Anti-Fraud sites under attack

Several of the main sites dedicated to fighting online scams are currently inaccessible because of a “Denial of service” (DoS) attack.

Fraudwatchers.com, aa419.org, 419eater.com and occassionally thescambaiter.com have been offline. Thescambaiter.com and 419eater.com are two of the oldest sites that fight “419” scams (named of the section in the Nigerian penal code that prohibits fraud). Fraudwatchers.org and aa419.org deal with a wider range of online scams, Nigerian scams as well as Escrow and commercial scams often run by Eastern European crime rings.

It is still unclear who is behind the attack. The selection of websites for this concurrent attack suggests Nigerian scammers, but technically the type of attack is more typical for Eastern European scammers. It may well be a sign of increased cooperation between both crime communities.

The exposure of websites to the danger of cyber attacks in a more and more net-centric world was highlighted earlier in the year when websites in Estonia were crippled for several days in large scale attacks, many of which originated from next-door Russia, with which Estonia has had a strained political relationsship.

Throughout this year criminals have been building the Storm botnet, a network of remote-controlled zombie computers infected with Malware that lets the criminal masters download and run any software on them that they chose. So far the Storm botnet has been used primarily fo sending pump-and-dump penny stock spams (see here). However, experts estimate the network as being comprised of between 1 and 10 million computers, far larger than needed to spam every computer on the planet. It’s probably the only peer-to-peer network comparable in size to eBay’s voice-over-IP giant Skype, which currently has 4 to 7 million concurrent online users.

Botnets have the potential to cripple the information infrastructure that countries increasingly rely on. Greater efforts need to be made to prevent infections, clean up or quarantaine infected computers and to track down the criminals who control them.

3 thoughts on “Anti-Fraud sites under attack

  1. So have ScamFraudAlert.com. We’ve been hit too. What bothers me is that if these criminals can get away with this, the internet as a whole is at risks. The internet may not be a good place to conduct e-commerce.

    Status Report From HostGator.com

    HostGator Support
    to me
    show details Sep 11 (17 hours ago)
    Our datacenters latest update is as follows :

    “In the past 12 Hours we have seen a maximum of 337,016,199.0 bps and an average of 208,449,402.63 bps malicious traffic being sent to your server. We are continuing guard protection at this time.”

    Let us know if you have any further questions or concerns.

    Thanks.

    Sincerely,

    HostGator.com
    Level 3 Systems Administrator
    Houston, TX Network Architect

  2. Hello Padmanaban,

    if you mean the “graydukehotel.com” link in your comment, that domain does not exist. I can tell you however that any job offer or other email that lists any phone number starting with +44 70 is a fraud.

    If you have any suspect email that you want to report or have checked, you can copy and paste the entire message text of that email into the “Scam-O-Matic” webform to get instant advice about it:

    http://www.scamomatic.com

Leave a Reply

Your email address will not be published. Required fields are marked *