Guy breaks into scammers account, refunds multiple victims their cash
68 replies, posted
This guy's a hero.
Kind of motivational to see how easy it is to bait these scamming assholes, just a lill' bit of luck, a vm and a keylogger needed.
I used to just keep these guys on the phone for like 45 minutes while I tried "my Dad's" credit cards, none of which worked. Just put your phone on speaker while you're browsing the internet and start saying numbers really slowly, see how many fake card numbers you can give them before they hang up on you. If you act really slow and stupid and make lots of smalltalk they'll sit there for an hour before telling you to go fuck your own mother, at least that's what happened to me.
Can anyone explain how he got access to the scammer's account? It doesn't even look like he did anything, but I don't really know what he did.
PSA:
Please don't prank call these kinds of scammers using your personal phone. Use a skype or google hangouts call. I made the mistake of doing so a few years back and to this day i receive around a scam call a day. Usually the same, automated message saying i've been preapproved for a payday loan.
I can't change my number (well I can, i just don't want to) I've got so many thing i'd have to change and it would end up with a lot of people calling my old number.
One of the guys got mad at me, cursed me out and must have added me to a list because like I said above, i'm called once a day. I have probably 1K+ numbers blocked on my phone.
[QUOTE][img]http://i.imgur.com/BpZcPnx.png[/img][/QUOTE]
Yes, I know I was a idiot for doing so. I was was like 13 when I did so and I made the mistake. I'm almost 17 now so these guys are fucking persistent.
He used a keylogger. What amazes me is the scammer logged in using the computer he is remote controlling.
[QUOTE=Cold Finger;51695690]Can anyone explain how he got access to the scammer's account? It doesn't even look like he did anything, but I don't really know what he did.[/QUOTE]
The scammer is remotely connecting to the guy's computer, so the guy recording the video put keylogging software on his own machine which records any key presses. When the scammer logged into the website, that software recorded the login info.
-snip, got beat to the punch-
Pretty incredible that he managed to do that. What kind of idiot logs into a computer they've remoted into?
[QUOTE=Cold Finger;51695690]Can anyone explain how he got access to the scammer's account? It doesn't even look like he did anything, but I don't really know what he did.[/QUOTE]
He had a keylogger running in the background and literally captured the dude's password through it. The guy, being dumber than his target mark half the time, didn't catch it.
[editline]19th January 2017[/editline]
FFFFFFFFFFFFFFFFFFFFFFFFFFF-
Scammer deserved it. These people are scum that prey on the elderly.
[QUOTE=Amaurus;51695889]-snip, got beat to the punch-
Pretty incredible that he managed to do that. What kind of idiot logs into a computer they've remoted into?[/QUOTE]
Unless this was a dumb lone guy trying to scam people for some cash, a better question would be why the company thought it was okay for a caller to use the merchant page to enter credentials instead of a separate landing page.
[QUOTE=Sonador;51693606]I fucking love scammer trolls. They're doing god's work.
We used to get them here until I started doing something pretty devious - when they'd call and I'd figure out they were a telemarketer or a scammer, I'd go nab the other remote phone, pick up on it, and hold them receiver-to-speaker so they'd get blasted with super loud high frequency feedback until they hung up. We get about one call every two weeks now save for the campaigners, and I don't fuck with the campaigners, I just tell them "I know who I'm voting for," and hang up on them.
My friend answers 800 numbers with "911, what's your emergency" and then blows up their phone threatening to arrest them when they hang up. That's too far for me though, since it's totally illegal.[/QUOTE]
What I like to do is waste their time. If you really want to get them, that's what you need to do. Not only is it perfectly legal, it's also the most satisfactory thing you can do for a kind of payback without going as far as the guy in the OP.
When I get calls like that I sit down and just continue doing whatever I was doing like they aren't even there. In the case of telemarketers this is very simple to do, most of the time they're trying to sell you a product and will ask if you have certain products. Just make up combinations of different kinds of products and make them run in circles trying to figure out what you have, when in reality you don't have anything for what they're trying to sell you. "Sir, do you have a server running Windows Server 2012?" "Not Windows Server 2012, but I have this thing over here called Apple Oracle if that's any help to you."
They of course have to do their job and try to figure out if they have any products for this, and even though they know you're lying, if you continue to act as a potential customer they HAVE to stay on the line.
One time I wasted someone's time for 40 minutes doing this. It was great.
In situations with "Microsoft" scammers pretending to be Pajeet from MS calling an old lady about viruses on her computer, I've personally not done much with those but there are plenty of videos out there of people wasting HOURS of their time with them. They make them run circles in a VM, some even go so far as to have VMs within VMs. They're great.
[editline]19th January 2017[/editline]
A very nice nun lady at a local convent came to my place of business to ask me if she had just been scammed. Sure enough "Mark" from MS who said he was in Florida took $600 from her, and an additional $200. I told her it absolutely was a scam, and asked how she paid. She used her debit card. I told her to immediately contact her bank so they can start an investigation on the legitimacy of the charges. A few days later I had to write up a letter to the bank giving them my thoughts on how the charges were illegitimate.
It was a few pages long but the basic summation was "This is pretty much phishing and I think you know as well as I do that anything acquired by phishing and other forms of nefarious social engineering are illegal".
She popped back in a few weeks later ecstatic because the bank reimbursed her for the money. Felt good.
Wrong or not, it's real liberating to see scammers like this be out classed like this!
[QUOTE=QwertySecond;51694793]Scorpionick's running a keylogger, so when the "tech support" logs in he's got his username and password.
He's asking some technical questions to see what this technician's knowledge is like, purely for shits and giggles.
But I can't explain the flies.[/QUOTE]
I think the flies are to show the "tech support" guy he's dirty/scummy, because he can see the screen too.
[editline]19th January 2017[/editline]
[QUOTE=bloboo;51696299]usually when a telemarketer calls I say "I'll accept your offer, but only if you allow me to tell you about the lord" and I just start rambling about random shit.[/QUOTE]
introducing telemarketers to whatever religion is honestly one of the funniest, poetic things you can do
[QUOTE=Ott;51693802]He's still breaking the law though. An eye for an eye and all that.[/QUOTE]
Holy hell, the reception to this post has been nothing but terrible.
I have to point out to everyone that any unauthorized computer access is, in fact, [URL="https://www.law.cornell.edu/uscode/text/18/1030"]illegal[/URL] regardless of how you feel about the situation and outcome.
Ethically, though, this is amazing.
[QUOTE=silentjubjub;51696370]Holy hell, the reception to this post has been nothing but terrible.
I have to point out to everyone that any unauthorized computer access is, in fact, [URL="https://www.law.cornell.edu/uscode/text/18/1030"]illegal[/URL] regardless of how you feel about the situation and outcome.
Ethically, though, this is amazing.[/QUOTE]
Can it really be defined as "unauthorized" access when the "technician" not only saw a keylogger was actively running on the system, but willingly logged in to a sensitive payment gateway with his credentials despite knowing that? He did it in Chrome as well and at that point it would have been super easy for the end user to "accidentally" press save my password. Accidentally and unintentionally, of course.
Point is, the scammer was a fucking moron and all of the signs were in front of him the whole time. He didn't think anything about it. The keylogger even pops up in the middle of the screen! He did it to himself.
As much as you want it to be illegal, it simply isn't. The scammer was incompetent. Let's look at the simple fact that the scammer logged into the payment gateway on a "compromised" machine. He has no fucking idea what's on there. If you work anywhere else and you do something like that you'd get fired on the spot and likely put on some kind of blacklist for being a fucking moron.
[QUOTE=haloguy234;51696409]Can it really be defined as "unauthorized" access when the "technician" not only saw a keylogger was actively running on the system, but willingly logged in to a sensitive payment gateway with his credentials despite knowing that? He did it in Chrome as well and at that point it would have been super easy for the end user to "accidentally" press save my password. Accidentally and unintentionally, of course.
Point is, the scammer was a fucking moron and all of the signs were in front of him the whole time. He didn't think anything about it. The keylogger even pops up in the middle of the screen! He did it to himself.
As much as you want it to be illegal, it simply isn't. The scammer was incompetent. Let's look at the simple fact that the scammer logged into the payment gateway on a "compromised" machine. He has no fucking idea what's on there. If you work anywhere else and you do something like that you'd get fired on the spot and likely put on some kind of blacklist for being a fucking moron.[/QUOTE]
If you put someone else's credentials into a user/password box and they haven't authorized you to do so then start making payment transactions on their behalf its probably pretty illegal. Regardless of what circumstances they used their credentials, being a moron doesn't mean you aren't protected by the law.
I don't think anyone would deny that its awesome, they got what they deserved etc but it doesnt make it legal.
Jesus Christ all that money. The guy could have easily of caved into his greed like the hackers when he saw those numbers. What a humble ass guy.
One time a telemarketer called me and as soon as they said my last name wrong I just said "oh shut the fuck up" as I lowered the phone from my face and hung up
She called back and said "did you really have to say th-" and I hung up even faster
[QUOTE=KingKombat;51696526]One time a telemarketer called me and as soon as they said my last name wrong I just said "oh shut the fuck up" as I lowered the phone from my face and hung up
She called back and said "did you really have to say th-" and I hung up even faster[/QUOTE]
You know, those people are just trying to make a living... They're not trying to scam you like you seem to think they are. You just sound like an edgy dick doing that.
I mean she even took time out of her job to try and make a human connection with you by calling back and asking that; and you spit in her face even harder, and you're happy about it recalling it. What a piece of work.
[QUOTE=ShimTaco;51695727]PSA:
Please don't prank call these kinds of scammers using your personal phone. Use a skype or google hangouts call. I made the mistake of doing so a few years back and to this day i receive around a scam call a day. Usually the same, automated message saying i've been preapproved for a payday loan.
I can't change my number (well I can, i just don't want to) I've got so many thing i'd have to change and it would end up with a lot of people calling my old number.
One of the guys got mad at me, cursed me out and must have added me to a list because like I said above, i'm called once a day. I have probably 1K+ numbers blocked on my phone.
Yes, I know I was a idiot for doing so. I was was like 13 when I did so and I made the mistake. I'm almost 17 now so these guys are fucking persistent.[/QUOTE]
go to your provider and get the line blocked? Or get a new line.
I can't believe people actually fall for this shit
[QUOTE=Ott;51693802]He's still breaking the law though. An eye for an eye and all that.[/QUOTE]
If someone mugged a guy and then someone mugged the mugger and gave the shit back to the original victim I really don't see how he's breaking the law.
[QUOTE=Toothpick;51696662]You know, those people are just trying to make a living... They're not trying to scam you like you seem to think they are. You just sound like an edgy dick doing that.
I mean she even took time out of her job to try and make a human connection with you by calling back and asking that; and you spit in her face even harder, and you're happy about it recalling it. What a piece of work.[/QUOTE]
That's being melodramatic, he decided to hang up instead of continuing a worthless rant. In a sense he gave her a better opportunity to find some other smuck the next number over. A way to pay her back for the time she wasted and tried to waste again
[QUOTE=Katatonic717;51694446]It's really simple. A lot of the stuff is nonsense bullshit the scammer keeps saying to try and trick the victim into paying them lods e mone[/QUOTE]
They open up event log on windows and point to all the errors saying they're critical
Anyone whose ever used event log knows that those "errors" are normal and don't have any impact on system performance whatsoever
In my eyes, this dudes a hero and he's probably just saved a lot of peoples asses and caused this scamming company out of business
Are people actually trying to advocate scamming people by phone
Holy shit lmao
[QUOTE=Toothpick;51696662]You know, those people are just trying to make a living... They're not trying to scam you like you seem to think they are. You just sound like an edgy dick doing that.
I mean she even took time out of her job to try and make a human connection with you by calling back and asking that; and you spit in her face even harder, and you're happy about it recalling it. What a piece of work.[/QUOTE]
Working at a call center and working at a scam call center are two different beasts. I'm always very nice and courteous with call center people who [I]I call for support[/I], but the people who ignore the national do not call list and call me every day to sell me fake auto insurance are fucking cunts and I could care less about them needing to make a living. If somebody pays you $15/hr to run around punching people in the gut, you don't get to cop-out and say "I'm just making a living!". It's the exact same for these idiots who are breaking the law and working for scammers calling me up every day with randomized numbers, ignoring my requests to be placed on their do-not-call lists, and telling me today is the 217th consecutive "last day" to extend the warranty on my vehicle. If you're scamming people, you can/should go fuck yourself and nobody should be standing up for these people. Work at a McDonald's, be homeless, I don't really give a shit. Plenty of people find gainful employment that doesn't involve making scamming the naive, elderly and disabled over the phone.
[QUOTE=J!NX;51697418]Are people actually trying to advocate scamming people by phone
Holy shit lmao[/QUOTE]
You really have to be a dense motherfucker to think I was talking about scammers, instead of telemarketers; people actually selling you products.
The dude even said telemarketers in the post I was replying to.
Holy shit lmao
[QUOTE=Toothpick;51697535]You really have to be a dense motherfucker to think I was talking about scammers, instead of telemarketers; people actually selling you products.
The dude even said telemarketers in the post I was replying to.
Holy shit lmao[/QUOTE]
Fuck telemarketers too. They are scammers all the same. What is actually the difference?
Are you one or something?
[editline]20th January 2017[/editline]
And yes, fuck door-to-door salesmen too, for that matter
[QUOTE=J!NX;51697590]Fuck telemarketers too. They are scammers all the same. What is actually the difference?
Are you one or something?
[editline]20th January 2017[/editline]
And yes, fuck door-to-door salesmen too, for that matter[/QUOTE]
Well, Toothpick's not wrong. Many telemarketers and door-to-door salespeople are just trying to make a living, and it's easy to get those jobs. Maybe they don't even have a choice but to get a job like that, due to some life circumstance that makes them un-hire-able at most other jobs. You have no idea who that person really is, just what their job is.
You can just as easily politely dismiss them instead of shouting expletives or blowing a fucking airhorn into the phone. Being mean to those people is in the same vein as being mean to a store clerk or restaurant waiter at a major chain. Your grievances with the company have nothing to do with the dude behind the counter; that's just a regular guy trying to make a living off the shitty job he was able to get.
[QUOTE=Shugo;51697706]Well, Toothpick's not wrong. Many telemarketers and door-to-door salespeople are just trying to make a living, and it's easy to get those jobs. Maybe they don't even have a choice but to get a job like that, due to some life circumstance that makes them un-hire-able at most other jobs. You have no idea who that person really is, just what their job is.
You can just as easily politely dismiss them instead of shouting expletives or blowing a fucking airhorn into the phone. Being mean to those people is in the same vein as being mean to a store clerk or restaurant waiter at a major chain. Your grievances with the company have nothing to do with the dude behind the counter; that's just a regular guy trying to make a living off the shitty job he was able to get.[/QUOTE]
If you're not on the do-not-call list, politely decline and hang up.
If you are on the do not call list, game's on.
It's up to you, as an employee, to be aware of the actions of your employer. I quit my first security job when I found out they were hiring undocumented Fijian immigrants without proper permits because I didn't feel like getting sued into the dirt.
Sorry, you need to Log In to post a reply to this thread.