Scammers Using Mock Copyright Lawsuit Threats To Get People To Download Malware

from the copying-the-best-in-the-business dept

With companies like Digiprotect, Davenport Lyons and ACS:Law busy sending out tens of thousands of so-called pre-settlement letters that threaten people (often on very little evidence, if any) of copyright infringement, but allow them to pay up to avoid a lawsuit, is it any surprise that out-and-out scammers are jumping into the game as well? Ben alerts us to a warning from US-CERT of a new email scam, which involves the scammers sending out legitimate looking emails pretending to be from a law firm, telling the recipients they're being sued for copyright infringement. The details are supposedly in a file at a URL provided in the email. When a visitor goes to that URL and downloads the file, they get malware instead. Yes, it appears that the malware scammers are now learning from the best in the business...

20 Comments | Leave a Comment..


If you liked this post, you may also be interested in...
 

Reader Comments (rss)

(Flattened / Threaded)

  1.  
    identicon
    Anonymous Coward, Mar 31st, 2010 @ 4:16am

    oh how different, its hard to view them as separate................

    reply to this | link to this | view in thread ]

  2.  
    identicon
    Anonymous Coward, Mar 31st, 2010 @ 4:22am

    "the malware scammers are now learning from the best in the business"

    Ooh, scathing. Hits the nail on the head, too.

    reply to this | link to this | view in thread ]

  3.  
    identicon
    Anonymous Coward, Mar 31st, 2010 @ 4:38am

    How long before the scammers start downloading copyright material to your computer so that the three strike rules kick in. After two offenses (or an assumed amount of time) they then send you an email saying pay up or next time you lose your Internet connection.

    I might go write that program cause it shouldn't be very hard now should it.

    reply to this | link to this | view in thread ]

  4.  
    identicon
    Anonymous Coward, Mar 31st, 2010 @ 5:02am

    They don't even need to download or share copywrite material to / from your computer they just need to write some code so your ip address shows up on p2p or torrent software. The lawyers will assume infringement, sue and get rich and have you kicked off the net or in the case of the scammer send out emails demanding to get paid before they get you kicked off. It's the same which ever way you look at it.

    reply to this | link to this | view in thread ]

  5.  

    This could turn even worse.

    icon
    Skeptical Cynic (profile), Mar 31st, 2010 @ 5:52am

    Imagine if the scammers instead send you to a link to pay up for the violations?
    "We have found that you have uploaded x thousands of files so your fine is going to $5,000,000 but we will settle this for $500.00 if you pay in the next 24 hours."
    They could use one of the many overseas corrupt credit card processors to take you card number charge you the $500 then sell your number of the underground market.

    reply to this | link to this | view in thread ]

  6.  

    You'd think...

    icon
    btr1701 (profile), Mar 31st, 2010 @ 5:57am

    ...that these people would take the time to at least present a decent mock-up of a legal demand letter.

    No legitimate law firm is going to send out correspondence that both capitalizes and misspells "Pretrail Conference".

    And this sentence sounds like it was written by a 5-year-old:

    "The reason the lawsuit was filed was due to
    a completely inadequate response from your company
    for copyright infrigement that our client Touchstone
    Advisories Inc is a victim of Copyright infrigement"

    No punctuation, random words capitalized, and basically nonsensical. It's almost as if English isn't the author's native language...

    Anyone who falls for this and thinks a real law firm put this out needs to have their head examined.

    reply to this | link to this | view in thread ]

  7.  

    Funny

    icon
    WammerJammer (profile), Mar 31st, 2010 @ 5:58am

    What's the big deal? If they were stupid enough to worry about an email instead of an actual delivered subpoena to appear in court, then they deserve what they got. How stupid!! Worrying about an email. I get tons of stupid emails saying I won the lottery and some Attorney in the UK is holding my money. In my case I am somewhat known in programming circles and as a result I constantly get emails saying some engineer name Klaus or something like that worked on a project with me and in appreciation of my friendship has left me million of pounds. All of these emails come from the UK and recently started coming from Nigeria. Stupid people to even respond to an email like that.

    reply to this | link to this | view in thread ]

  8.  

    Re: You'd think...

    icon
    Skeptical Cynic (profile), Mar 31st, 2010 @ 6:48am

    Without a doubt they non-English speakers. Most of the letters are written in their language and then they use a program to translate I'll bet.

    reply to this | link to this | view in thread ]

  9.  
    identicon
    Anonymous Coward, Mar 31st, 2010 @ 7:45am

    How long will it be before someone who knows they have never infringed files charges against the settlement lawyers for extortion?

    reply to this | link to this | view in thread ]

  10.  

    And what's the penalty again for a 'false claim of copyright infringement'?

    icon
    anymouse (profile), Mar 31st, 2010 @ 7:57am

    reply to this | link to this | view in thread ]

  11.  
    identicon
    Rekrul, Mar 31st, 2010 @ 8:53am

    The details are supposedly in a file at a URL provided in the email. When a visitor goes to that URL and downloads the file, they get malware instead.

    How do you get malware from just downloading a file? Unless it's an EXE file and you're stupid enough to believe that a law firm would ask you to download and run a program. Of course, comsidering the complete cluelessness of today computer "users", it wouldn't surprise me if this is exactly what they're doing...

    They don't even need to download or share copywrite material to / from your computer they just need to write some code so your ip address shows up on p2p or torrent software.

    Why go to all that trouble, when you can just a screenshot and plain-text log file to show an IP address you want?

    reply to this | link to this | view in thread ]

  12.  

    Re:

    identicon
    Anonymous Coward, Mar 31st, 2010 @ 10:09am

    How is a screenshot or plain text file infringing? Well maybe to lawyers!

    reply to this | link to this | view in thread ]

  13.  

    Re:

    identicon
    Anonymous Coward, Mar 31st, 2010 @ 10:40am

    What rock have you been hiding under for the last decade? Do you know what Spyware is? Browser exploits? Flash exploits? Javascript exploits?

    EXE installed malware has always been low-class scriptkiddy material,

    reply to this | link to this | view in thread ]

  14.  

    Re: Re:

    icon
    Skeptical Cynic (profile), Mar 31st, 2010 @ 11:29am

    I can verify that!! I am in IT and exe's are way old hat. I can't tell you how many people get infected by drive-by downloads.

    reply to this | link to this | view in thread ]

  15.  

    Too bad they didn't patent it.

    identicon
    mirradric, Mar 31st, 2010 @ 10:41pm

    Wow... now we have malware scammers copying what copyright scammers are doing. Too bad the copyright scammers did not patent their method of scamming or else they'll be able to sue for infringement.

    reply to this | link to this | view in thread ]

  16.  

    Re: Re:

    identicon
    Rekrul, Apr 1st, 2010 @ 6:42am

    How is a screenshot or plain text file infringing? Well maybe to lawyers!

    The screenshot or plain text file aren't infringing in themselves. That is the kind of "evidence" that is used in copyright infringement cases. You get accused of infringement, dragged into court and the anti-piracy groups show up with screenshots and log files as "proof" that your IP address was the one sharing the files.

    I suppose in some cases, they get an order to copy your drive and look through it for evidence, but at the start of the case, all they have are (easily faked) screenshots and log files.

    reply to this | link to this | view in thread ]

  17.  

    Re: Re:

    identicon
    Rekrul, Apr 1st, 2010 @ 6:45am



    Read the article again, it specifically says that users get infected with malware when they download a file. If it was a drive-by installation, why make them download a file at all? That just looks more suspicious.

    reply to this | link to this | view in thread ]

  18.  

    SCAM JOURNAL - ijcaonline.org

    identicon
    ijcaonline.org, Apr 27th, 2010 @ 4:07am

    SCAM JOURNAL PUBLSIHING UNREFEREED PAPERS!!!

    International Journal of Computer Applications
    ijcaonline.org

    The best place to publish nonsensical papers!!!

    Papers published by IJCA have no recognition in most Universities!!

    Blacklisted by several universities in Europe, US and Asia!!

    International Journal of Computer Applications
    ijcaonline.org

    a SCAM JOURNAL!!! BEWARE!!!!

    reply to this | link to this | view in thread ]

  19.  

    Good alerts...

    identicon
    Jon, Sep 22nd, 2010 @ 3:41pm

    These retards are preying upon people who are still quite new to the internet. If you are being sued for something serious, YOU WILL GET IT IN THE MAIL!!! Uh, how did they get your email anyway? Please... mark it spam and if you have gmail, mark it phishing and move on.

    reply to this | link to this | view in thread ]

  20.  

    Lawsuit Scam

    identicon
    Anonymous Coward, Dec 21st, 2010 @ 7:54pm

    Has anyone been the victim this scam? Someone from an "Unknown" number calls you and tells you that you are being sued for non payment of a loan? Somehow these people got my email address, SSN#, address, work number and other info. I called the FBI, yes the FBI, who then gave me the number to the FTC,( Federal Trades Commission.) I filed with them and they have put my SSN# and ALL my information on a security watch. Creditors have been notified, among other people. I hope this info is helpful to you. Be safe and live well.

    reply to this | link to this | view in thread ]


Add Your Comment

Have a Techdirt Account? Sign in now. Want one? Register here
Get Techdirt’s Daily Email
Save me a cookie
  • Note: A CRLF will be replaced by a break tag (<br>), all other allowable HTML will remain intact
  • Allowed HTML Tags: <b> <i> <a> <em> <br> <strong> <blockquote> <hr> <tt>


A word from our Sponsors...
Follow Techdirt
Flattr rss rss
From the Techdirt Archive...
A word from our Sponsors...

Close

Email This