Kamis, 09 Februari 2023

Pig Butchering Fraud Targets Android and iPhone Users


(iStock)

By:
Team of Hukumindo


Pig butchering scams that promise huge profits from fake crypto investments have begun to infiltrate the Google Play Store and Apple App Store. Android and iPhone users are asked to be more careful. The pig butchering scam has actually been going on for years. This form of fraud usually involves fake websites and advertisements to social engineering. By using fraudulent applications circulating on official app stores, fraudsters can gain the victim's trust more easily.[1]

A cybersecurity researcher from Sophos said 'pig butchering' scammers usually target male users on Facebook or Tinder. Sophos came across this scam campaign originating from the 'ShaZhuPan' group from China. Fraudsters usually use profile photos of beautiful women to trick victims, and display photos of lavish lifestyles. After gaining the victim's trust, the scammers then say that they have an 'uncle' who works for a financial analysis company.[2]

The victim was then invited to buy cryptocurrency through a fake application called 'BitScan' on the Play Store, as well as Ace Pro and MBM_BitScan on the App Store. The scammer then guides the victim to first open a deposit on the Binance crypto exchange platform, then gets transferred to the fake app. This fraudulent application initially allows victims to withdraw their crypto investments in small amounts to make victims more trusting. But after the nominal gets bigger, the victim's account will be locked.[3]

To be able to infiltrate the App Store, the ShaZhuPan group initially connects the application with a 'good' server until it gets approval from Apple. After passing the review, the fraudster then changes the domain and connects the application to the "malicious" server. After opening the application, the victim will see a crypto trading application-style interface sent from a malicious server. However, all the information displayed on the interface is a hoax, except for the victim's deposit. Since these fraudulent apps were only downloaded by a small number of users who were victims, not many reported these apps for fraudulent acts. Google and Apple also find it difficult to recognize and kick this fraudulent application from their application store.[4]

Sophos says the popularity of fintech services makes it easier for consumers to trust apps like these. Moreover, the fraudulent application made it into the Google Play Store and Apple App Store. For this reason, Android and iPhone users are asked to be careful before installing new applications. Always check reviews and comments from other users, view privacy policies, details about the developer, and information about the company.[5] And if you have any legal issue in Indonesia territory, contact us then, feel free in 24 hour, we will be happy to assist you. 


*) For further information please contact:
Mahmud Kusuma Advocate
Law Office
Jakarta - Indonesia.
E-mail: mahmudkusuma22@gmail.com

________________
References:

1. "Awas! Penipuan Pig Butchering Incar Pengguna Android dan iPhone", inet.detik.com., Virginia M. Putri, Diakses pada tanggal 7 Februari 2023, Link: https://inet.detik.com/security/d-6551882/awas-penipuan-pig-butchering-incar-pengguna-android-dan-iphone
2. Ibid.
3. Ibid.
4. Ibid.
5. Ibid.

Rabu, 08 Februari 2023

WhatsApp Fraud Mode 'Like' on YouTube Videos to Obtain Money

 
(iStock)

By:
Team of Hukumindo

Previously, the www.hukumindo.com platform has talk about "5 Characteristics of Phishing Links That Can Drain Your Bank Account", "Examples of Fraudulent Spam Emails", "I Have a Contract Whose Goods Have Not Been Delivered, How Do I Sue Under Indonesian Law?" you may read also "How To Report Online Scammer Or Fraud To The Police In Indonesia" and on this occasion we will discuss about 'WhatsApp Fraud Mode 'Like' on YouTube Videos to Obtain Money'.

Fraud or scams circulating on WhatsApp (WA) are now increasingly varied. Most recently, there are scams that promise money just by 'liking' YouTube videos, but in the end it's the victims who will lose money. Scams like this are common in India. Cybercriminals usually spread these deceptive messages via WhatsApp, LinkedIn and Facebook.[1]

Initially, fraudsters will contact potential victims via WhatsApp to offer job vacancies. Fraudsters usually claim to be representatives of global media companies whose names are unknown to many. The vacancies offered are very tempting, users only need to 'like' a YouTube video and will obtain USD $  0.5,- or around IDR 7.000,- per 'like'. Fraudsters promise potential victims can obtain USD $ 60,- or around IDR 898 thousand in a day.[2]

To convince potential victims, fraudsters even send small amounts of money, for example USD $ 2. This money is a payment for completing three tasks where the fraudster will send links to three YouTube videos, then ask the victim to like the videos, and share the screenshots. After that fraudsters enter the second phase where they will ask for the user's personal data to send payments. Then they'll pretend they're having a technical problem in the payment process.[3]

The fraudster then asks the victim to download an application to make the money transfer process easier. The problem is, these applications are usually trojans or malware that can steal personal data. After that the fraudster will ask the victim to send USD $ 1 for verification. It is there that the fraudster will have all of the user's banking data, from OTP, email, bank account, and credit card information.[4]

If you have ever received a message like this, promising a lot of money just by doing a simple job (just by doing 'like' on YouTube videos), you should be suspicious because it could be a scam. As soon as they get money from the victim, the fraudster will immediately delete their WhatsApp account and look for other victims. Be sure to immediately report suspicious WhatsApp accounts like this, and immediately block them so they don't contact you again. Also, don't let your personal number spread on sites or social media in public.[5] And if you have any legal issue in Indonesia territory, contact us then, feel free in 24 hour, we will be happy to assist you. 


*) For further information please contact:
Mahmud Kusuma Advocate
Law Office
Jakarta - Indonesia.
E-mail: mahmudkusuma22@gmail.com

________________
References:

1. "Awas! Penipuan WhatsApp Bermodus Like Video YouTube Dapat Uang", inet.detik.com, Diakses pada tanggal 7 Februari 2023, Link: https://inet.detik.com/security/d-6542805/awas-penipuan-whatsapp-bermodus-like-video-youtube-dapat-uang
2. Ibid.
3. Ibid.
4. Ibid.
5. Ibid.

Selasa, 07 Februari 2023

5 Characteristics of Phishing Links That Can Drain Your Bank Account

(iStock)

By:
Team of Hukumindo

Previously, the www.hukumindo.com platform has talk about "Chronology of IDR 654 Million in the Accounts of Klungkung House of Representative Members Dissapear", "Examples of Fraudulent Spam Emails", you may read also "How To Report Online Scammer Or Fraud To The Police In Indonesia" and on this occasion we will discuss about '5 Characteristics of Phishing Links That Can Drain Your Bank Account'.

Cases of digital crime using phishing methods are happening again. Lately, a resident of Bali claimed to have lost more than IDR. 600 million of his bank account. Initially, he received a message in the form of a link on the social network Facebook. The message was on behalf of a bank in the area. When the link is opened, the victim is asked to fill in some data. Instantly, the money in his account was drained. Crimes with this phishing method often use fake links on behalf of certain institutions, agencies or companies. These links usually lead to fake websites or pages that look like the original to trick the victim. After the victim fills in or submits sensitive data via the fake link, the contents of the account can be deducted.[1]

It should be noted in advance, phishing itself is a cyber crime in the form of deception or fraud attempts to obtain sensitive user data. That data, for example, is like account credentials (username and password), debit card data, or credit card data. In order to get this data, one way is to use a link containing a page that is made to look like the original website. When the data has been entered by the victim, the perpetrator will be able to immediately steal it and take over the account. This action is very detrimental to the user. Therefore, we always need to be vigilant with phishing links that are circulating.[2]

Perpetrator can create phishing links in various ways, adjusting the data they want to retrieve. For example, if you want to get debit or credit card data, the perpetrator will create a link that looks like the bank's original website. Even though there are various forms, the fraudulent links can still be recognized. So, what are the characteristics of a phishing link? For more details, here are the characteristics of phishing links that can trick and steal user data. Characteristics of a phishing link that can drain an account:[3]
  1. Using a fake website name that looks like the original. The first characteristic of a phishing link is using a fake website name or URL address. The name of the website address from the phishing link is usually made as close to the original as possible. For example, “instagrammm.com”, while the original is “instagram.com”. The use of such fake website name addresses is intended so that unwary victims believe that the link is genuine. 
  2. Content does not match the original website Phishing links generally contain more concise content than the original website. The quality of the content is also somewhat worse. This can be seen from the layout of the display and the contents of the writing that are not neat. 
  3. Requesting sensitive data As mentioned above, the purpose of phishing is to obtain sensitive user data. Phishing links usually contain only fictitious login pages that ask users to enter account credentials.
  4. Account credentials can still be read even if they are wrong Phishing links do not provide a login page that can allow users to enter their account on a platform. The login page listed on the phishing link is only fictitious and serves to collect credential data only. So, if a user enters account credentials in the form of a fake username and password on the login page from a phishing link, they can still be read. 
  5. Detected as an insecure website The next feature of a phishing link is that when it is opened a warning appears "connection is not secure" in the browser. The warning indicates that the website is not safe to open because it does not have a security certificate. If you find a link with the above characteristics, you should just ignore it, don't open it and fill in any data there.
And if you have any legal issue in Indonesia territory, contact us then, feel free in 24 hour, we will be happy to assist you. 


*) For further information please contact:
Mahmud Kusuma Advocate
Law Office
Jakarta - Indonesia.
E-mail: mahmudkusuma22@gmail.com

________________
References:

1. "Kenali 5 Ciri-ciri Link Phishing yang Bisa Menguras Rekening", tekno.kompas.com., Diakses pada tanggal 3 Februari 2023, Link: https://tekno.kompas.com/read/2023/02/03/10010007/kenali-5-ciri-ciri-link-phishing-yang-bisa-menguras-rekening
2. Ibid.
3. Ibid.

Senin, 06 Februari 2023

Chronology of IDR 654 Million in the Accounts of Klungkung House of Representative Members Dissapear

 
(iStock)

By:
Team of Hukumindo

Previously, the www.hukumindo.com platform has talk about "5 Most Bizarre Court Cases in US History", "5 Interesting Cases that Become the Jurisprudence of the Supreme Court in Indonesia", "How To Report Online Scammer Or Fraud To The Police In Indonesia" you may read also "Examples of Fraudulent Spam Emails" and on this occasion we will discuss about 'Chronology of IDR 654 Million in the Accounts of Klungkung House of Representative Members Dissapear'.

A member of the Regional People's Legislative Council (DPRD) of Klungkung Regency, Bali, named I Wayan Misna (56), admitted that he had lost IDR 654 million in his account. He is suspected of being a victim of fraud with a phishing link mode sent by the perpetrator via social media Facebook. Head of Bali Police Public Relations, Kombes Pol Stefanus Satake Bayu Setianto revealed that the victim initially checked the balance in his bank account on January 27, 2023 Then, Wayan Misna received a message via Facebook containing a link on behalf of the regional bank in Bali.[1]

Wayan then fills in the data on that link. Instantly, the money in his account was drained. "The person concerned is waiting for a transfer (from someone) and he opens Facebook. Then there is a link about the bank. (He clicks) Then he is asked to enter data, and then the account was drained, it turned out the link was fake," Satake told reporters on Thursday.[2]

Applications cannot be accessed Satake said, on January 30 2023 at around 11.00 WITA (East Indonesian Time), this member of the PDI-P faction (Indonesian Democratic Party of Struggle) wanted to make transactions through the mobile banking application. However, the application cannot be accessed. At the same time, he was contacted by the bank because he saw a transaction coming out of his account in a large amount at 11.49 WITA. In fact, the victim admitted that he had never made that many transactions. "The bank then sent a soft copy of the account which showed that there were many money transfer transactions coming out of the victim's account," he said.[3]

The member of the PDI-P faction then reported the incident that happened to him to the Directorate of Special Criminal Investigation (Ditreskrimsus) of the Bali Police, attaching several pieces of evidence such as a photocopy of his ID Card and a photocopy of his account book. "Due to this incident, the victim suffered a loss of IDR. 654,000,000,-" said Satake.[4] And if you have any legal issue in Indonesia territory, contact us then, feel free in 24 hour, we will be happy to assist you. 


*) For further information please contact:
Mahmud Kusuma Advocate
Law Office
Jakarta - Indonesia.
E-mail: mahmudkusuma22@gmail.com

________________
References:

1. "Kronologi Uang Rp 654 Juta di Rekening Anggota DPRD Klungkung Bali Raib, Bermula Klik Link di Facebook", denpasar.kompas.com., Diakses pada tanggal 3 Februari 2023, Link: https://denpasar.kompas.com/read/2023/02/03/050000178/kronologi-uang-rp-654-juta-di-rekening-anggota-dprd-klungkung-bali-raib
2. Ibid.
3. Ibid.
4. Ibid.

Sabtu, 04 Februari 2023

5 Most Bizarre Court Cases in US History

 
(iStock)

By:
Team of Hukumindo


Litigation often takes unpredictable turns, as is the case in these lawsuits. Some of these plaintiffs have a legitimate complaint; others just want to use the court system to make a point. Whatever their motivations, it is doubtful they expected to go down in the annals of court history as 'bizarre'.[1] Let's check it out:
  1. Trina Thompson v. Monroe College. In 2009 Trina Thompson sued Monroe College for $72,000 because she couldn’t find a job after graduating. She sought $70,000 to reimburse her for the full cost of her tuition plus $2,000 for the stress she endured during her three-month job search. She alleged Monroe College’s Office of Career Advancement did not try hard enough to help her find full-time employment after she completed her studies. Thompson lost her case.
  2. Chambers v. God Lawsuit. Nebraska Senator and activist Ernie Chambers made headline news when he filed a lawsuit against God for “widespread death, destruction and terrorization of millions upon millions of the Earth’s inhabitants.” Chambers filed the suit to show the importance of citizens being able to bring any complaint before a court of law. The case was dismissed because God did not have an address and could not be served with legal notice of the trial.
  3. Coffee Company On Ice. Alexander Forouzesh filed a lawsuit against a Seattle based coffee company for putting too much ice in their iced coffees. He alleged that the company was cheating its customers out of the coffee they paid for by overfilling the cups with ice. The suit was dismissed by the judge who said even children understand the displacement of liquid in an ice-filled cup.
  4. Cosmetic Company Twisted Up Over Lip Balm. A class action suit against a cosmetic company alleged it is impossible to use the last bit of lip balm in a tube because the twist up mechanism doesn’t twist up far enough. The Ninth Circuit Court of Appeals threw out the complaint because the product label accurately stated how much usable lip balm was in the tube.
  5. Woman Sues Government Over Nacho Cheese. In November 2017, a Wichita Falls, Texas woman sued the federal government for $95,000. In 2015, an Air Force Base employee allegedly spilled hot nacho cheese on her finger, causing permanent injuries to her finger that affected her ability to work. She did eventually lose her employment. The suit is ongoing. This list provides some insight into the variety of suits that come in and out of America’s court system. No complaint is too small or too bizarre for a plaintiff to bring to court. If you have a complaint, got to a lawyer and ask for a consultation.
And if you have any legal issue in Indonesia territory, contact us then, feel free in 24 hour, we will be happy to assist you. 


*) For further information please contact:
Mahmud Kusuma Advocate
Law Office
Jakarta - Indonesia.
E-mail: mahmudkusuma22@gmail.com

________________
Reference:

1. "5 Most Bizarre Court Cases in US History", pissd.com., Diakses pada tanggal 29 Januari 2023, Link: https://pissd.com/2018/07/5-most-bizarre-court-cases-in-us-history/

The Disappearance of Three Civil Rights Activists Inspired the Mississippi Burning Movie

( iStock ) By: Team of Hukumindo Previously, the www.hukumindo.com platform has talk about " Heavier Penalties Await for Vaping-related...