4 ms·

There will be something in the middle proxying between the attacker and your computer, to get through NAT. Regards reverse engineering, you would have to grab

by jiggy2011 14y ago

There will be something in the middle proxying between the attacker and your computer, to get through NAT. Regards reverse engineering, you would have to grab packet information from your memory before it hits SSL. Not sure how the spoof detection works. I'm sure these protocols have been reverse engineered before. Regards what I'd do with it, really not sure. I've never had these guys on the line for long enough to know much about how their scam works. In practice it would probably be easier to just construct a VM in such a way that it makes whatever they are trying to do difficult in some amusing way, depends on how much patience they have I guess.

brk 14y ago
A tainted VM would be a lot more fun and easier to execute. One thing I've seen from using various TeamViewer and LMI apps is that poor quality connections can cause frustrating issues. A few things like a mouse driver that sporadically moves the mouse exactly opposite of the way they are trying to move it ("Not sure why it does that, maybe because I bought this PC in Australia and everything is upside down there"). Icons and a desktop background that look like the artifacts you get from poor connections (wrong colors, smearing, etc.). Random popups on the screen with things like "Fraudulent Windows Support Department detected. IP trace from FBI in progress!!".
- jiggy2011 14y ago
  That last one would certainly be a lot of fun. Though thinking about it , I'm not sure it's wise to piss these people off too much since in order to contact you they must have your telephone number which will probably have a 1:1 relationship with your physical address.
bradleyland 14y ago
I see. I was thinking you were headed more in the direction of reverse tunneling to screw with their systems. You never really stated any goal; e.g., to make the target machine difficult to control. Simply making things difficult for them would be much easier to achieve on the client. Hell, probably the most fun thing to do would be to load the system up with malware so badly that the system was practically useless, then watch as they try to navigate around all the bullshit in order to install their scamware.

brk 14y ago

A tainted VM would be a lot more fun and easier to execute. One thing I've seen from using various TeamViewer and LMI apps is that poor quality connections can cause frustrating issues. A few things like a mouse driver that sporadically moves the mouse exactly opposite of the way they are trying to move it ("Not sure why it does that, maybe because I bought this PC in Australia and everything is upside down there"). Icons and a desktop background that look like the artifacts you get from poor connections (wrong colors, smearing, etc.). Random popups on the screen with things like "Fraudulent Windows Support Department detected. IP trace from FBI in progress!!".

jiggy2011 14y ago
That last one would certainly be a lot of fun. Though thinking about it , I'm not sure it's wise to piss these people off too much since in order to contact you they must have your telephone number which will probably have a 1:1 relationship with your physical address.

bradleyland 14y ago

I see. I was thinking you were headed more in the direction of reverse tunneling to screw with their systems. You never really stated any goal; e.g., to make the target machine difficult to control. Simply making things difficult for them would be much easier to achieve on the client. Hell, probably the most fun thing to do would be to load the system up with malware so badly that the system was practically useless, then watch as they try to navigate around all the bullshit in order to install their scamware.