Tag Archives: Scammers

Last time I once wrote about domain scamming trick last August 2008, which was famous for trying to trick you by threathening you that someone would steal your trademark out of your domain name. But it is already an old news to tell.

Today, I would let you know another very dangerous strategy done by scammers to steal your money and vital information online – Clickjacking. Maybe some of you have heard, maybe some have not. Anyway, Clickjacking is sly and cunning scamming techniques used by scammers to make you reveal  and  send your confidential information to them.

It can be your account passwords in websites, bank accounts, or even they can steal the control of your computer when you seem to just click harmless web pages without you knowing it. Even worse, the button clicked is hidden or invisible and covered by other visible function of the button. So, you never have the idea that you have been clickjacked until you really get the effect.

Fraud By Clicking Link Buttons

As I mentioned a little above, this is how clickjackers do their jobs, by providing invisible button covered by  a seeming to be safe button to click. You click the buttons that looks totally normal and is even on a very legitimate site. For example, when you are browsing your bank’s website but still, you have the possibility of getting clickjacked.

What is worse is that you cannot even see the malicious button hidden behind the normal one. There is still a button that you see to click. But unfortunately, the button you always see when you click on the site has the hidden button that can get you clickjacked.

So, Clickjacking performs as the second invisible button, which has been covered by the real button. This means when you think you click the button you want to click, you’re also clicking the button behind it. Everything looks normal, but actually it is not. And that is how your information got revealed and stolen.

What’s the Effect?
What is it after you click on the hidden link buttons? Don’t ever think that it just stops until that step only. Just right after you click on the button, they are able to track and get your vital information, passwords, and use them for things that can make you thrilly scared.

It can send your banking information to other parties, operate application in the background so you won’t know, or even, when you are on your computer online, it can use your camera or microphone to monitor what you are doing there. Even worse, it also can download virus that can damage your computer.

Imagine! You must be very often in clicking anything and anytime online whenever you are browsing the internet. You click the submit button for any online form you fill out or open your e-mail, or many other things you do when being online. There are so many great possibilities you get clickjacked.

How to Solve This?
As this is really quite terrifying issue for your online, you should do some precaution and action for this. But for sure, you cannot just turn off the javascripts as it won’t help at all. However, some prevention techniques have been provided such as installing NoScript add-on with ClearClick feature, to prevent users from clicking on invisible buttons. This will help you to protect yourselves from all the types of Clickjacking that uses frame based or plugin based.

Or, you can also include a Framekiller JavaScript. What is this? It is a piece of JavaScript code that doesn’t allow webpages to be displayed within a frame. With framekiller, you can avoid to have inside frames by other pages from different sources to be included so that you can make sure that your browsing experience is safer.

So, for sure, don’t let yourselves clickjacked by those cunning and sly clickjackers. They might be clever and intelligent in finding their way to do online fraud and crimes. However, we can be even smarter in dealing with them.

~Gabrielle~

Scams – they come from many different flavors. Some are downright obvious, like eBay and PayPal sites stealing your identity. Then, there is a generous Nigerian who is willing to give you millions in cash. Yet, other scams can be a little hard to detect. These scams do not directly target you. Instead, they may target your business (or your online business) and can have very damaging effects if you are not cautious.

Today, let me share a little about a “harmless” scam that seems very above-the-board at first, but is really not so when you dig deeper beyond the obvious.

Domain name is the most important item for a company to have in the Internet. Without it, there will be no such company. People can’t visit your website with ease (just imagine remembering all those IP numbers). Regarding that simple but significant issue, domain can be one of the prime targets for scammers. who are they and how do they trick you out of your domain?

Most scammers nowadays come from the China domain registrars; they e-mail you, say that there is third party trying to steal your trademark, and suggest you to register all China extension domain names referring to your company (like .cn, tw, hk) with them. It’s not new for my company as during the last one month, there have been few typical e-mails sent to us.

Dear Manager,

We are Fexon Technology Limited, which is the domain name register center in China. I have something to confirm with you. We have received an application formally, one company named “Chesterton Holdings LLC” applies for the domain names(hostdepartment.com.tw hostdepartment.com.hk, hostdepartment.net.cn, yourcompany.org.cn, etc.) and the internet Brand Name(yourcompany)on the internet Apr. 3, 2008. We need to know the opinion of your company, because the domain names and keywords may relate to the usufruct of brand name on internet. We would like to get the affirmation of your company, please contact us by telephone or email as soon as possible. Please let someone in your company who is responsible for trademark or intellectual right contact me freely.

We didn’t know it was just a scam. I searched in search engines and found out these cases have been undergone by many companies. China domain registrars contacted them, told them that another company was trying to register domains referring to their trademark, and advised them to register the domains with the China registrar. What did I do next? I replied them politely and said that our company has no plan to expand to China; so, there is no need to register the domains with them.

Did it stop? Wrong guess! Two or three weeks after, we received another e-mail from another China domain registrar. Awesome! Two companies but the same type, scam. It said like this:

Hello
We are Shanghai NIC Internet Service Co.,Ltd, an oversea domain name registration organization. On April. 28th 2008, we received the Aiffida Investment company’s application that they want to register the ¡°hostdepartment¡± as their CN domain name and the Internet Brand. It’s our duty to tell you this matter in order to avoid the unnecessary Intellectual Property dispute .We want to confirm whether you have authorized the company to register. If you haven’t, please let me know whether you need to protect your domain name and the Internet Brand or not. According to the register principle, the original owner of the trademark has the priority to register. The priority time is 5-7 workdays, if your company give up the priority, we will accept the Aiffida company’s register request and help the company register after the time is over. Best regards!

Dylan Lan, China Internet Network approve Organization -Shanghai NIC Internet Service Co.,Ltd

Regarding the ticket, we sent a polite reply, saying that nobody can steal any company’s trademark and if there is, necessary lawful action will be taken; but tell you what, he sent another e-mail, the same point in paraphrased sentences. They sounded the same to me honestly, annoying huh?

Hello
We are now auditing the application of Aiffida company. Hereby I need to tell you that Aiffida company is using the trademark “hostdepartment” to register the top domain in China “transactiondirectory.cn, hostdepartment.com.hk, hostdepartment.com.tw, hostdepartment.net.cn, hostdepartment.org.cn ” and internet brand “hostdepartment”. These domain names and internet brand involves your company¡¯s benefit and reputation, according to domain name registration principle, we are responsible to bring this issue to your attention. If you want to object Aiffida to register ,there is only one way is to register these domain name by yourself and prevent other to register it . If you need to register it ,we will send you an application form according to the procedure of registration .After you fill out ,please send me back .We will use it to reject Aiffida’s application and help your company to finish the registration

Best wishes! Dylan

Don’t you think it was already unbearable anymore? Replying this, we were not that tolerating anymore. We stated directly that they are included in the list of scam registrar companies and asked for their explanation. This was effective because no more e-mail again from them since then.

What to Learn from the Lesson?

I found articles about people’s similar experiences and even the law document about China domain registration. It’s true we will impossibly expand our business in China regions if a third party registers domain names referring to our company since the law doesn’t allow different organizations refer to the same trademark. On one hand, it seems they are helping to save our trademark from being stolen. However, be aware that the cases are not rare and it is silly to straightly trust them and register some domain names in a rush. We should at least check them out for their reliability.

Mostly, their strategy in tricking us is just exactly like our experience. They contact by e-mail and say that a third party company (is there any?) is trying to register some China domains referring to our brand and it will influence our trademark badly on the sight of our customers. No doubt about that (if the case exists). However, to tell you the truth, what they are doing is just trying to fool us for their profit since the Domain Name Registration usually costs higher than the usual one.

Even worse, are you sure it will guarantee your brand is safe once you register those domains to them? The answer is no since they just manipulate our money by selling the domains expensively at $20-$50 a year for one China domain. If we really want to register the domain names and protect our trademark, do it with reliable domain registrars to ensure that our trademark is really protected.

For information, the China government internet network institution, CNNIC, has exposed the lists of China domain registrars that are scams, as you can have a look at http://forums.digitalpoint.com/showthread.php?p=6944670. In the provided link, you’ll be assured that these companies have grown abundantly in number, meaning that you should be more concerned when any of these registrars contact you through e-mail. Even more, who knows if the number has increased? Just beware! You don’t want to lose some money worthlessly for sure.

So, don’t get tricked by the domain scammers. Just inform them that we can take any lawful action for trademark thief and if they insist, let them realize what they should know about themselves.

-Gabrielle Capstick-