Greg Clarke 🇨🇦 :mverified: on Nostr: A scammer "hacked" my elderly friends email account and sent me a message asking for ...
A scammer "hacked" my elderly friends email account and sent me a message asking for Amazon Gift Cards. After some correspondence I sent them a link to an Amazon eGift card which was actually just an endless captcha loop. It wastes their time while collecting their data. I get all the normal things from the nginx logs (useragent, ip, etc) plus whatever I can convince Javascript to expose like their timezone, real useragent, language, platform, screen resolution, canvas fingerprints etc.
The captcha loop keeps trying to convince them to disable their VPN and they actually did 😅 Now I can have more fun!
Published at
2023-09-08 19:45:12Event JSON
{
"id": "9a678f73c06e60bae18ec9cd034b5c333f1d9c5cc91ab2eaa1ed263b4d560088",
"pubkey": "0bf4e66e68e00c35f760416eb08eff4cd735bf57c77a9cf792a770620d49380a",
"created_at": 1694202312,
"kind": 1,
"tags": [
[
"proxy",
"https://clar.ke/users/greg/statuses/111031242778560748",
"activitypub"
]
],
"content": "A scammer \"hacked\" my elderly friends email account and sent me a message asking for Amazon Gift Cards. After some correspondence I sent them a link to an Amazon eGift card which was actually just an endless captcha loop. It wastes their time while collecting their data. I get all the normal things from the nginx logs (useragent, ip, etc) plus whatever I can convince Javascript to expose like their timezone, real useragent, language, platform, screen resolution, canvas fingerprints etc.\n\nThe captcha loop keeps trying to convince them to disable their VPN and they actually did 😅 Now I can have more fun!",
"sig": "848878c4657997ba2e808cc8456f1909af6de69000bfc33bdfce2f427d0a3427a5f5a5e85fd7276cba1e3f5c5ef89a0fad7b7059794aaa1d5371a6b65d05595b"
}
