Feeds: RSS, Atom

« Previous   Page 3 of 16   Next »

New page: "Research"

The Purportal home page has changed. It now is focused on easier access to our major resource: the scammy spam collection. The off-site search boxes are on a new page -- click the "research" link in the navigation bar in the upper right to get there. Let me know what you think!

More: http://purportal.com/research/

April 25th, 2011

Twitter feed is back

Purportal's Twitter feed -- which announces each new piece of scammy spam as it hits the database -- has been down for a while due to a change on Twitter's end. That's all fixed now, so you can get your up-to-the-hour spam fix again.

More: http://twitter.com/#!/purportal

April 23rd, 2011

Announcing smarter search

I've made a long overdue improvement to Purportal's scammy-spam search. You can now type multiple words into the search box and it will find all messages that contain all those words. Simple, right? Wasn't that way until now. A great way to use this: copy a line from a suspicious email you received, and paste it into the search box (don't worry if it doesn't fit). The results page will show the entries in the database that match your search. It will show up to 50, with the newest ones always at the top.

More: http://purportal.com/spam/search

February 28th, 2011

So-called "one-click fraud"

"After the boy enters the Web site, it flashes notifications that demand a registration fee. The boy is also threatened with legal actions and told his family will be contacted if a payment is not made. Although the threats are meaningless, without any legal backing, the victims of one-click fraud are led to believe the single click they made to enter the Web site puts them at fault. They often pay the fee."

More: http://www.ini.cmu.edu/news/2009/07/one-click_fraud.html

January 28th, 2011

Scams aimed at job hunters

One of the new populations that scammers have started to target is job hunters. I think the scammers' calculation is: they might be desperate for money, and that might impair their judgement.

In my recent job search I received some of these "offers". Familiar stuff to a scam buff like me, but often with an extra touch -- my full name, which they had gotten from my resume. For some reason, hotjobs.yahoo.com was the source of the majority of scammers -- maybe they make it easier for non-employers to see candidate info, or maybe that's just the the current flavor of the month in scamming circles.

Monster.com has run a series of articles on these scams. If you or someone you know is job-seeking, check it out.

More: http://career-advice.monster.com/scams/employment.aspx

December 24th, 2010

Fraud Magazine

Did you know there was an Association of Certified Fraud Examiners?

Well, from the ACFE World Headquarters in Austin, TX comes Fraud Magazine, an online journal devoted to some of our favorite topics. Recent article subjects include:

  • Use the Proof-of-Cash Method When Casting for a Fraudster
  • Anatomy of a Social Engineering Scam
  • How CFEs Can Save Firms from Bankruptcy

You have to pay for membership to get full access to their content (students can join free). It's still interesting even if you don't sign up. Check it out.

More: http://www.fraud-magazine.com/

December 15th, 2010

Phishing quiz from Sonicwall

The security vendor Sonicwall has a fun online quiz to test your ability to spot phishing email scams. Think you're good? See if you can get 10 out of 10. Still need to tune up your skills? Read their detailed explanations for any questions you get wrong. It's quick and easy.

More: http://www.sonicwall.com/phishing/

October 24th, 2010

Fulltext Purportal phishing archives available

The Purportal archive contains over 6000 email messages from perpetrators of phishing scams and other related fraud. In addition to the rendered text versions made available here, the full original source of each message is stored. This includes the email headers, which contain information that can reveal the origin of the message. Anyone working in relevant areas of law enforcement or academic research is welcome to have full access to this corpus. For more info, contact me at the email address linked in the footer.

More: http://purportal.com/spam/

April 28th, 2010

Spam collection updates via Twitter

Every night, the Purportal fairies import new scammy spams into the collection. Now each of these additions is announced via Twitter. Follow us to remain on the cutting edge of sleazy spam!

More: http://twitter.com/purportal

November 17th, 2009

2300 websites you shouldn't shop at

Recently a friend was victimized by one of those sleazy spammer scripts that hijacks your web-based email account (Hotmail, in this case) and uses it to send spam to everyone in your address book.

I took a look at the site that the email promoted. It's a China-based ecommerce site claiming to sell everything from cellphones to electric guitars to motorcycles. I've inquired by email as to how they can sell motorcycles at sub-retail prices with free shipping, but I don't expect an honest reply!

While researching this, I discovered that the scam had been going on for a long while, under a steady stream of different domain names. Then I came across a mind-blowing list of 2300 domain names that are implicated in this type of fraudulent activity. The list includes winners like china-wow-ebay.com.

More: http://www.firetrust.com/en/blog/chris/the-bigger-list-of-chinese-scams

July 21st, 2009