Web scam: Pssst... wanna buy a house?
Web scammers are turning to online property forums to collect personal information about users for later attempts to swindle them out of money, according to a security researcher.
Renters and buyers often post phone numbers, instant messenger nicknames and e-mail addresses on forums along with specific descriptions of the kind of property they're looking for.
This makes it easy for scammers to write proposals that will elicit further information, said Chris Boyd, security research manager for FaceTime Communications Inc., a security vendor.
"They basically treat these Web sites as a gold mine of information," Boyd said.
The scammers then contact the property seeker, offering them a similar property to what they have described, complete with photos, Boyd said. The potential victim is also often asked a range of other personal questions, such as their occupation, marital status and even if they have a pet.
But there's a catch: the scammer usually asks for a deposit before the seeker can see the property. The requested deposit is usually below market price, another way the scammer tries to lure the victim, Boyd said.
The e-mail pitches are similar to so-called 419 scams, which offer some greater reward in exchange for money in advance. A user on one property forum posted part of an e-mail from one scammer illustrating an unsuccessful swindle.
Reading the "header" of such an e-mail, the part of the message documenting its route over the Internet from sender to receiver, to determine who really sent it is one way to spot a scam. It is possible to fake some header information, but other parts can't be changed.
Although the property promised in this message is in the U.K, the e-mail's header reveals that it originated from an IP (Internet protocol) address belonging to Nigerian Telecommunications Ltd. -- a big red flag.
IDG News Service
Symantec Backup Exec 12 and Backup Exec System Recovery 8 deliver industry leading Windows data protection and system recovery. Download this whitepaper to find out the top reasons to upgrade and how to get continuous data protection and complete system recovery.
Data and system loss — from a hard drive failure, malicious attack, natural disaster, or simple human error — can happen anytime. Don’t leave your business vulnerable. Make sure you have a secure recovery strategy in place. Symantec's latest backup and system recovery technology can efficiently restore critical applications, individual emails and documents and even restore your entire system in minutes in the event of a loss.
Businesses face a growing challenge to ensure that the IT environment is properly protected. Backup Exec 12 integrates with other applications in the Symantec family of products, to complement your current data protection strategy, keep your data securely backed up and make it recoverable when you need it most.
Crimeware: Understanding New Attacks and Defenses
By Markus Jakobsson, Zulfikar Ramzan
Published Apr 6, 2008 by Addison-Wesley Professional. Part of the Symantec Press series.
Enter now! | Official rules | Sample chapter
Securing VoIP Networks: Threats, Vulnerabilities, and Countermeasures
By Peter Thermos, Ari Takanen
Published Aug 1, 2007 by Addison-Wesley Professional.
Enter now! | Official rules | Sample chapter







