Equitorial Bank Website Used For Interswitch 419 Scam

I never do bank transactions via the internet

You might not believe this, These fraudsters have allies among the bank officials
who give out vital information that could aid clonning of a website and ftp,
This was personally revealed by my uncle who is working with cybercrime.

look at it on the bright side, it shows that the future of IT and IT security will be very strong in Nigeria, thats jobs baby jobs 

Its not a new thing, looking for the gullible ones. It only calls for vigilance and wisdom.

If one has a problem with his ATM, he should see his bank. I am sure no one ever got his card directly from Interswitch.

Good talk and advice.

@Everyone
Important points for online banking

Your bank is never going to request for any information via email. they can tell you to go to the nearest branch to verify any detail.

Cheers folks.

i almost fall for that stuff, i was thinking its was from interswicth dat day the server was very slow so i decide to go the next day only to hear the info on my radio set dat scam guyzz are foreging the interswich web.immidiatley i delected all the message. i think God ho! i for don wreck!

just stickin my thumb in the air here,

could it be that nl gets at minimum 1000 posts within a second such that the web-server crawls to a halt even with asynchronous processing?

@ post

I don't fall for such scams. I've been sent such emails before and i don't bother opening them. I could just for fun just to see if the scammers would use the info i put in there lol. When they see that the info is wrong, body go tell them.  . I have a friend who wanted me to help him and his group of friends design a page on a fake nokia website supposedly top be used like they do for MTN Winners scam. I posted him so tay he had to leave me alone 

@aeso
Where do you stay in Australia?

man i see.its high time people should wise up.i've goten such few many times.like mode nine i only press delete cuz they cant hustle a hustla.

one needs to be very carefull this days

Just got one now.
But you know what! Just click on delete when you get such to avoid being tempted.

Thanks.


Have you heard of famous websites that have been hacked in the past? CNN, White House by Chinese hackers? Do a google search to find out. I don't dispute your view of a possible collusion with an ETB officer in this, but as a forensic or "forency" expert you claim to be, you should bear a more flexible approach in your investigations.
Believe me it is quite easy, although may require some patience. Here's one avenue:

1. Run an nslookup to get web server's IP address.
2. Scan and  probe server for services running, do OS fingerprinting to discover what OS is running. Possibly detect which web server is in use as well.
3. Scan to see if there are vulnerabilities on the server that have not been patched. If none found, subscribe to mailing lists for zero-day attacks and wait till patiently new vulnerability is reported. Quickly run an exploit before web/server admins have time to patch systems.
4. Run an exploit to hijack web server. Elevate your privileges/permissions and plant a backdoor for future privileged access. Design your [fake] interswitch web page and upload on server using ssh. Design exactly like real interswitch, or just download copy of the real site if you don't have the time.
5. Create new database on existing database server. Link [fake] interswitch web page form to database to "harvest" proceeds of phish.
6. Send bogus email to several thousands of users.
7. Run operation for a few hours only to escape detection. Clear funds in "mugu" accounts.
8. Cover your tracks by clearing the system logs of all traces of activity.

So it's as [easy] as that. The problem I see is that most webmasters are ignorant of security issues.
Ask yourself who gets the best jobs? It has never been, and never will be, the most suited/skilled. It's always the individual who blows his trumpet the most with a 10-page CV or who gets there on merit.

The lesson here is that web servers must always be patched regularly. Users must also look for a padlock/key sign on their browser when posting confidential info. If you don't see a padlock, close the page immediately. If you do see a padlock, click on it to check the site's certificate to ensure it the real Interswitch, as anyone can easily setup a secure server.

I am open to more argv on this,

@ webpro:
http://cyberinsecure.com/white-house-network-hacked-by-chinese-on-multiple-occasions/

So kpanel or cpanel access isn't needed here as you believe. The chinese gained access to the white house networks over and over again and the American cybersecurity experts had no clue what had happened. They even served malware (viruses, Trojans, etc.) to visitors to the site on one occasion and probably used that to gain access to those PCs that downloaded the Trojans as well!

So we are in an insecure online world!     

Why argue with him about what Blackhats can do ,