STEM, Social Engineering and Stealing

The Kernel delves into the hidden subculture of liars, thieves, and hackers who expose and exploit gaping loopholes in e-commerce via Jonah (not his real name), someone who’s been there and back.


“Confessions of a social engineer”
by Dell Cameron
The Kernel
August 9, 2015

serialcodegenerator…Part theater and part science, social engineering is the method by which hackers, for lack of a better term, exploit vulnerabilities in human psychology; for Jonah, it was a key to getting anything he wanted, from televisions and laptops to smartphones and expensive wines. One of his largest takes netted him around $60,000 worth of product, he says. He showed me a Rolex Daytona watch””part of a gallery of stolen goods he”d photographed in his bedroom””which retails on Amazon for around $26,000.

Whether through face-to-face interaction, by phone, or by email, the human gatekeepers of any network can be exploited””if you know how to play the game. They”re the weakest link in any company”s security.

Almost every major electronics company is vulnerable in nearly the same way: They all have warranty-based replacement systems that can be exploited. Most companies, for instance, don”t require a defective item to be returned before mailing out its replacement. It”s likewise difficult to prove that an in-warranty item has been lost or stolen.

Through repeated phone calls, social engineers develop strategies for navigating a company”s customer help line. They get a feel for which sob stories and which “yes” or “no” responses will work best toward achieving their objective. Intelligence, temperament, and even humor all come into play. The questions and responses are then mapped out, as if composing a flowchart, with the goal of expediting the con. Read the whole article.


Murder Evidence or Text Prank?

An unnamed 65-year-old Athens, Georgia woman who is probably not an accessory to homicide reported receiving an unusual text message.


“Athens woman possibly target of phone prank”
by Police Blotter staff
OnlineAthens.com
September 3, 2014

Crime SceneA 65-year Athens woman reported to Athens-Clarke County police that on Monday she received a text message from an anonymous person who said, “Hey baby I disposed the body. What do I do?”

Police said they traced the text message to a phone number belonging to a 61-year-old Colbert woman who claimed she knew nothing about it. Read the full story here.


Swatting Ringleader Meets His Demise

People do a lot of things with phones. Some are harmless and potentially amusing. Others can get you tossed in the slammer.

Photo by Eric Richardson

Swatting falls into the latter category. It involves providing an emergency service like 911 with a false tip that provokes an armed police raid on the home of an innocent (and likely terrified) person, be it a personal enemy, a celebrity, or just some guy. These hoaxes are a particular menace for the LAPD, since they happen so often to Hollywood stars.

On Tuesday, Jason Allen Neff pled guilty to running a ring of swatters in various locations. Neff, as it happens, has a long and storied career of hacking activities dating back to the ’90s. He awaits sentencing and faces five years in federal prison. The hostage faker seems poised to become a hostage of his own making.

photo: Eric Richardson, Creative Commons