May
24
Do you hate spammers as much as I do? Especially the criminal types - the ones phishing for confidential financial information. I want to see every one of those bastards caught and thrown in jail to rot for years. So every once in a while when I get a phishing spam, instead of deleting it, I mess with the spammers a bit. Sometimes I’ll just click on the link and enter rude comments. (If blocked by your anti-virus software you have to okay access - not always a good idea as I have heard that sometimes the websites themselves have a way of extracting information. Only do this if you have good up-to-date anti-virus software.)
But sometimes I do a bit more. Sometimes I’ll forward the email to Phonebusters, the Canadian Anti-Fraud Call Centre. Originally set up to fight telephone fraud, it also handles email fraud. Forward fraudulent emails to them at info@phonebusters.com . The website is worth exploring as they list all the different frauds being perpetrated and it is worth knowing about what sort of frauds are being committed. Recent advisories warn about a creepy emails that say the sender will hurt or kill you if you don’t do what they say. If you get one, report it immediately.
But sometimes I’ll go a bit further still. I received a phishing email today advsing me in French that my account with Desjardins credit union needed verification. If you hover your mouse over the link in the email, the url should show up at the bottom of the page. That will give you the parent website. In this case, the parent website was joycesanders.net Next I went to Whois and tracked down the registrant - you can see the result here.
That told me the registrant was a Mr. Steve Sloan of CS Domain Solutions (Steve@tcs7.com). I forwarded the spam email to Mr. Sloan advising him that the website registered in his name was being used to send out spam and that he should determine who had compromised his site and report it to police.
The Whois also shows the hosting company - in this case, tcs7.co. So I visited TCS7.com which is a web hosting company and followed the links to contacts. I sent them a note saying that one of the websites they hosted was sending out phishing spam and since the web site url was registered to their employee, Steve Sloan, they should be able to track down the real owner and report him to police.
Now I don’t know if this will accomplish much, but it will put this web hosting company on alert that their services have been compromised by criminals. And if they do have the information on the perpetrator of the fraud, maybe they will alert the authorities. This particular company is based in Greeley, Connecticut.
I only do this on occasion. If I did it for every spam email I got, I would be working night and day as I get a lot of them. But if you like to see spammers feathers ruffled and want a good laugh too, let me tell you about a group of people known as spam-baiters. These folks have made a hobby of creating false identities and then replying to criminal spammers, usually Nigerian fraud spammers, and leading them on a merry chase. One of the best sites cataloguing these efforts is 419 Eater named after the Nigerian criminal code section outlawing such frauds. The site belongs to a spam baiter calling himself Shiver Metimbers.
What does a spam baiter do? He replies to the spammer using his bogus identity and manipulates the greedy con artist to get involved in some even more lucrative (but phony) scheme. Once the spammer is hooked, the psam baiter has him go through all sorts of hoops to claim his ill-gotten gains. These hoops include joining a bogus church and undergoing church initiation rites, sending photographs of themselves holding strange signs or doing strange things, and even getting themselves tattooed (which seems a bit harsh since tattoos are hard to remove). One of my favorites is getting the spammer to carve an elaborate bust from wood and send it along to the spam baiter, posing as a museum curator looking for authentic artifacts. Another is getting the spammer to write out in longhand the entire text of The Hitchhiker’s Guide to the Galaxy for the spam baiter who is posing as a software company executive developing handwriting recognition software. Click on the archive link to check out the different spam baits. Check out the The Tale of the Painted Breast fror a delightful spam bait about a phony church. The Induction Pledge is hilarious. Also check out Busted for one of the art gallery spam baits.
I have been toying with trying this myself just for fun. I’d really like to see those phony lottery guys get tweaked.
