Reset created accounts passwords. His scam now is sent from various legit company's to victims in Eastern Europe and Central Asia countries.
Here's translation from his Washington Times scam text. Of course Victims will see his scam, because it was sent from legit company's.
[Ticket] # 75947744 Congratulations! You Win Participation in the Prize Promotion with Guaranteed Winnings. Your member link: PHISHING SITE
After clicking his phishing link I got this. It was a fake robot check.
Translation
Upper Text: *Confirm that you are not a robot*
Middle Text: *CONFIRM AND GO TO THE PROMOTION SITE*
Middle Text: *CONFIRM AND GO TO THE PROMOTION SITE*
Translation of pop-up.
Participation in the draw
Over 100 units of computer and mobile equipment,
as well as 50 cash prizes ranging from 50 to 5,000 US dollars
All you have to do is open the right gift box.
You have 3 attempts, good luck!
Over 100 units of computer and mobile equipment,
as well as 50 cash prizes ranging from 50 to 5,000 US dollars
All you have to do is open the right gift box.
You have 3 attempts, good luck!
Raffle prizes
Congratulations and good luck!
* Take part in the promotion only once
Congratulations and good luck!
* Take part in the promotion only once
After finishing Gift game and messing with chat I ended up here. A scripted operator *Support*. Here's some translation.
Chat with the operator Anastasia Teplova online
Hello, I congratulate you on such a significant win!
In order to continue withdrawing funds to a card or electronic wallet, you need to give your consent ..
Now I will call you a special button, click on it
Button *I give my consent to receive a win!*
*After Clicking button
Great, consent is received.
Now I will prepare all the necessary information and write, please wait a minute.
I have prepared a conclusion, now I will call you a special button again, click on it, then specify the details for the output and follow the further instructions of the system.
I say goodbye to you, and once again I congratulate you on your victory!
Also, do not forget to leave your review after the withdrawal of funds. Bye!
Button *Go to filling out the details for the withdrawal of funds*
Hello, I congratulate you on such a significant win!
In order to continue withdrawing funds to a card or electronic wallet, you need to give your consent ..
Now I will call you a special button, click on it
Button *I give my consent to receive a win!*
*After Clicking button
Great, consent is received.
Now I will prepare all the necessary information and write, please wait a minute.
I have prepared a conclusion, now I will call you a special button again, click on it, then specify the details for the output and follow the further instructions of the system.
I say goodbye to you, and once again I congratulate you on your victory!
Also, do not forget to leave your review after the withdrawal of funds. Bye!
Button *Go to filling out the details for the withdrawal of funds*
Receiving rewards
Beneficiary's bank declined the transaction
Transaction RANDOM ID
Time YOUR VISITING TIME
Amount YOUR RANDOM WINNING
Status Code 409 (Invalid Enrollment Currency)
Failed to complete the operation, as the beneficiary's bank could not make the transfer in US dollars
To solve the problem, you need to convert currency from USD to RUB
Currency conversion (exchange) is carried out online directly on our service. With the help of this write-off, your identity is verified and the details for which you need to transfer the full amount of the prize are determined. Immediately after the exchange, you can withdraw your funds to a bank card or electronic wallet
The amount of exchange will also be returned to your details automatically within 24 hours.
USD 3 060 $
RUB 195 700 rub
The cost of converting $ 3,060 to 195,700 rubles will be 340 RUB
Button: *PAY FOR CURRENCY CONVERSION AND WITHDRAW MONEY*
Beneficiary's bank declined the transaction
Transaction RANDOM ID
Time YOUR VISITING TIME
Amount YOUR RANDOM WINNING
Status Code 409 (Invalid Enrollment Currency)
Failed to complete the operation, as the beneficiary's bank could not make the transfer in US dollars
To solve the problem, you need to convert currency from USD to RUB
Currency conversion (exchange) is carried out online directly on our service. With the help of this write-off, your identity is verified and the details for which you need to transfer the full amount of the prize are determined. Immediately after the exchange, you can withdraw your funds to a bank card or electronic wallet
The amount of exchange will also be returned to your details automatically within 24 hours.
USD 3 060 $
RUB 195 700 rub
The cost of converting $ 3,060 to 195,700 rubles will be 340 RUB
Button: *PAY FOR CURRENCY CONVERSION AND WITHDRAW MONEY*
Product Information
The product's name:
Service payment
Order No: 30669466
To pay: 340.00 RUB
Upon completion of the transaction, the payment amount will be automatically converted to the currency "Russian ruble" in accordance with the current rate.
After payment, you will automatically be redirected to the page of your order, and you will also receive an email with a link to receiving the product / service.
The product's name:
Service payment
Order No: 30669466
To pay: 340.00 RUB
Upon completion of the transaction, the payment amount will be automatically converted to the currency "Russian ruble" in accordance with the current rate.
After payment, you will automatically be redirected to the page of your order, and you will also receive an email with a link to receiving the product / service.
The worst thing about this innovative phishing scam is that elderly people are easily tricked and their email scam filters are easily bypassed by phishing scam attempts, but if the method were used by 419 scammers it could get really worse.