funsec mailing list archives

Re: I'm stranded in London! Send money!


From: Gadi Evron <ge () linuxbox org>
Date: Sun, 05 Jul 2009 17:51:45 +0300

Mike Cooper wrote:
I met a guy at RSA this year that this same thing happened to involving 
London (Bryan Rutberg). His daughter was the first to catch on, and they 
tried to warn people using his wife's and daughter's accounts... who 
were promptly "de-friended". Other attempts were reacted to very quickly 
and in similar fashion. One of the two friends that was defrauded asked 
some very pointed questions, and the responder was able to dig through 
email history, friend info, etc. to pull out realistic enough details to 
convince the friend to send $1200.


Did he demand his money back from them?


In that case it was surely a human, and this sounds similar enough (in 
locale even).

~Coop


On Jun 22, 2009, at 5:58 PM, mark seiden-via mac wrote:

it's interesting that they're going through the trouble of reading 
people's email enough so they
can add verisimilitude to an otherwise lackluster narrative.

i don't think these are bots.  

the key questions they have to get over are why they can't be reached 
by phone and why they can't
receive the money in their own name.

On Jun 22, 2009, at 5:56 AM, Col wrote:

Same thing happened to a friend this morning, replace London for 
Wales though.

Funny thing was they said they were there with their husband and 
baby, when the husband was sitting behind the person they were trying 
to scam. The scammer instantly logged off when this came to light. So 
I don't think its a bot.

C.



2009/6/22 Imri Goldberg <lorgandon () gmail com 
<mailto:lorgandon () gmail com>>

    On Mon, Jun 22, 2009 at 12:47 PM, der Mouse
    <mouse () rodents-montreal org <mailto:mouse () rodents-montreal org>>
    wrote:

        IMO the real news here is that a bot managed to pass the
        Turing test
        well enough that after an hour talking with it you had to
        resort to
        out-of-band contacts to be sure it wasn't the person it was
        pretending
        to be.


    How do you know it was a bot?

    -- 
    Imri Goldberg
    --------------------------------------
    www.algorithm.co.il/blogs/ <http://www.algorithm.co.il/blogs/>
    --------------------------------------
    -- insert signature here ----

    _______________________________________________
    Fun and Misc security discussion for OT posts.
    https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
    Note: funsec is a public and open mailing list.


_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.

_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.


----
LOAD "SIG",8,1
RUN


------------------------------------------------------------------------

_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.


-- 
Gadi Evron,
ge () linuxbox org.

Blog: http://gevron.livejournal.com/
_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.


Current thread: