Sunday, January 05, 2020

Triangulation Fraud - Wow! I Ain't Seen Anything!


https://youtu.be/2IT2oAzTcvU - Nina Kollars of the Naval War College - she researches Cybersecurity and Military Innovation

Coffee addict - and uses Nespresso (N)
You can buy directly from N
Dem pods is really expensive - so, can I get em cheaper?
Yes, Ebay - found a listing that would save her 50% vs direct from N
But, have to buy 200 pods at a time - cool, I drink tonnes :)
Wins, pays with PayPal and week later - hello, snail mail.
But, aha - also das brand new N Pixie machine - $280 value retail

Mistake?
Looks at invoices - same sender, but, shipped direct from N!
Not expected - should have come from some third party.
Ebay seller - Sue - rating 0, new account. Only sells N.
On Nespresso site, account holder is George - different person!
Calls N, yes says N customer svc, George's credit card has been charged for both items - pods and machine - after explaining only pods were ordered, and from Ebay, not N!
"You better let George know"
Please send me a pre-paid shipping label so I can return your machine.
Googles, gets to Krebsonsecurity - and finds this graphic.

The whole trick is to convert a line of credit into cash.
You have a stolen credit card.
You want cash.
You use the card to "buy" something
Why "buy" - because you buy something that you "sell" when someone else - unsuspecting customer - wants to buy "something"
Get it?
A wants X. You use the CC to buy X from N and ship to A. But, A pays your cold hard cash (or something like cash). Who loses? Either N or the credit card company - or, if the guy who lost the card is really dumb and doesn't dispute the transaction, he's the loser.
You keep the cash!

FYI - Shame on Ebay - the rating on top - the stars - is not for the seller but for the product. They bury the seller rating at the bottom in really tiny font!

And, with Ebay, you can't (at the time of the talk), report fraud if you received the item! Is it any surprise to you AMZN steamrolled these sleazy *ds?




No comments: