| reply to ISurfTooMuch
Re: DNS flaw.. We will see it a lot only because:
step 1 - alter dns records
step 2 - ?????
step 3 - profit |
|
mworks
join:2006-06-13
Faison, NC | said by insomniac84:We will see it a lot only because: step 1 - alter dns records step 2 - ????? step 3 - profit Alter a site like bank of america, grab login info for just 5 minutes and walk away with thousands . |
|
|
|
| reply to insomniac84
Ah, but I can complete that for you.
step 1 - alter dns records
step 2 - redirect users from legit commerce and banking sites to lookalike phishing sites
step 3 - grab credit card numbers and usernames/passwords
step 4 - shop with stolen cards, sell stolen card numbers, and drain bank accounts
step 5 - profit |
|
| never understood people that shopped online with stolen credit card numbers. if i buy a plasma...dont i have to have it "shipped somewhere"? |
|
| You'd think that would be a deterrant, but people seem to still get away with it. And I'd imagine many stolen card numbers would be printed on counterfeit cards and used overseas. I doubt a shop in Moscow or Shanghai is going to care too much if a card is stolen as long as the transaction is approved. The shop owner is going to sell the goods for a profit, and they can always deny they knew the card was stolen if they're asked about it.
Still, I think the big money would be in selling the numbers. The seller gets their money, and the buyers use the cards until they're canceled. |
|
 morboComplete Your Transaction
join:2002-01-22
00000
 ·Charter
| reply to baineschile1
said by baineschile1 :
never understood people that shopped online with stolen credit card numbers. if i buy a plasma...dont i have to have it "shipped somewhere"?
there's no real enforcement out there for these smallish crimes. local police won't touch it and credit card companies prefer to write it off, as long as it's not too much.
the lawyers and effort would cost them more than it's worth.
sad but true. |
|
| reply to baineschile1
You can get away with using stolen card numbers for intangible things like memberships to sites, or for purchasing more domain names/hosts. |
|
 dvd536as Mr. Pink as they comePremium
join:2001-04-27
Phoenix, AZ
kudos:4 | reply to ISurfTooMuch
said by ISurfTooMuch:Ah, but I can complete that for you. step 1 - alter dns records step 2 - redirect users from legit commerce and banking sites to lookalike phishing sites step 3 - grab credit card numbers and usernames/passwords step 4 - shop with stolen cards, sell stolen card numbers, and drain bank accounts step 5 - profit step 4.5 - sell booty on ebay.
--
When I gez aju zavateh na nalechoo more new yonooz tonigh molinigh - Ken Lee |
|
| reply to insomniac84
Am I the only person that gets the reference to the Underpants Gnomes? |
|
1 edit | reply to baineschile1
said by baineschile1 :
never understood people that shopped online with stolen credit card numbers. if i buy a plasma...dont i have to have it "shipped somewhere"?
People will ship to other addresses and attempt to intercept the package. It happened to my grandma. She got a package with what she refers to as computer thing. Calls the shipper and the company and neither cared it wasn't hers and she didn't pay for it. (Maybe the companies all assumed it must have been a gift because no one reported fraud?) But a few days later some kid comes to her door and says he heard she got a package. She knowing there was no way this was possible, she told him he could have it if he calls UPS and get them to authorize her to give it to him. She never saw him again and after a few months (in case someone did want it back) she told me about it. It was a mediocre video card and I think I ended up putting in an aunt's computer. |
|
| reply to Waffle_SS
said by Waffle_SS:Am I the only person that gets the reference to the Underpants Gnomes? Nope! It's pretty tough to miss it, if you're "in the know"... 
- Tate
--
Happiness is an OC-768 in your basement... |
|
