Post 9w6u5APS0GlJSflYdk by leip4Ier@infosec.exchange
(DIR) More posts by leip4Ier@infosec.exchange
(DIR) Post #9w6Q77A43ODzLFa8Wm by leip4Ier@infosec.exchange
2020-06-15T09:15:13Z
0 likes, 0 repeats
why are phishing websites not exact copies of originals? they always have slightly different styles, different texts and such. is it some legal workaround in case they get caught?
(DIR) Post #9w6c85NXMl6RYJ751s by slm@infosec.exchange
2020-06-15T11:29:48Z
0 likes, 0 repeats
@leip4Ier I think it's just laziness of those attackers :)
(DIR) Post #9w6cNCSvId9zsLq70q by leip4Ier@infosec.exchange
2020-06-15T11:32:35Z
0 likes, 0 repeats
@slm but it's easier to download and adapt html/css than to make your own
(DIR) Post #9w6tuP94sKLTyjyZ16 by indirection@mastodon.online
2020-06-15T14:49:03Z
0 likes, 0 repeats
@leip4Ier @slm , JavaScript has made copying a bit harder, especially sites which lazily load content.
(DIR) Post #9w6u1cqSL3dyUii1Bp by Odd_Bloke@wrestle.town
2020-06-15T14:50:18Z
0 likes, 0 repeats
@leip4Ier @slm I'm not smart enough to know the right terminology, but perhaps it's to further whittle down potential scammees to only the truly "credulous"?
(DIR) Post #9w6u5APS0GlJSflYdk by leip4Ier@infosec.exchange
2020-06-15T14:51:01Z
0 likes, 0 repeats
@indirection @slm oh, that's true, but not in case i had in mind. i still see copies of almost-static websites (with only a little js to handle login forms) that are noticeably different.
(DIR) Post #9w6u9ngjuK7cRP3uvw by indirection@mastodon.online
2020-06-15T14:51:50Z
0 likes, 0 repeats
@leip4Ier @slm , most likely noobs. 🙂 Remember a lot of these scams are created by non-tech individuals targeting non-tech individuals...
(DIR) Post #9w6uIvYq0U6nSnibCK by leip4Ier@infosec.exchange
2020-06-15T14:53:30Z
0 likes, 0 repeats
@Odd_Bloke @slm oh, that sounds plausible! i remember reading articles about phishing emails being deliberately badly-worded, so that tech-savvy people don't bother.
(DIR) Post #9w6uaUax0Jrb2i5ABM by leip4Ier@infosec.exchange
2020-06-15T14:56:40Z
0 likes, 0 repeats
@indirection @slm no, i don't think so. you have to know quite some coding to be able to automatically generate similar bitcoin addresses to replace pasted ones. and stealing markup is in most cases easier than writing your own! but scammers who managed all this decided to re-create the website themselves.
(DIR) Post #9w6vXjmICKMtDWdaIi by Odd_Bloke@wrestle.town
2020-06-15T15:07:22Z
0 likes, 0 repeats
@leip4Ier @slm yeah, and I believe it's for similar reasons that scammers still claim to be Nigerian princes: anyone who is going to fall for that in 2020 is likely going to fall for it hard
(DIR) Post #9w6wTXpklQgcy7oxHM by indirection@mastodon.online
2020-06-15T15:17:49Z
0 likes, 0 repeats
@leip4Ier @slm , it's just a possible explanation for the not-quite-the-same static copies I've seen. If they've recreated the entire site by hand then of course we can continue to speculate:1. They're new to this, and think this is how it's done (my guess based on what you've further described)2. They may try to be avoiding content matching/detectionThere's no way to be sure.