More Email Scam Attempts...hilarious

Entropia Universe Discussion General Discussion
1

Received the following email… very interesting… LOL !!! read the attachment… these dumb ^#@#^ a$$wipes can’t even spell properly.

From : entropia@online.ie
Sent : Thursday, July 21, 2005 10:31 AM
To : Removed
Subject : Entropia Guardian

| | | Inbox

Attachment : guardian.doc (0.08 MB)

Dear Calysto citizen

Please read the attachment.

Thank you

MindArk Staff

Attachment:

Dear Calysto Citizen

Project Entropia is offering you the opportunity to be a Entropia Guardian.
Your mission would consist in reporting the Entropia scammer, bugs and exploits in the Project Entropia world.
You get 10 Peds transfered to your account everytime you report a scammer a bug or a exploit at entropia@online.ie .

If you are interested in this opportunity please send us back the flowing
info:-
- Full Avatar name

                          - Country of Origin
  • Date of birth

******************************- Login

******************************- Password

******************************- Citys you want to guard

******************************- Playing Hours per day (aproximatelly)

In case that you are able to make 100 reports in 6 months we are wiling to give u a special item bonus, above this summ you will be considered as an participator in a special event which will be anounced in the begining of VU 8.0.

P.S:

Please consider this info case sensitive, else you can only harm your succes with reporting

Thank you for your interest

**

2

= Dear Calysto citizen

wtf is Calysto ? LOL

3

is there anyone dumb enough to fall for this?

4

Cool thing is that he is now not using a hotmail account any more…

From what I can tell, this is one where he would have had to pay for it… and would have had to verify his personal details. I have forwarded it to MA to have a look at, and also spoken to some friends at Interpol (while its out of there jurisdiction, they can get the police in his own country to arrest him, and have him extrodited to here when I lay a charge against him).

5

http://www.online.ie/registration/new_password.adp

Fill in entropia. Hit the button. Press back. Rinse, wash, repeat. I might actually write a script to do this for me…

6

Ive gotten this one from “Mathiew Spencer” just a few days ago, who the hell would be doumb enough to give his username and password per e-mail?

[B]hi mr or mrs

Project entropia is offering you the opportunity to be an Calypso spy.
Your mission would consist in reporting the entropia scammer in the calypso
continent.
You get 1 Peds transfered in your account everytime you report a scammer at
staff_entropia@hotmail.com.

If you are interested in this opportunity please send us back the flowing
info:- Avatar name

                          - Login
                                                                         
                          - Password
                                                                         
                          - City you want to Spy
                                                                         
                          - Playing Hours (east)

By Mathiew Entropia Staff, please reply to my
personal email[/B]

7

I sent quite a few spams through myself :slight_smile:
Also Reported him to online.ie

8

[QUOTE=jena]
is there anyone dumb enough to fall for this?
[/QUOTE]

Unfortunately, there are people who have fallen for this :frowning:

I saw a guy wearing OJ’s in Corinth saying, “Don’t buy from (insert name here) in auction, because they logged into my account and stole my stuff.”

Bloody Shame :cry:

9

please post the full e-mail headers

10

doh! what a noobish attempt to scam ppl, it sounds very similar to this ‘mathiew’ noob/dumbass

[QUOTE=The Mighty]
Cool thing is that he is now not using a hotmail account any more…
[/QUOTE]

if it is the same guy, maybe singing them up for :spam: porn has worked to some extent :laugh:

must remember to spam this new address too :smiley:

:edit:just for the record i dont usually frequent adult pages before anyone thinks im a pervo :wink:

1 Like
11

The provider is an reputible Irish site, which means its governed by european laws regarding fraud, scams.. shouldnt be too difficult to find the guys email address and details..

Scam address: entropia@online.ie

Address: online.ie
Unit 15,
Guinness Enterprise Centre,
Dublin 8.

Phone: +353 1 4100744
Fax: +353 1 4100584

12

Right.. first off MA will NEVER ask for your password!!!

Second.. on the scamming topic.. I belive the best way to combat scamming is to understand how its done.

All scamming in Project Entropia uses Social engineering to some extend.
Social engineering is a method where you get a person to trust you and then he might reveal some personal info or other to you which he can use to his own gain.

The would be scammer could act as your friend.. Prehaps for months.. before he starts ripping you off.
There has been cases in Project Entropia where respected members of the community were such social engineering scammers. At one point a scammer got the trust of cK and they lend this scammer a lot of high end gear.. never to see it again.

The social engineer is pure evil.. He acts only with one purpose.. to scam you.. and he will act as your best friend for a long time to accomplish this…

So what to do… NEVER lend ANYTHING out you cant afford to loose…
Not even to trusted “friends”… In the case of the cK scamming the person had been playing with them for almoste 6 months before they got scammed.

When I played PE I only lend out stuff I couldent afford to loose to one person… This person I had the phone number off, spoke with on TeamSpeak every day.. And I knew his address…

Social engineering can also be used in email scams.. As we have seen previously scammers will try to impersonate MindArk staff to gain your trust.
This is illigal both by the EULA but alo by international law… you arent allowed to impersonate anybody !

We can only be glad that the persons who are trying to use this more techinical way of scamming isent very good at it.

Again with “knowledge is power” in mind I will now tell you how it could be done… This is to make you understand you cant even trust communication that appeares to be from MA.

If you own an SMTP server (A mail server) you can fake mails.
SMTP servers are stupid so to say. If you tell your smtp server that you are sending a mail from “MB@MindArk.com” it will trust you are sending the mail from that address. In moste scripts for sending mails via a browser you have to fill in informations such as:
recipient, sender, body, header…

Now.. A cleaver scammer would ofcourse not send the initial mail from a hotmail or whatever… A cleaver scammer would send the initial mail from a mail that looks like a MA mail. He can acheve this via such an SMTP server.
(All webhosts have SMTP servers so they are very accessable)

In this mail he could use social engineering to make you belive whatever…
For instance that Marco has been monitoring you helping newbs.. and would like to help you a bit… but he cant do it officially.. so he has to use his private email… or something like this… for the same purpose he neither can use MA’s password retrival system to et your account info… So you have to provide him with it all…
Then he will give 1000 PED pr month to your account.. so you can help newbies more…

or whatever…

But the point is… even if the mail is comming from MA you cant trust any “dodgy” info in it…

If MA asks for your personal info.. there is something wrong.. MA has the means of getting all the info they need, if its legit… if it isent.. you dont wanna help them anyway…

So.. two things to keep in mind…
Dont lend anything out you cant afford to loose (heck.. their account could get locked with your stuff on)
and DONT DONT DONT give ANY personal info to anybody in a mail or on IRC!!

If you dont trust me with the SMTP server mail just give me a fake email and I will send you a mail from an account of your choice…

God@heaven.net ?? :smiley:

13

Good advice Star :girl:

So I’ve never received a scam email… are you guys posting your emails on forums for all to see? :confused: I keep my email address private or completely unlisted on forums so this does not happen… is there another way they could access our email other than from forum?

14

once again svet… secure engineering… If you have an account on Pricefinder.. I have you email…

and if you have made a new password on Pricefinder.. I also have A password… “Wonder if you use the same password on everything”… see where im heading ???

Dont trust ANYBODY… Thats why I made that rdn generated password on Pricefinder with the option to “remember me”.. So you dont have to login each time.. but just can use the randmo generated password…

I would advice you NEVER use the same password on two diffrent places..

I have x (where x > 10) diffrent passwords I change between…

1 Like