Search:  

 
 
   News
newer
Hacking Bogus Bank Websites
A competition has evolved...
(old news - 09:26AM Friday May 20 2005)
tags: security
Taking down bogus bank websites has become the hobby du jour for young script kiddies with a sense of ethics, notes Netcraft. The sites you would visit if you had clicked on that e-mail from a bank (you've never heard of) are being defaced, and replaced with wallpapers taking credit for the takedown. One group even offers a variety of premade wallpapers for the task.

Related:
  1. Uh, Mom? The Air Force Just Attacked Our PC
  2. T-Mobile Systems Hacked?
  3. Cyber-Attack On U.S. Larger Than Previously Believed
  4. Japanese Computer Scientists Crack WPA
  5. No, Obama Isn't Taking Over The Internets
  6. Comcast Employs New Botnet Alert System
  7. Time Warner Cable Security Flaw Exposes 65,000
  8. Hackable Time Warner Cable Modems Still Hackable?
Forums » Hacking Bogus Bank Websites
view: topics flat text 
Post a:

pinoy76

join:2003-11-08
Twentynine Palms, CA

Good clean fun

I think this is a great idea, but is it still against the law? I think it's better than these guys hacking "real" sites that would get them into real trouble and cause real damage. These scam sites deserve this, by all means, but I am still unsure as to the legality of it all.

vpoko
Premium
join:2003-07-03
Jamaica Plain, MA

Re: Good clean fun

I'm sure it is still against the law, but the "victims" have no recourse because they themselves are guilty of something even worse. Plus, I can't imagine prosecutors trying too hard for a conviction in this case.

DaveNJ
No Fear

join:1999-09-01
New Jersey

Re: Good clean fun

i dont think its really that bad, someone has to police the net, and if these people are helping others by taking them down i dont have a problem with it.

vpoko
Premium
join:2003-07-03
Jamaica Plain, MA

Re: Good clean fun

I agree. I'm just saying technically it would be a crime. The internet is like the wild west because the majority doesn't understand it. While I normally don't support vigilante justice, script kiddies are almost always more effective than our law enforcement at dealing with internet threats.

wwdubbia

join:2002-06-03
Clinton, NY

Re: Good clean fun

said by vpoko See Profile:

I agree. I'm just saying technically it would be a crime. The internet is like the wild west because the majority doesn't understand it. While I normally don't support vigilante justice, script kiddies are almost always more effective than our law enforcement at dealing with internet threats.
Is shooting a bank robber a crime? Most would laud them as a hero... I'd bet they could argue self defense...

Jason Levine
Premium
join:2001-07-13
USA

Re: Good clean fun

Yet, I'm sure the bank robber would find himself a lawyer and sue the shooter possibly winning (or at least making the shooter's life a living hell for awhile).

guitarzan
Premium
join:2004-05-04
Skytop, PA

1 edit

Re: Good clean fun

Funny how the woim toins lol

guitarzan
Premium
join:2004-05-04
Skytop, PA
·epix

said by Jason Levine See Profile:

Yet, I'm sure the bank robber would find himself a lawyer and sue the shooter possibly winning (or at least making the shooter's life a living hell for awhile).
2 Shots center of mass + one to the head.That bank robber ain't gonna get up to get a lawyer,to sue you for criminal or civil damages.First.You had Better be damn sure,That your life was in serious,Grave danger.If So you will win.
Because Round 1.You win the armed encounter
Round 2.The criminal well cannot possibly
bring any type of charges against you
Round 3.Have complete evidence in a court of
law you were in emminent danger or
your family was.It will be a clear case
of self defense.PROVIDED the bank
robber turned his weapon on you.

BTW: I'd rather be judged by 12 than carried by 6
moonpuppy

join:2000-08-21
Glen Burnie, MD
·Verizon Online DSL

Re: Good clean fun

said by guitarzan See Profile:

Round 2.The criminal well cannot possibly
bring any type of charges against you
No, but the family can cry enough on TV to push someone to charge you. Seem it way too many times.

guitarzan
Premium
join:2004-05-04
Skytop, PA
·epix

Re: Good clean fun

said by moonpuppy See Profile:

said by guitarzan See Profile:

Round 2.The criminal well cannot possibly
bring any type of charges against you
No, but the family can cry enough on TV to push someone to charge you. Seem it way too many times.
I agree with you.I would expect grieving family members thats only natural.When one see's the exploitation of such a
tragic series of events,leading to the death of a violent criminal.Then to have it nationalized by a tv show,That do not
tell all the events that took place.Just to make the
deceased look more upstanding (with high community values)than the person who honestly and legally defended themselves. Sheesh whats the world coming to an end.?

SKiPDoG916


from:
guitarzan See Profile

yes but as long as you do it right, "Dead people make poor witnesses"

vpoko
Premium
join:2003-07-03
Jamaica Plain, MA


1 edit
said by wwdubbia See Profile:

Is shooting a bank robber a crime?
Depends on where you live. In my state (Massachusetts) it might be a crime if you didn't have a reason to fear serious injury or loss of life to yourself or others, AND if you hadn't first tried all avenues of escape before opening fire. In Massachusetts, crimes against property are not, by themselves, reasons to use deadly force.

trusteR

@cybercity.dk
Script kiddies, please. You really think kids would be this organized?

Jason Levine
Premium
join:2001-07-13
USA

I agree. It is still illegal, but it's not an activity that's likely to result in any convictions. Now if you're hacking legitimate sites as well (or you aren't careful and accidentally target a legitimate site), then you could face charges.

I really don't see how a phishing site could complain to the police that their illegal harvesting of personal information was being hampered by the script kiddie. Then again, some crooks are just plain dumb.
--
-Jason Levine
http://www.jasons-toolbox.com/
http://www.PCQandA.com/
http://www.urateit.com/
Kearnstd
Elf Wizard
Premium
join:2002-01-22
Mullica Hill, NJ

when the crime outweighs the police ability to remove it the people take care of the crime. upside here is no guns are involved and the scumbags doing the ID theft learn a lesson that when you screw with people online, there is a limited few who screw back.
--
[65 Arcanist]Filan(High Elf) Zone: Broadband Reports

packetscan
Premium
join:2004-10-19
Bridgeport, CT
clubs:
·Optimum Online

Hey brother glad people see it our way.

Personal when i get a spam about a mortgage offer that is my trigger. I find the Host, registrar, DNS provider, etc. Find everyone that is involved. Then i compile all my data and email it to the respected parties. I've found with legitimate hosts these sites are off almost instantly. Point being the more people that do this the less the un(techie) will get hurt. We stand together or we fall together!

tapeloop
1959. I try to kick the ball. I miss.
Premium
join:2004-06-27
Airstrip One

So if the people who run the phishing sites feel like they're due compensation for damages incurred by hacking, by all means let them file complaint forms--in person at their local FBI branch using their real name, address and phone number.

wifi4milez
Big Russ, 1918 to 2008. Rest in Peace

join:2004-08-07
New York, NY
·Verizon FIOS
·Sprint Mobile Broa..
·RoadRunner Cable
·BroadVoice

I actually question how this is against the law. The scammers are not operating a legitimate business, and the website(fake) is more than likely hosted off shore. Based on this I dont think there is a punishable offence occurring here. I liken this to the good Samaritan who pays a drug dealer in monopoly money and then throws the drugs into a river. What would the drug dealer (have a lawyer) charge the good Samaritan with? Either way, WAY TO GO GUYS!!!:D
--
I like dogs, guns, and cheeseburgers. Whats your malfunction?
moonpuppy

join:2000-08-21
Glen Burnie, MD
·Verizon Online DSL

Re: Good clean fun

said by wifi4milez See Profile:

I actually question how this is against the law. The scammers are not operating a legitimate business, and the website(fake) is more than likely hosted off shore. Based on this I dont think there is a punishable offence occurring here. I liken this to the good Samaritan who pays a drug dealer in monopoly money and then throws the drugs into a river. What would the drug dealer (have a lawyer) charge the good Samaritan with? Either way, WAY TO GO GUYS!!!:D
It is called vigilantism and it is against the law. You can defend yourself when you are in immediate bodily danger but not fight back.

I don't disagree with you one bit that these sites should be fair game BUT who is to say a site is malicious or not? Maybe it is a honeypot designed to catch people who are being stupid (by going to these sites) or to catch the scammers themselves.

said by guitarzan See Profile:

I agree with you.I would expect grieving family members thats only natural.When one see's the exploitation of such a
tragic series of events,leading to the death of a violent criminal.Then to have it nationalized by a tv show,That do not
tell all the events that took place.Just to make the
deceased look more upstanding (with high community values)than the person who honestly and legally defended themselves. Sheesh whats the world coming to an end.?
"You are no longer responsible for your own actions."

That is what this world is coming to. Most of these scammers have no morals whatsoever but once they get caught on the other-side, they love to whine. They get arrested and they cry about police brutality as they try to beat up the cops.

a

@qwest.net
ahhh, it's nice to be computer literate.

bistro777
Donuts-Is There Anything They Can't Do?
Premium
join:2002-02-07
Englewood, CO

Please to be clicking on here

Deer customehr of our banc:

We are liking to confirm to you to us the acount number and passwording today you use. We are needing this information to keep to you safe from bad peeple. Please to be clicking on here rite now and to be entering all your most personal data.

[signed]
You banc frend

P.S. Kudos to those who take-down these scummy thieves...

"The problem with the world is that everyone is a few drinks behind." - - Humphrey Bogart

jmycknshk
...bring your green hat

join:2004-07-02
West Chester, PA

Re: Please to be clicking on here

that's some good engrish right there...

bistro777
Donuts-Is There Anything They Can't Do?
Premium
join:2002-02-07
Englewood, CO

Re: Please to be clicking on here

Sanctuary much!

"I have nothing to say and I am saying it." -- John Cage

Dennis
Premium,Mod
join:2001-01-26
Algonquin, IL

bogus?

I guess it's possible...I just don't think this is real.

Would be pretty cool if it was though....
cbiggers

join:2000-08-10
San Luis Obispo, CA
clubs:

Re: bogus?

said by Dennis See Profile:

I guess it's possible...I just don't think this is real.

Would be pretty cool if it was though....
Check out:

»www.419eater.com/forum
»www.aa419.org
»www.419legal.org

Lots more links you can find from those sites...
moonpuppy

join:2000-08-21
Glen Burnie, MD
·Verizon Online DSL

The irony.......

Oh the irony.

Now begins the online hacker wars. Cyber crooks wanting to phish vs. script kiddies with morals.
russotto

join:2000-10-05
Collegeville, PA

Against the law?

Maybe, but if I were on a jury I'd never vote to convict.

It's along the lines of tearing down "street spam" (those signs attached illegally to utility poles, "LOSE WEIGHT FAST", "WE BUY HOMES", "FINALLY..." and such) and scams posted on (physical) bulletin boards.

rovernet
Premium
join:2004-02-11
Richardson, TX

It's hillarious

Whether it's legal or not, it's refreshingly funny.

morbo
Complete Your Transaction

join:2002-01-22
00000
clubs:

finally...

someone talking positive about the script kiddies. if this really happens, then go script kiddies.
--
no sig

danag42

join:2000-02-02
Worcester, MA
clubs:

It's about time

Well, it's time someone with some ethics jumps in and takes up the fight. Legal or not, I think it's hilarious! And they're protecting non-computer savvy people from being hurt. What could be bad bout that?
dick white
Premium
join:2000-03-24
Annandale, VA
·Verizon FIOS

legalities...

The police and government prosecutors can only take you in for crimes committed against society, where the social order has been established through the legislative or judicial process. (For example, a rape is technically a crime against the state, though the act clearly was committed against the woman victim...). Police and prosecutors can exercise some discretion to not go after every little thing. Maybe they'd let this go too?

Individual persons (and business entities are a form of "person") can initiate civil action against another for personal damages outside of the criminal system. (Continuing the example, the rape victim could seek monetary compensation against rapist for the personal trauma, etc. in addition to the criminal prosecution by the state.) Thus, the bogus bank sites could sue the script kiddies for damages. However, in civil litigation over business losses, there is a "clean hands" doctrine. Your own hands must be clean in the deal before you can seek damages for the other guy's dirt. Thus the phishing sites wouldn't be able to make their case.

The only winner here would be the IRS. It is a tax rule that regardless of the illegality of your "enterprise," you owe taxes on your income from it. Remember Al Capone? The only thing they were ever able to stick on him was income tax evasion.

dw
gateguy
Premium
join:2001-02-12
Reisterstown, MD
·Verizon FIOS
·Comcast

Phishing

Whenever I receive an Phishing email. I intentionally go to the site. I put in a user ID and password. I provides all sorts of data. The only issue the Phisher will have is that all of the data is garbage. I just try to make it look legit. I then add about 10 more entries into his database.

If we enter enough garbage into their databases, they will soon learn that they can not trust their own data.

My goal: TRASH THEIR DATA!
--
Lean to the left. Lean to the right. Repeat.Now that is wobbling

novaflare
The Dragon Was Here
Premium
join:2002-01-24
Barberton, OH

Re: Phishing

said by gateguy See Profile:

Whenever I receive an Phishing email. I intentionally go to the site. I put in a user ID and password. I provides all sorts of data. The only issue the Phisher will have is that all of the data is garbage. I just try to make it look legit. I then add about 10 more entries into his database.

If we enter enough garbage into their databases, they will soon learn that they can not trust their own data.

My goal: TRASH THEIR DATA!
Create a php script on a web site and link it to your forum signitures. Have users click your signiture. On the main page of your phishing data polution site you have a doesnt buttons or so with known phishing links. Clicking a buttont fill sout the forum 100 times with bogus data and submits it. Use 100 first names 100 last names 100 usernames 100 pass words. Each click on the button randomly generates a combo of these from word lists. You want to polute these guys data this will do a killer job of it. Just think 100 clicks a week = 10k bogus database entries.
--
DSLR security chat at us.ausirc.net chanel #dslr_sec lets pack this channelopen source dns server for *nix and windows »powerdns.com
cbiggers

join:2000-08-10
San Luis Obispo, CA
clubs:

Not script kiddies

The netcraft article makes no mention of script kiddies, yet this article does? The Lad Wrecking Crew are hardly script kiddies. The sites that are also being taken down are ones used by scam artists, and usually the victims have been taken in by a 419 scam, and they are being referred to that bank to make their initial deposit/etc whatever the scam artist can convince them to do to put their account information in there.
RadioDoc
58ef2c0
Premium,ExMod 2000-03
join:2000-05-11
·AT&T Midwest

Re: Not script kiddies

said by cbiggers See Profile:

The netcraft article makes no mention of script kiddies, yet this article does? The Lad Wrecking Crew are hardly script kiddies.
Oh there you go asking for accurate reporting around here. That ship pulled out of this port long ago.

"Script kiddies" rouses much more of the rabble than the facts.
cbiggers

join:2000-08-10
San Luis Obispo, CA
clubs:

Re: Not script kiddies

I was going to mention the accurate reporting issue, but last time I was lamented since this is a free site. Being free doesn't mean journalism basics go out the window.

EGeezer
Summertime -
Premium
join:2002-08-04
Country!

2 edits

Just out of curiosity... wallpaper files ?

Didn't D/L any - anyone check them out to see if they are legit - or have any malware in them?

EDIT - look like plain ol' JPGs - scanned clean here...
cbiggers

join:2000-08-10
San Luis Obispo, CA
clubs:

Re: Just out of curiosity... wallpaper files ?

said by EGeezer See Profile:

Didn't D/L any - anyone check them out to see if they are legit - or have any malware in them?

EDIT - look like plain ol' JPGs - scanned clean here...
The Lad Wrecking Crew have been around for a while, and that server also hosts a variety of other 419 related anti scam efforts...

mrchris
We don't miss you Bush
Premium
join:2002-10-01
North Babylon, NY
Funny wallpapers

Die scammers, die!

Anonymous_
Anonymous
Premium
join:2004-06-21
127.0.0.1
clubs:

1 edit

i think this is fine

as long as the keep it to the bogus sites they should be fine

and keep it clean and not do the real sites
(at lest there takeing them down before some 1 lose the $$)
Facekhan

join:2002-05-01
Gaithersburg, MD

It could be sorta legal

Well just like any other criminal enterprise they are basically on their own. When two criminals commit crimes against one another generally neither one is going to ask the authorities for help. Its not wrong to steal from a thief.

Right on

@comcast.net

Excellent!

The guys using your skills to take down bogus banks and scammers is great! Its a great service your providing for the rest of the interent.

pinoy76

join:2003-11-08
Twentynine Palms, CA

Re: Excellent!

I agree... While possibly illegal, it is a great service nonetheless. I just don't know what the "interent" is...?


Justsome guy

@comcast.net

Here's one

In case any hackers are playing along at home, here is a site that I think many credit unions would not mind seeing shut down.
»www.upd498734534.home.ro/user94887453.htm

Give 'er yer best kiddies!

Very truly yours,
The Duke
Forums » Hacking Bogus Bank Websites


Sunday, 22-Nov 04:35:16 Terms of Use | Privacy Policy | Hosting by www.nac.net - DSL,Hosting & Co-lo | feedback | contact
over 10 years online! © 1999-2009 dslreports.com.