<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	
	>
<channel>
	<title>
	Comments on: Phishing must catch a significant amount of prey	</title>
	<atom:link href="https://thenewneo.com/2023/05/18/phishing-must-catch-a-significant-amount-of-prey/feed/" rel="self" type="application/rss+xml" />
	<link>https://thenewneo.com/2023/05/18/phishing-must-catch-a-significant-amount-of-prey/</link>
	<description>A blog about political change, among other things</description>
	<lastBuildDate>Mon, 22 May 2023 19:13:49 +0000</lastBuildDate>
	<sy:updatePeriod>
	hourly	</sy:updatePeriod>
	<sy:updateFrequency>
	1	</sy:updateFrequency>
	<generator>https://wordpress.org/?v=7.0.2</generator>
	<item>
		<title>
		By: Mike-SMO		</title>
		<link>https://thenewneo.com/2023/05/18/phishing-must-catch-a-significant-amount-of-prey/#comment-2680721</link>

		<dc:creator><![CDATA[Mike-SMO]]></dc:creator>
		<pubDate>Mon, 22 May 2023 19:13:49 +0000</pubDate>
		<guid isPermaLink="false">https://www.thenewneo.com/?p=125970#comment-2680721</guid>

					<description><![CDATA[Statistically it is a good game. The messages cost almost nothing to send. We know next to nothing about how things work, so a suspicious note delivered to a safe, personal space just might be legitimate. On the other hand, when I get an email in which I am one of a hundred addressees, all listed in alphabetical order, my paranoia is activated.

Currently, I have no active email service. The agents typically don&#039;t want to deal with account numbers, email addresses, &quot;real&quot; names, etc., so that &quot;off&quot; email might be legit. Maybe. Paranoia gets you only so far in a world of incompetents. 

No one is going to tell me how a &quot;master list&quot; of email addresses got into the hands of a &quot;fraudster&quot; or what other personal information has been &quot;hidden&quot; on my machines. The system is opaque. I keep personal info in a little notebook, but after I visit a site, is something left on my machine somewhere? There are lots of games in &quot;phishing&quot;.]]></description>
			<content:encoded><![CDATA[<p>Statistically it is a good game. The messages cost almost nothing to send. We know next to nothing about how things work, so a suspicious note delivered to a safe, personal space just might be legitimate. On the other hand, when I get an email in which I am one of a hundred addressees, all listed in alphabetical order, my paranoia is activated.</p>
<p>Currently, I have no active email service. The agents typically don&#8217;t want to deal with account numbers, email addresses, &#8220;real&#8221; names, etc., so that &#8220;off&#8221; email might be legit. Maybe. Paranoia gets you only so far in a world of incompetents. </p>
<p>No one is going to tell me how a &#8220;master list&#8221; of email addresses got into the hands of a &#8220;fraudster&#8221; or what other personal information has been &#8220;hidden&#8221; on my machines. The system is opaque. I keep personal info in a little notebook, but after I visit a site, is something left on my machine somewhere? There are lots of games in &#8220;phishing&#8221;.</p>
]]></content:encoded>
		
			</item>
		<item>
		<title>
		By: Snow on Pine		</title>
		<link>https://thenewneo.com/2023/05/18/phishing-must-catch-a-significant-amount-of-prey/#comment-2680431</link>

		<dc:creator><![CDATA[Snow on Pine]]></dc:creator>
		<pubDate>Sat, 20 May 2023 03:08:50 +0000</pubDate>
		<guid isPermaLink="false">https://www.thenewneo.com/?p=125970#comment-2680431</guid>

					<description><![CDATA[P.S.--The &quot;pot&quot; situation apparently applies in a lot of cases where lots of money may have been stolen, so that while a victim may have the satisfaction of seeing the guilty perp sentenced to have to make restitution of many thousands, or hundreds of thousands of dollars, or even more, the perp has no realistic chance of making enough money to make a full restitution and, in fact, some perps  deliberately take a very low paying job, so that they cannot possibly make any meaningful restitution. 

See, for instance, the case of the young woman sentenced two days ago to an 11 year prison term, plus ordered to make restitution of $452 million dollars.*

*  See https://www.nbcnews.com/news/us-news/elizabeth-holmes-loses-bid-avoid-prison-ordered-pay-452m-restitution-rcna84837]]></description>
			<content:encoded><![CDATA[<p>P.S.&#8211;The &#8220;pot&#8221; situation apparently applies in a lot of cases where lots of money may have been stolen, so that while a victim may have the satisfaction of seeing the guilty perp sentenced to have to make restitution of many thousands, or hundreds of thousands of dollars, or even more, the perp has no realistic chance of making enough money to make a full restitution and, in fact, some perps  deliberately take a very low paying job, so that they cannot possibly make any meaningful restitution. </p>
<p>See, for instance, the case of the young woman sentenced two days ago to an 11 year prison term, plus ordered to make restitution of $452 million dollars.*</p>
<p>*  See <a href="https://www.nbcnews.com/news/us-news/elizabeth-holmes-loses-bid-avoid-prison-ordered-pay-452m-restitution-rcna84837" rel="nofollow ugc">https://www.nbcnews.com/news/us-news/elizabeth-holmes-loses-bid-avoid-prison-ordered-pay-452m-restitution-rcna84837</a></p>
]]></content:encoded>
		
			</item>
		<item>
		<title>
		By: Snow on Pine		</title>
		<link>https://thenewneo.com/2023/05/18/phishing-must-catch-a-significant-amount-of-prey/#comment-2680429</link>

		<dc:creator><![CDATA[Snow on Pine]]></dc:creator>
		<pubDate>Sat, 20 May 2023 02:50:29 +0000</pubDate>
		<guid isPermaLink="false">https://www.thenewneo.com/?p=125970#comment-2680429</guid>

					<description><![CDATA[Scammers prey especially on the sometimes uninformed, naive, or often cognitively impaired elderly, and can wreck their &quot;golden years,&quot; as they drain the money from their accounts that was supposed to support them in retirement, or perhaps to be left as an inheritance for their remaining family members.

Yet, from what I can gather, it is rare for anyone in authority to try to track down, much less to prosecute these cruel scammers.

(I understand, though, that such scammers are very slippery creatures, move around a lot and, even if caught, prosecuted, sentenced, and ordered to pay &quot;restitution,&quot; have hidden, or spent the money, and  quite often don&#039;t even have &quot;a pot to piss in.&quot;)]]></description>
			<content:encoded><![CDATA[<p>Scammers prey especially on the sometimes uninformed, naive, or often cognitively impaired elderly, and can wreck their &#8220;golden years,&#8221; as they drain the money from their accounts that was supposed to support them in retirement, or perhaps to be left as an inheritance for their remaining family members.</p>
<p>Yet, from what I can gather, it is rare for anyone in authority to try to track down, much less to prosecute these cruel scammers.</p>
<p>(I understand, though, that such scammers are very slippery creatures, move around a lot and, even if caught, prosecuted, sentenced, and ordered to pay &#8220;restitution,&#8221; have hidden, or spent the money, and  quite often don&#8217;t even have &#8220;a pot to piss in.&#8221;)</p>
]]></content:encoded>
		
			</item>
		<item>
		<title>
		By: I R A Darth Aggie		</title>
		<link>https://thenewneo.com/2023/05/18/phishing-must-catch-a-significant-amount-of-prey/#comment-2680360</link>

		<dc:creator><![CDATA[I R A Darth Aggie]]></dc:creator>
		<pubDate>Fri, 19 May 2023 18:18:23 +0000</pubDate>
		<guid isPermaLink="false">https://www.thenewneo.com/?p=125970#comment-2680360</guid>

					<description><![CDATA[The cost in time and money to send these phishing attacks is minute. The shear volume is large. Even at a 1/10 of 1% can be a very large number.

At which point the phisher can hoover up the victim&#039;s contact list and get addresses of people who may be more likely to fall prey because they &quot;know&quot; the person and are less suspicious.

This guy causes havoc and tries to claw back or prevent scams from succeeding. IIRC, he&#039;s fluent in Hindi, but it might one of the other major languages of India.

https://www.youtube.com/@ScammerPayback]]></description>
			<content:encoded><![CDATA[<p>The cost in time and money to send these phishing attacks is minute. The shear volume is large. Even at a 1/10 of 1% can be a very large number.</p>
<p>At which point the phisher can hoover up the victim&#8217;s contact list and get addresses of people who may be more likely to fall prey because they &#8220;know&#8221; the person and are less suspicious.</p>
<p>This guy causes havoc and tries to claw back or prevent scams from succeeding. IIRC, he&#8217;s fluent in Hindi, but it might one of the other major languages of India.</p>
<p><a href="https://www.youtube.com/@ScammerPayback" rel="nofollow ugc">https://www.youtube.com/@ScammerPayback</a></p>
]]></content:encoded>
		
			</item>
		<item>
		<title>
		By: Bruce Hayden		</title>
		<link>https://thenewneo.com/2023/05/18/phishing-must-catch-a-significant-amount-of-prey/#comment-2680357</link>

		<dc:creator><![CDATA[Bruce Hayden]]></dc:creator>
		<pubDate>Fri, 19 May 2023 17:31:28 +0000</pubDate>
		<guid isPermaLink="false">https://www.thenewneo.com/?p=125970#comment-2680357</guid>

					<description><![CDATA[So far, I have been safe. I rarely answer the phone if the number isn’t in my directory. I never do for several exchanges (775, 623, 970, 303) because I have or have had phone numbers there. I am suspicious of 480 and 602 (Phoenix), but so far, no problems with 406 (MT). Everything else is suspicious. I have a canned text message asking them to text me with their business, and only have gotten a couple responses over the years. Interestingly, my wife doesn’t get very many spam calls (maybe once a months), possibly because I do all the business for us. 

I haven’t been caught in an e-mail scam, but do check many of them out for their sophistication. One key is URLs. Big companies always have their own domains. But make sure that you look at them right to left (backwards), since that is how they are parsed. There are ways to append what look like legitimate addresses to the left. Usually, I first check out the sending email address. It had better match the domain name for the business. Very often, I find a gmail account, which get forwarded to their spam address, as a public service. Even that though can be faked, and if I am still suspicious, I open up the email header, and check it out. It’s possible to fake some of it, but that is a lot more sophisticated than most spammers can get. (Eliminating the hidden header information was why Crooked Hillary’s attorneys provided the FBI with printed emails, making automatic deduplication with the emails found on Huma’s laptop impossible - which is what was going on during 10/2016 with Peter Strzok and his team). 

One important thing to keep in mind is that most large business, and all government agencies, will not send you email asking you to click on a link to change passwords or pay them money. If in doubt, access their web site normally, and change your password, or pay your bill, that way. And there are services that can review emails for being spam, scams, etc. I do so for my brother and a couple of friends.]]></description>
			<content:encoded><![CDATA[<p>So far, I have been safe. I rarely answer the phone if the number isn’t in my directory. I never do for several exchanges (775, 623, 970, 303) because I have or have had phone numbers there. I am suspicious of 480 and 602 (Phoenix), but so far, no problems with 406 (MT). Everything else is suspicious. I have a canned text message asking them to text me with their business, and only have gotten a couple responses over the years. Interestingly, my wife doesn’t get very many spam calls (maybe once a months), possibly because I do all the business for us. </p>
<p>I haven’t been caught in an e-mail scam, but do check many of them out for their sophistication. One key is URLs. Big companies always have their own domains. But make sure that you look at them right to left (backwards), since that is how they are parsed. There are ways to append what look like legitimate addresses to the left. Usually, I first check out the sending email address. It had better match the domain name for the business. Very often, I find a gmail account, which get forwarded to their spam address, as a public service. Even that though can be faked, and if I am still suspicious, I open up the email header, and check it out. It’s possible to fake some of it, but that is a lot more sophisticated than most spammers can get. (Eliminating the hidden header information was why Crooked Hillary’s attorneys provided the FBI with printed emails, making automatic deduplication with the emails found on Huma’s laptop impossible &#8211; which is what was going on during 10/2016 with Peter Strzok and his team). </p>
<p>One important thing to keep in mind is that most large business, and all government agencies, will not send you email asking you to click on a link to change passwords or pay them money. If in doubt, access their web site normally, and change your password, or pay your bill, that way. And there are services that can review emails for being spam, scams, etc. I do so for my brother and a couple of friends.</p>
]]></content:encoded>
		
			</item>
		<item>
		<title>
		By: Oligonicella		</title>
		<link>https://thenewneo.com/2023/05/18/phishing-must-catch-a-significant-amount-of-prey/#comment-2680347</link>

		<dc:creator><![CDATA[Oligonicella]]></dc:creator>
		<pubDate>Fri, 19 May 2023 16:26:18 +0000</pubDate>
		<guid isPermaLink="false">https://www.thenewneo.com/?p=125970#comment-2680347</guid>

					<description><![CDATA[@Fullmoon:  My next door neighbor suffered a fall and brain damage and is almost incapable of saying &quot;No.&quot;  We have to make sure he doesn&#039;t make friends with low-lifes that only come around on the 1st.  

@Charles:  I miss getting phone scams, especially foreign ones.  I love to play along or rather, bait them.  I use two tactics.  First is for voices with a normal English accent.  I force an &#039;elderly&#039; accent and walk down their chosen path, delaying to &quot;go get&quot; something, slipping in false numbers, etc.  At the end I switch to my normal voice and mock them directly.  Second is for foreign accents.  They find themselves talking to Apu.  The Indian scammers immediately go ballistic.  

(Go figure: &quot;scammers&quot; isn&#039;t in the auto-correct dictionary.)

@Snow: payola is why]]></description>
			<content:encoded><![CDATA[<p>@Fullmoon:  My next door neighbor suffered a fall and brain damage and is almost incapable of saying &#8220;No.&#8221;  We have to make sure he doesn&#8217;t make friends with low-lifes that only come around on the 1st.  </p>
<p>@Charles:  I miss getting phone scams, especially foreign ones.  I love to play along or rather, bait them.  I use two tactics.  First is for voices with a normal English accent.  I force an &#8216;elderly&#8217; accent and walk down their chosen path, delaying to &#8220;go get&#8221; something, slipping in false numbers, etc.  At the end I switch to my normal voice and mock them directly.  Second is for foreign accents.  They find themselves talking to Apu.  The Indian scammers immediately go ballistic.  </p>
<p>(Go figure: &#8220;scammers&#8221; isn&#8217;t in the auto-correct dictionary.)</p>
<p>@Snow: payola is why</p>
]]></content:encoded>
		
			</item>
		<item>
		<title>
		By: Abraxas		</title>
		<link>https://thenewneo.com/2023/05/18/phishing-must-catch-a-significant-amount-of-prey/#comment-2680345</link>

		<dc:creator><![CDATA[Abraxas]]></dc:creator>
		<pubDate>Fri, 19 May 2023 16:11:06 +0000</pubDate>
		<guid isPermaLink="false">https://www.thenewneo.com/?p=125970#comment-2680345</guid>

					<description><![CDATA[There are sites that will tell you if an email is a scam or not.  There&#039;s probably a lag between the first emails being sent and them being reported, though.

I clicked on a bad link and got deluged with spam.  It got through my spam filters, and it goes on for a while.  It could have been much worse I guess.]]></description>
			<content:encoded><![CDATA[<p>There are sites that will tell you if an email is a scam or not.  There&#8217;s probably a lag between the first emails being sent and them being reported, though.</p>
<p>I clicked on a bad link and got deluged with spam.  It got through my spam filters, and it goes on for a while.  It could have been much worse I guess.</p>
]]></content:encoded>
		
			</item>
		<item>
		<title>
		By: Snow on Pine		</title>
		<link>https://thenewneo.com/2023/05/18/phishing-must-catch-a-significant-amount-of-prey/#comment-2680330</link>

		<dc:creator><![CDATA[Snow on Pine]]></dc:creator>
		<pubDate>Fri, 19 May 2023 14:39:09 +0000</pubDate>
		<guid isPermaLink="false">https://www.thenewneo.com/?p=125970#comment-2680330</guid>

					<description><![CDATA[P.S.--From what I&#039;ve seen on Youtube, these call centers in India are legion, and each one can employ dozens of scammers working the phones, working off “sucker lists” containing many thousands of names, addresses, and telephone numbers; these centers sometimes pulling in hundreds of thousands of dollars in a very short period of time. 

Perhaps I&#039;m naive, but I don&#039;t know why anyone in authority never apparently makes a major, concerted effort to shut these operations down, they&#039;re just not a priority.]]></description>
			<content:encoded><![CDATA[<p>P.S.&#8211;From what I&#8217;ve seen on Youtube, these call centers in India are legion, and each one can employ dozens of scammers working the phones, working off “sucker lists” containing many thousands of names, addresses, and telephone numbers; these centers sometimes pulling in hundreds of thousands of dollars in a very short period of time. </p>
<p>Perhaps I&#8217;m naive, but I don&#8217;t know why anyone in authority never apparently makes a major, concerted effort to shut these operations down, they&#8217;re just not a priority.</p>
]]></content:encoded>
		
			</item>
		<item>
		<title>
		By: Snow on Pine		</title>
		<link>https://thenewneo.com/2023/05/18/phishing-must-catch-a-significant-amount-of-prey/#comment-2680329</link>

		<dc:creator><![CDATA[Snow on Pine]]></dc:creator>
		<pubDate>Fri, 19 May 2023 14:24:50 +0000</pubDate>
		<guid isPermaLink="false">https://www.thenewneo.com/?p=125970#comment-2680329</guid>

					<description><![CDATA[This is all annoying as hell.

I don&#039;t know how common our experience is, but over the decades we&#039;ve been the target of any number of scam attempts, a couple of times found fraudulent purchases made in our name (once in France--ooh la la) on our statements, had a cable account opened up in my name, and another in my wife&#039;s name, with a different campany—all of which required many hours of time and effort, each time, to straighten out--and we still receive various scam attempts fairly frequently. 

One fraudulent purchase, a decade ago, was for a bus ticket in Arkansas, and when I asked the fraud department person handling the case if they were going to try to find the perp they said no, apparently they were just going to fix the matter, and then let the matter drop. 

In the case of the cable account opened in my name, it was never paid, went to collections and, out of the blue, we got a notice from a collection agency alerting us to this scam.

We found out that if you signed up for a low cost, basic cable account, the company involved just accepted your name, date of birth, and social security number as legit (the perp changed my name and DOB a little) and--as a matter of routine--didn&#039;t check any further. 

Fixing this scam involved a lot of time on the phone with the collection agency and cable company, hours filing out police forms, and visits to the local police HQ to generate paperwork to send to the collection agency and to the cable company.

We thought this was settled and then, a year or so later, this damn cable company send the supposedly settled, delinquent bill to yet another, different collection agency, and we had to go through the entire process all over again. 

First time around, after a lot of sleuthing and a lot of phone calls, we actually got the exact street address of the perp, in another state, where the account was opened up, but in what seemed like a pattern, no one in authority was apparently interested in actually tracking him down, knocking on his door, and taking any action against the thief.

The most elaborate scam--apparently a classic one—was some twenty years ago, and started off with a large, expensive overnight letter, out of which fluttered two Postal Money Orders, each one made out to me in the amount of $750 dollars, to pay for me becoming a “Secret Shopper.”  

Those Postal Money Orders sure looked legit, silver strip and all, but when I called the supposedly crack U.S. Postal Inspection Service, they were not in the least bit interested in pursuing those behind the scam, and the phony Postal Money Orders.  

There certainly seems to be a pattern here, apparently low dollar amount scams are just not anything that the authorities want to put any effort into investigating and prosecuting.

As for online scams, many of which can turn out to be high dollar scams, the only people apparently trying to shut some of these phony call centers—many of them in India--down are private individuals, vigalantees, some of whom post what they do on Youtube.]]></description>
			<content:encoded><![CDATA[<p>This is all annoying as hell.</p>
<p>I don&#8217;t know how common our experience is, but over the decades we&#8217;ve been the target of any number of scam attempts, a couple of times found fraudulent purchases made in our name (once in France&#8211;ooh la la) on our statements, had a cable account opened up in my name, and another in my wife&#8217;s name, with a different campany—all of which required many hours of time and effort, each time, to straighten out&#8211;and we still receive various scam attempts fairly frequently. </p>
<p>One fraudulent purchase, a decade ago, was for a bus ticket in Arkansas, and when I asked the fraud department person handling the case if they were going to try to find the perp they said no, apparently they were just going to fix the matter, and then let the matter drop. </p>
<p>In the case of the cable account opened in my name, it was never paid, went to collections and, out of the blue, we got a notice from a collection agency alerting us to this scam.</p>
<p>We found out that if you signed up for a low cost, basic cable account, the company involved just accepted your name, date of birth, and social security number as legit (the perp changed my name and DOB a little) and&#8211;as a matter of routine&#8211;didn&#8217;t check any further. </p>
<p>Fixing this scam involved a lot of time on the phone with the collection agency and cable company, hours filing out police forms, and visits to the local police HQ to generate paperwork to send to the collection agency and to the cable company.</p>
<p>We thought this was settled and then, a year or so later, this damn cable company send the supposedly settled, delinquent bill to yet another, different collection agency, and we had to go through the entire process all over again. </p>
<p>First time around, after a lot of sleuthing and a lot of phone calls, we actually got the exact street address of the perp, in another state, where the account was opened up, but in what seemed like a pattern, no one in authority was apparently interested in actually tracking him down, knocking on his door, and taking any action against the thief.</p>
<p>The most elaborate scam&#8211;apparently a classic one—was some twenty years ago, and started off with a large, expensive overnight letter, out of which fluttered two Postal Money Orders, each one made out to me in the amount of $750 dollars, to pay for me becoming a “Secret Shopper.”  </p>
<p>Those Postal Money Orders sure looked legit, silver strip and all, but when I called the supposedly crack U.S. Postal Inspection Service, they were not in the least bit interested in pursuing those behind the scam, and the phony Postal Money Orders.  </p>
<p>There certainly seems to be a pattern here, apparently low dollar amount scams are just not anything that the authorities want to put any effort into investigating and prosecuting.</p>
<p>As for online scams, many of which can turn out to be high dollar scams, the only people apparently trying to shut some of these phony call centers—many of them in India&#8211;down are private individuals, vigalantees, some of whom post what they do on Youtube.</p>
]]></content:encoded>
		
			</item>
		<item>
		<title>
		By: Kate		</title>
		<link>https://thenewneo.com/2023/05/18/phishing-must-catch-a-significant-amount-of-prey/#comment-2680324</link>

		<dc:creator><![CDATA[Kate]]></dc:creator>
		<pubDate>Fri, 19 May 2023 12:18:02 +0000</pubDate>
		<guid isPermaLink="false">https://www.thenewneo.com/?p=125970#comment-2680324</guid>

					<description><![CDATA[Good point, cthulhu. My phone is set not to ring for callers not in my directory. If I call for help, I need to disable that. As it is, unknown callers can leave me a voice message.]]></description>
			<content:encoded><![CDATA[<p>Good point, cthulhu. My phone is set not to ring for callers not in my directory. If I call for help, I need to disable that. As it is, unknown callers can leave me a voice message.</p>
]]></content:encoded>
		
			</item>
	</channel>
</rss>
