[Chapter-delegates] Fwd: Brutal Experience...Marina Wang

[Niel Harper]

Alejandro et al,

 I think we need to understand and accept that threat vectors have increased substantially over the last couple of years, and there are many ways in which an attacker can compromise someone's device and obtain sensitive information (rootkits, trojans, malware, key loggers, botnets, etc.). So someone grabbing information such as phone numbers is not a difficult task.

 Email spoofing is one of the simplest tasks to complete for any hacker. Commonly available tools like HoaxMail, Sterm and even a simple combo of telnet / netcat can allow someone to alter the sender address and other parts of an email header to appear as though the email originated from a different source. The easy of this is due to the lack of authentication in core SMTP.

 Regards,


-------------------------
Niel Harper
Senior Manager, Next Generation Leaders
Internet Society
1775 Wiehle Ave. Suite 201
Reston, VA 20190
direct: 571.299.2509
mobile: 246.243.3818
skype: olokunbb

On Jun 11, 2012, at 10:27 AM, Dr. Alejandro Pisanty Baruch wrote:

> Hi Charles, all,
> 
> this is a type of scam that has been around for some time and grown recently. Someone tells you he/she is in trouble in travel with a story that's moderately credible and very scary (so it activates your response and suspends critical thinking.) 
> 
> It is awful that the wrongdoers have picked up Charles Gaye's name and the association with ISOC. 
> 
> We have already had email from him on January 30 this year warning of supplantations. 
> 
> What I fail to see in this new case is how the scam works if it comes from his legit email address. Are the phone numbers supplanted? Or is there a total hijack of his communications? Can someone who communicates with him or others in Liberia help clear the mess?
> 
> Yours,
> 
> Alejandro Pisanty
>   
> ! !! !!! !!!!
> NEW PHONE NUMBER - NUEVO NÚMERO DE TELÉFONO
>  
> +52-1-5541444475 FROM ABROAD
> 
> +525541444475 DESDE MÉXICO
> 
> SMS +525541444475 
>      Dr. Alejandro Pisanty
> UNAM, Av. Universidad 3000, 04510 Mexico DF Mexico
> 
> Blog: http://pisanty.blogspot.com
> LinkedIn: http://www.linkedin.com/in/pisanty
> Unete al grupo UNAM en LinkedIn, http://www.linkedin.com/e/gis/22285/4A106C0C8614
> Twitter: http://twitter.com/apisanty
> ---->> Unete a ISOC Mexico, http://www.isoc.org
> .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  . 
> 
> Desde: chapter-delegates-bounces at elists.isoc.org [chapter-delegates-bounces at elists.isoc.org] en nombre de Charles Mok (gmail) [charlespmok at gmail.com]
> Enviado el: lunes, 11 de junio de 2012 09:14
> Hasta: Chapter Delegates
> Asunto: [Chapter-delegates] Fwd: Brutal Experience...Marina Wang
> 
> I am not sure how many of you may have received this, but it looks like a typical scam, but using the name of one of the persons at ISOC Liberia (at least I googled and found some folk by that name in that organization).  
> 
> ---------- Forwarded message ----------
> From: charles Gaye <charlesg1075 at yahoo.com>
> Date: Mon, Jun 11, 2012 at 9:46 PM
> Subject: Brutal Experience...Marina Wang
> To: 
> 
> 
> Hi,
> 
>   I really hope you get this fast. I could not inform anyone about my trip, because it was impromptu. I had to be in Madrid Spain for a program. The program was successful, but my journey has turned sour. I misplaced my wallet on my way back to my hotel after I went for sight seeing. The wallet contained all the valuables I had. Now, my passport is in custody of the hotel management pending when I make payment.
> 
>  I am sorry if i am inconveniencing you, but i have only very few people to run to now. i will be indeed very grateful if i can get a loan of $2,000 from  you. this will enable me sort my hotel bills and get my sorry self back home. I will really appreciate whatever you  can afford in assisting me with. I promise to refund it in full as soon as I return. let me know if you can be of any assistance. Please, let me know soonest. Thanks so much.
> 
> Charles Kanlah Gaye
> Vice President
> Liberia Chapter of the Internet Society
> P.O. Boc 6303
> Tel: +(231)76324918 OR +(231)3693891
> 
> _______________________________________________
> Chapter-delegates mailing list
> Chapter-delegates at elists.isoc.org
> https://elists.isoc.org/mailman/listinfo/chapter-delegates

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://elists.isoc.org/mailman/private/chapter-delegates/attachments/20120611/673bf566/attachment.htm>