The Refund Scam

Posted by on Nov 4, 2015 in Fraudster on the Roof, Wire Fraud

As always, please note that the intention of the “Fraudster on the Roof” series is for readers to learn and think about how to better detect fraud, not to improve how they implement it. The fundamentals of the Refund Scam are simple: scammer orders an item from a large online market place, when it arrives […]

Farming Credit Cards with Robo Dialing

Posted by on May 5, 2015 in Wire Fraud

What better way to steal a credit card than to simply ask nicely for it. I recently received an automated call on my cell phone from an unknown number which basically started like this “Hello, we are calling from the Boeing Credit Union. Your credit card has been blocked. Please press 1 to unblock it.” I […]

Tech Support Scams – What Lies Beneath?

Posted by on May 27, 2014 in Tech Support Scam, Wire Fraud

In the Tech Support scam, a scammer hijacks a well known brand in an effort to lure a victim who is then deceived into paying for an unnecessary/non-existent service or installing malware infected payloads. This scam has been picked up by quite a few players in the last couple of years, successfully catching people left, […]

Laundering Stolen Credit Cards

Laundering Stolen Credit Cards

Posted by on Jan 29, 2014 in Fraudster on the Roof, Money Laundering, Wire Fraud

This post is the second entry in the “Fraudster on the Roof” series. Please remember that the intention of this series is for readers to learn how to better detect fraud, not to improve how they implement it. Today we look at what it takes to launder money online, specifically through stolen credit cards. Cards […]

Cellphonetech stuffing Amazon cookies with heightened concealment

We’ve recently been watching an Amazon Associates fraudster taking remarkable efforts to cover his tracks.  Like many rogue Associates we’ve looked at, he’s stuffing cookies invisibly.  He’s using Flash-based stuffing, a technique first written up last year.  But he’s several notches more sophisticated than most: The fraudster begins by buying a 125×125 IFRAME in the […]

Linkshare Affiliate ‘smaqEgQUEvQ’ Targets att.com

Posted by on Jul 29, 2013 in Affiliate Fraud, Cookie-Stuffing, Mad Monday, Wire Fraud

If you are a Linkshare affiliate competing for the same traffic as today’s rogue affiliate, know that you do not stand a chance. The reason for this is because Linkshare affiliate ‘smaqEgQUEvQ’ is unfairly using Cookie-Stuffing techniques to maximize his affiliate revenue. Let’s look at how the scam is put together. When visiting this page […]

Bestpcantivirus targets antivirus vendors

Posted by on Jul 22, 2013 in Affiliate Fraud, Cookie-Stuffing, Mad Monday, Wire Fraud

Upon casual inspection, bestpcantivirus.com reviews antivirus solutions for your PC. In their own words: We recommend you the best antivirus software for your PC. Our reviews and recommendations are balanced from the performance, budget and easy to use. Below are the Top 3 Antivirus programs that will give you the best performance and are Worth The […]

Bargain Hunter Scam through Cars.com

Posted by on Jul 15, 2013 in Bargain Hunters, Wire Fraud

Recall that the Bargain Hunter scam is a four pronged attack: 1. Scammer Sets the Trap This cars.com ad has a 2002 Toyota Tacoma PreRunner up for grabs at $5,582. It’s a pretty good deal, designed to whet my appetite and have me get in touch with the seller thinking that there’s a great deal […]

CJ Affiliate 5740999 claiming commission on organic traffic to Tirerack

Co-authored with Ben Edelman On a computer running Zango adware, our crawler browses the tirerack.com site.  Zango sees this traffic and opens a window to Trackmyads (packet trace).  Trackmyads returns tricky JavaScript that redirects to Offershack which redirects to the CJ click link with publisher ID 5740999, then on to Tirerack.  As shown in the […]