Thursday, March 7, 2024

Cyber Fraud Case Study 1

 Here I will educate on how deceptive cyber criminals are and what you can look out for. I've encountered many scams over the years that used various forms of social engineering, but in recent times, you will be floored to see the methods used. Tenacity is their main weapon. I have spoken in the past about prior attempts I encountered in my experimentation, and as a client. The world of Cybersecurity is said to be wide open for employment opportunities. I haven't see this personally, as I only get job rejections and see rare postings, but in honesty, the field has to be wide open, because the criminals are more psychotic and maniacal than ever. The level of robotic sociopathic behavior they will exhibit will blow you away, to the point you actually refuse to believe


 Recently, I was contacted on What'sApp by an individual proposing a part time and full-time opportunity. I had never heard of the person, and no clear entity was given at first. Being that I've been searching for remote work for some time, I decided to look into it. I recently encountered a few fools on Facebook pretending to sell trailers and cars to loop people into account stealing scams. I could go on for hours about the many scams I confronted people on. What you will find interesting is how dogmatic and forceful they are. They will argue about the merit and legitimacy of the business, even attacking you, for hours or even days, simply hoping that you break down eventually and take the bait.

  I was told I would get contact from a superior afterward with details about the job. I always tell companies, including the lender I used for my trailer, that legitimate companies have to take care to have very good ethical compliance when dealing with customer information and transactions, so as not to mirror the behavior of cyber criminals. I said the same thing to these people. I found out  that the company is BandCamp music apparently, and I didn't see much in the way of research. I was told I submit tasks for increasing visibility of music for artists. Oddly, the page I was directed to had a balance already in an account, and you clicked a button to assign the task, then you get a fraction of the amount generated. It was just as convoluted as it sounds. The records that showed were old pop records that had their play almost a decade ago from artists like John Legend and Adele. It looked very suspicious.

I made a login, and then for some reason, my trainer had me log into their account to complete their tasks. I then asked about training, and was told it isn't needed, which was odd because I thought that's what we were doing according to the instructions given at the outset. I was then ordered to go back to my account and complete the same kinds of tasks. After I was done, I was said to have accumulated money that I could extract to my account. This is where I got really interested, and as you can see in the dialogue I captured, I began to question to see if they would quit while they were ahead. I explained my knowledge of cyber security, and the comical condescending tone that she took was breathtaking. You can see by her dialogue, that no matter what red flags I exposed, until she was in handcuffs, I was nothing but a stupid fool and potential victim to her, regardless of the awareness I clearly showed to her. That's when I became really aware of the sociopath personality these people have. They are trained to be like pit bulls that bite and scratch until they succeed. All humanity stripped away.

 They stated that for security, they used crypto currency. I was then instructed to provide my crypto address. This required me to open a new crypto wallet, as PayPal's is now down due to a merge issue with Europe. I set up my account and linked the address, but was required to do more tasks. Below, you can see screenshots of the experience. You'll notice a staff level next to your icon. Apparently, this raises as you complete these tasks of pressing a green button that assigns a song to a list. The person guiding me was apparently from Germany, according to them. If you look at the layout, it makes no sense. And what I found interesting is that my trainer/manager, or whatever she was, thanked me for helping her complete her tasks, when I completed the training that wasn't training. After I had exhausted my tasks, I tried to get more, and was told that I have to deposit at least 100USD in order to reset my task counter on my portal so I could click the green button more to earn cash. I was instructed to contact Customer Service each time I needed to do this reset, which itself is a huge red flag and quite stupid. I'm reasoning the entire time with this person, explaining to her that it only made things more odd with her denying how bad the layout and protocol looked to an observer. Take a look at the captures below and study them.











I really wanted to cut off and block the person, but for studying purposes, I resisted, because I really wanted to see how far they were willing to go. The site itself is not very impressive. You can put together those pages and layouts today in minutes with the templates that exist out there. What was impressive is the slide show that she was willing to fabricate and lie through for hours. This made the clown who pretended to be a house wife looking to sell me a car on Facebook for over a day, look like child's play. They have carefully written scripts typing confidently about percentages of return and remuneration etc. It's designed to intimidate and confuse. By the time they ramble on for hours, you will be convinced that it is lunacy for it to be a scam at that point. And that's exactly what they want you to think. When I pointed out the factors that made it a scam and put them before her, she went on for over an hour, livid at the claim and acting as if I was crazy, even stating that she was well aware of the penalties of cyber criminal activity and would never be so stupid as to participate. This is how disrespectful these clowns are. Until you lock them up, you are nothing but a stupid clown to them.


  Eventually, the punchline I kept asking for came. I was told that each account needs to have a 100USD balance - which is a crypto equivalent, in order to be reset with tasks. This amount was the responsibility of the worker, who would then receive that money on the back end as revenue when they submit tasks going forward. So basically, you are paying to work, and they promise you'll get money on the back end. That's the point where I had enough intel, and I could assess and display how these criminals have advanced over the past decade. They are constantly finding new ways to drop the guards of their victims, even if it means running a marathon in the other direction. Even robbing you for a penny is worth it to these idiots, because they do it for the thrill and the bigger picture. I was chased for months by QuickStar Productions to scam me for $75 with a campaign for a fraudulent music release that did not exist out of a Maryland office that did not exist. Today, they are willing to make their efforts more elaborate and diligent, even trying to use some legitimate sources in the process. Be on the aler to the individuals.


  Many of these idiot companies overlook my resume, shred it, send me a rejection letter, and hire trained monkeys to pick up their phones and drool on their keyboards. But if people were really about security and awareness, they would be looking for who can uncover attacks like this and save potentially millions of dollars. Let this be a lesson. Who of your applicants is putting together a knowledge base like this on their own, due to having a passion for the field? Jokatech



Tuesday, January 9, 2024

Leaving Mainstream Gaming Platforms

 Finished with Mainstream Gaming Consoles



 I've been an avid handheld gamer for over 3 decades, and I've always loved being able to game on the go. Since the early 90's, I was a supporter of every major and minor company in the handheld space. I had almost every Gameboy iteration, briefly a few Sega handhelds, and of course Sony's handhelds, which is a key part of this discussion later on. When it comes to home consoles, I still own and play them, and I've seen the shift in era of updates, which I've come to accept. However, there is a line I have to draw.

  Nintendo has always been a very principled company that will go against the grain to do what they feel is morally right. And that's one of the reasons I've always stood behind them. Many of their unpopular choices have gone on to be mimicked, or gain popularity over time, such as embracing Indie games as a main focus. 

 I was online the other day and saw a very stupid comment by some idiot in a forum. He decried the notion that what gaming companies are doing right with updates is akin to the Don Mattrick doomsday scenario. He went on to normalize the practice as if it is a legitimate security measure. And he was so smug it annoyed me because he has no idea how stupid he is. When updates started heavily back in the early 2000's, needed features were presented as the software or platform matured. I'm not going to reiterate the history that I've already broken down in a past post here. However, as I stated, I was very skeptical about how updates became a forced norm in all tech industries. No one seemed to blink, like the bots most people are. However, now, at this point every company has bought in.

  I have a Nintendo Switch that has been offline for the past 5 months completely. I've played it a bit over the time, but have not really gotten into any games, so it sat for quite a while, as I was moving several times. Earlier in the morning, I go to play Ring Fit Adventure, and I'm stopped by an update notification. I am not in an active network at the time, so I elect to skip the notification and play my game. I get a message that until I update, I will not be able to play most of my games. This struck me as very odd, because my system wasn't even online at all since shortly after the last update, so how would it know that a new one was needed, with no reference to a network attached server. That's when it hit me. I realized that the update blocks that we get are actually initiated by counters that are placed inside of the last update script on your system. The counter expires at a certain point, which they plan on having a new system update out by. This is specifically applicable to system firmware updates.


  So you don't have to be online at all. If the company failed to put out an update, which would likely never happen, there would be a sea of bricked systems that popped up periodically due to this disgusting practice. That's why when you see most updates, they are empty downloads with no noticeable changes at all. This is because it is simply patching a counter onto your system to keep you on a leash. This goes back to the old argument that some conservative gamers have made about the new age concept  of not actually owning any of your games. There is a great deal of truth to that at this point. If I was not able to establish a network connection somehow, which I barely did, there was no workaround to allow me to play a game that I paid money for and supposedly own. And this is also a physical copy by the way


 The poster on the forum acted as if it was a needed security measure. The truth is that there are other ways to protect a system. If the concern is homebrew software touching the system's precious network, you can simply create a hash screener that will block online interaction without the recognized hash from the latest update patch. It is easy to isolate units to offline only. They're not trying to protect your system or their network. They are trying to play police and bully everyone to punish the few. That stupid update practice literally only serves to block you from your own content.

 Now that I have experienced this, my love for Nintendo, or any mainstream systems has faded largely. I will be transitioning to only homebrew systems in the future. I don't mind playing online, or even going online, but the fun is ripped out of gaming when I'm facing looking at a bricked system if I don't periodically check in with the principle. That is not ownership. That's borrowing. If that's the case, I should be able to get the thousands of dollars I've paid in game purchases back at any time. Can I? NO! This is why I'm happy to have modded my Sony systems. I don't collect games to simply be borrowing them in actuality.

 Like some Youtube Collectors have stated, the days where you had a Super Nintendo, Playstation, or Dreamcast were so much better simply for the fact that you had your games and they were yours to collect and use as you wish. With Systems I'll tolerate the update culture, because they are stationary for the most part. But with handhelds, I will not tolerate being in chains.

Tuesday, December 26, 2023

Intro to the Placebo Effect

 Placebo Effect


So many healings to our ailments are in the control of our minds. New album coming very soon.


Here is a new painting after over a year of inactivity.