Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Web-App-Sec
[Top] [All Lists]

RE: Web Scams

Subject: RE: Web Scams
Date: Thu, 26 Aug 2004 14:14:46 -0400
Mike, 

There are multiple law enforcement authorities you can report this too - the 
challenge is in knowing which one actually has the jurisdiction and resources 
to pursue it.  A good start may be the Internet Fraud Complaint Center.  
Although I personally don't know much about them, they appear to be at least 
affiliated with the Dept of Justice, and definitely specialize in issues like 
phishing : http://www.ifccfbi.gov/index.asp 

You could also try Infragard, which is a coop between the FBI and the private 
sector.  I know one of their goals is to help the "general public" understand 
how to report things to the Bureau, etc.  Their national site is 
http://www.infragard.net and they have local chapters as well.   You could also 
simply call your local FBI office - there's one in every major city. 

Regardless of which route you take with the authorities, you always want to 
report them to the organization being "faked" . They have a vested interest in 
tracking, ceasing, and preventing phishing scams.   I know that Citibank has 
reporting mechanisms, and Ebay does as well : 
http://pages.ebay.com/help/contact_inline/account_security.html .   

I would also encourage reporting it to community sites such as 
http://www.antiphishing.org/report_phishing.html .  

Good luck !

- Matt. 


-----Original Message-----
From: Lawrence, Michael [mailto:MLawrence@soroc.com]
Sent: Wednesday, August 25, 2004 6:05 PM
To: webappsec@securityfocus.com
Subject: Web Scams


Who other then the local autorities, does someone report a e-mail scam? I have 
received two now claiming to be from E-bay. The funny thing is I do not use 
e-bay at work, nor do I use my work e-mail for it. (which is where it was 
sent). 
The scam asks for all the information required for identity theft. (sin number, 
bank acount info, credit card info, e-bay information). 
Any input would be great. This e-mail has appeared in a couple of co-worker's 
inboxes.

Mike

<Prev in Thread] Current Thread [Next in Thread>