Attacks Targeting Classified Ad Sites Surge

wiredmikey writes "Despite spam levels being at their lowest since March 2009, metrics released by the APWG indicate that cybercriminals are cultivating an array of alternative attack schemes, and in particular, increasing attacks on the online classified services sector with phishing attacks. Though the online payment services sector remained the most targeted industry with 38 percent of detected attacks in Q2, the classified ads services sector experienced rapid growth in phishing attacks."

Vector not relevent

[Anonymous Coward]

All scams are essentially the same, regardless of how they are delivered.
Filtering them is a life skill.

Re:

[countertrolling]

Exactly. Spam isn't down at all. It's just shifted over to something else. Something more akin to direct attacks on the infrastructure, as opposed to social engineering and user interaction that spam email requires.

Re:

[Fibe-Piper]

Exactly. Spam isn't down at all. It's just shifted over to something else. Something more akin to direct attacks on the infrastructure, as opposed to social engineering and user interaction that spam email requires.

Totally agree. The line between phishing and spamming may be blurred somewhat and the consequences or rate of apprehension is probably the same or similar.

If true, I doubt there is an incentive for people to sell the contraband enlargement pharmaceuticals when the payoff for a successful phishing attack would be much more lucrative

Re:

[stonewallred]

I personally would set up false job/career openings, tailored to draw decently paid professionals to submit a resume. Not ultra-high end folks, who would most likely be targeted by head hunters, but people making 65-90k a year or so. Get the resumes, do a little research, and then contact the best candidates for phone interviews. Use two different folks doing two interviews, then have a third person contact them as "HR" and get the pertinent data, SS numbers, full names, etc etc. Really smart folks would in

Re:

[bobbinspenguin]

Exactly. Spam isn't down at all. It's just shifted over to someone else.

There, fixed that for you. Apparently I need a bigger penis :(

Re:

[jellomizer]

In the mean time when they are shifting they get a lot of people who are unaccustom to that new method

Re:

[gilleain]

All scams are essentially the same, regardless of how they are delivered. Filtering them is a life skill.

True, but the scammers on gumtree (at least) that target flat adverts seem more sophisticated than the usual "DEAR BLESSED SIR..." 419 email scams.

I've now learned some simple - possibly obvious - indicators:

• Flat available from today (or yesterday in a few cases).
• Very low rent for the location, considering 'all bills included' and the amenites.
• A quite specific one, but strange phrases like "Take care of the flat as it is" (translation quirk perhaps?) or 'sumptuous'

Of course, the clincher was when they rep

oh right

[Anonymous Coward]

As someone that runs a forum and blog antispam system, I can tell you that spam levels aren't down at all on all platforms. Weve seen a massive influx of spam recently.

Dregslist Called To Say 'SHHHHHHHHH'.

[tunapez]

Dregslist thrives on this kind of flotsam, has for a long time. Anyone care to estimate how small they would be if they got rid of the ID thieves anonymously requesting resumes from the Jobs section, the fencers postng hot and worthless chit(my fav:Windows disks with used OEM keys) in the For Sale section, the rogue repeat posters who get away with posting the same ads 20 times a day every day of the week for products/services akin to spam subject lines, and, of course, there's the would-be far-away buyers who need your bank account number to transfer you the funds sitting in the wings.

I'd go out on a limb and estimate a good 50%- 65% of Dregslist For Sale, Jobs and Gigs are scams, dregs and/or repeats. How is this newsworthy other than the fact that Dreg is doing nothing to stop it while profiting hugely?

Re:

[drinkypoo]

Ugh, you're not kidding. Amusingly the worst spammers in my area are the derelicts selling VW parts nobody wants at prices nobody can afford or will pay even if they can. They repost all their same shit twice a week and it clogs my google reader.

Re:

[tlhIngan]

Ugh, you're not kidding. Amusingly the worst spammers in my area are the derelicts selling VW parts nobody wants at prices nobody can afford or will pay even if they can. They repost all their same shit twice a week and it clogs my google reader.

Twice a week isn't bad. Some of the worst ones do it daily or more often, enough to flood the useful postings off and make it impossible to find without having to dredge through the crap.

I believe it's done because it's really hard to filter out - it is a classified

Re:

[tekrat]

You mean, you're not willing to pay $100 for a rusty, bent fender? It's RARE. And I'll bet you're looking for recent VW parts.

Try aircooled, "vintage" beetle pieces. You'd think they were made of gold. And yet, beetles can still be found in just about every junkyard from coast to coast.

Re:

[Anonymous Coward]

You, uh, you know that Craigslist doesn't charge money to put up an ad in the For Sale or Gigs sections, or even the Jobs section except in a handful of markets, right? If you're looking for a nefarious profit motive you're looking at the wrong company.

Now, it is true that they don't have the staff to weed out the crap, but you get what you pay for.

Re:

[timeOday]

I think it's a pity because I really like Craigslist - I like their attitude of keeping a clean, functional page, not clogging it with all kinds of links and ads all over.

And yet the *users* of craigslist are the typical dreck, and they're destroying the site. Last time I emailed about a laptop that looked like a good deal, I got a response that "gosh, it just sold to a nice couple, but I originally got it at this great auction site xyz.com for even less!" Between all the scammers, and those who are sim

Re:

[MrEricSir]

Sir or madam, my name is Prince Natobe and I need you to help my family send $100,000 to my daughter in Nigeria. If you could help launder... I mean "send" the money, you will be paid 10%. Thank you.

Re:

[stonewallred]

I advertise HVAC/R services on Craigslist all the time. Free and only takes a minute or two. And I usually get at least a call or two a week. Which is the best ROI I have ever had for any advertising. Of course it helps that I am willing to advertise my prices for labor and the prices of refrigerants and common services, which the industry frowns upon around my neck of the woods. Protip, when you need "freon" in your system and most companies are selling R-22 for $65.00 a pound, and Billy Bob's HAVC Servic

You don't use it much, do you?

[rusl]

Or maybe you're looking at the sex ads? I look at the sex/personal ads too from time to time, I've never acted on one but they are interesting to observe. Anyway most of those are fake.

But otherwise I don't see much fake stuff. Lots of people sell tools and electronics, stuff for parents. It's a great free system and craigslist is very altruistic to do it without fees (except in NY or something like that?). You just hate craigslist and you don't use it much because you don't know what you are talking about.

Yes

[n_djinn]

Yes hello, I came across your advet and would like to know if said item is in good condion and still available for purchase. I am at this time currently traveling abroad and would be buying for my cousin as a gift who lives in your area. May I have you social securit number and bank account? I will arrange for currior pick up.

Re:

[account_deleted]

Comment removed based on user account deletion

they tried to get me recently

[ruebarb]

tried to sell some pokerchips on Craigslist - got a generic email asking me to verify the item I was selling was identical to the one in the video link the person sent to me (from a random hotmail account) - decided to keep the poker chips and not click the link

ah well -

rb