ICS0018 Hands-on seminars

2023-03-08T07:19:27Z

Allpal: /* The Seminars */

=== The idea ===

The hands-on seminars are based on ScamLab materials. The goal is to learn about different scams in a safe(ish) but real environment. A little side quest is to waste scammers' time so that they can't use it on actual victims.
A successful presentation will result in passing the course if the attendance criteria (6 out of 8 lectures and seminars) is met. To register a presentation, please send an e-mail to Kristjan, stating the chosen time slot. '''There are limited presentation slots - first come, first served!'''

=== The Task ===

Step 1: Create a fake identity and honeypot email account for engaging with scammers. Other platforms are also welcome, as long as you are able to protect your identity.

Step 2: Distribute the email address on shady or spammy sites, such as social media, online forums, etc. Some tips can be found here https://www.quora.com/How-can-I-get-scam-emails

Step 3: Wait for the scams to start rolling in.

Step 4: Engage! First select if you're going to use a naïve or aggressive approach.

If you don't manage to get any scammers to directly email your newly created address, go look in your regular mailbox, in the spam folder, ask friends & family, etc. NB! Before replying to any of those "crowdsourced" scam emails from your fake account, be sure to delete the address it was originally sent to.

Some tips for safety:
# Never reveal your (or anyone else's) real personal information to the scammers. Make up something realistic.
# Never open any links in emails unless you're in a protected sandbox environment.
# NEVER give out any real financial information, account information, or passwords.
# Always use Multi-Factor Authentication (MFA). Even on your fake accounts.

Here's the grand prize: if you manage to engage with at least 3 scammers for an email chain of 5 messages or more (they respond to at least 2 of your letters in the same thread), and present your findings at one of the seminars, '''you pass the course'''. It's not as easy as it might first seem.

An alternative way to pass is to educate people in your social network, friends, family, coworkers, etc about scams, how to spot them, how to avoid them, what to do if you're already a victim.

=== The Seminars ===

# March 1:
#* Homework discussion: fake identities, findings in honeypots
#* Petr Jelinek ✅
#* Phasha Davrishev ✅
#* Anton Višnevski, Denis Shadrin ✅
#* Vladyslava Shekula ✅
#* Ilya Nikolaev ✅
# March 8:
#* Scambaiting: aggressive approach
#* Helena Veebel
#* Aleksandr Voronkov
#* Maria Logberg
#* Farid Azizov
#* Rauf Gozal
#* ...
# March 15:
#* Scambaiting: naïve approach
#* Karmo Kütt
#* Alejandro Ballesteros Perez
#* Sanan Mammadli
#* Filip Tomeš
#* Maksim Gorozhanko
#* Lorenzo Cavallini
#* Allen-Kristjan Päll
#* ...
# March 22:
#* Scam prevention, how to educate others
#* Nicoleta Petrea
#* Hannes Kraavi* (scambaiting, naïve approach)
#* Talha Gesen
#* Georgi Tarassov
#* Daniil Lemberg
#* Risto Remmel

[[Social Engineering | Back to the course page]]

E-SPEAIT Participants

2022-01-30T17:21:50Z

Allpal:

Everybody should add his/her name and blog address here.

If you log in with your Uni-ID, you should have the 'edit' tab at the top of this page. Alternatively, you are allowed to e-mail the address directly to the lecturer (but this would keep others from reading - and possibly contributing to, by commenting - your blog), therefore publishing is preferred.

Attention: if you see that the list is already long, please add yourself to the '''bottom''' of it. Otherwise, later people will be really hard to spot.

Lecturerː
* Kaido Kikkas, https://jora.kakupesa.net/ (sorry, in Estonian only)

Students:
* Tashi Kamlaldin Rwalshrangpa https://www.blogger.com/profile/14026800162708146439
* Maria Logberg, https://mlogberg.wordpress.com/
* Semen Diev https://cybersecurityinfospeedrun.blogspot.com/
* Andres Naruson https://tln-cyberstalker.blogspot.com/
* Aleksandr Voronkov, https://cyberkotyara.blogspot.com/
* Johannes Kodumäe https://thisismyblogaboutcybersecurity.wordpress.com/
* Grzegorz Kmita, https://otisthescribe.wordpress.com/
* Anton Ostashkov, https://anosta1147.wordpress.com/
* Vladislav Suprun, https://vlsupr.blogspot.com/
* Can Çağlar, https://injapanheartsurgeonnumber1steadyhand.wordpress.com/
* Izolde Springe, https://cyberice3.wordpress.com/
* Ezel Erguden https://blog60239333.wordpress.com
* Sanan Mammadli https://taltech-sananm.blogspot.com/
* Alejandro Ballesteros Perez, https://ballesterosalx.wordpress.com/
* Farid Azizov https://cyber-faaziz.blogspot.com
* Artyom Davydik https://cyberkotleta.wordpress.com/
* Lorenzo Cavallini, https://locava.wordpress.com/
* Louis Alvin, https://speait.louis-alvin.eu/
* Helena Veebel, https://helenablog1.blogspot.com
* Nicoleta Petrea https://addicttech-nicoleta.blogspot.com/
* Aleksei Bahmatov, https://cybermonki.wordpress.com/
* Oskar Pikkov, https://r00m641a.blogspot.com/
* Rasmus Reigo, https://rareig.wordpress.com/
* Ilya Nikolaev, https://itisagoodidea.blogspot.com/
* Benedek Matveev, https://bematv.wordpress.com/
* Farkas Pongrácz, https://fapong.wordpress.com/
* Risto Remmel, https://riremm.blogspot.com/
* Pavel Rotov, https://pavelrotov-speait.blogspot.com/
* Nadine Jungermann, https://e-speait-nadine.blogspot.com/
* Sofia Bermudez : https://speaitsofia.wordpress.com
* Edvin Toome https://edvintoome.blogspot.com/
* Bendegúz Koszticsák https://bekosz.blogspot.com/
* Margus Valdre https://itobsevatoorium.blogspot.com/
* Akimbek Kurlys https://kazakhsecurity.wordpress.com/akimbek-kurlyss-blog/
* Artur Lykov https://roomno40.blogspot.com/
* Roman Krutsko https://siidirom.blogspot.com/
* Dmitri Trubetskoi https://zxclord.blogspot.com/
* Luca Maddaleno https://www.lucamaddaleno.me/ ([https://www.lucamaddaleno.me/feed rss feed])
* Aleksandrs Rimlins https://alexrimlin.livejournal.com/
* Hannes Kraavi https://hannesk2022.blogspot.com/
* Vladyslava Shekula https://vladyslavashblog.blogspot.com/
* Denis Shadrin https://denissh2022.livejournal.com/
* Phasha Davrishev https://phdavr.wordpress.com/
* Georgi Tarassov https://kot25blog.blogspot.com/
* Mark Samoilov https://msamoittu.blogspot.com/
* Aldous Waters https://aldouswaters.livejournal.com/
* Jáchym Líva https://livajach.wordpress.com/
* Adetunji Adeyimika https://wordpress.com/view/adetunjiadeyimika.wordpress.com
* Rauf Gozal https://raufgozal.blogspot.com
* Orkhan Hasanzade https://orkhanhasanzade.blogspot.com/
* Allen-Kristjan Päll https://tamrextulekustuti.blogspot.com/

* The OPML file with the RSS feeds for the forum and all the blogs will be available when the course gets underway and all participants are onboard.

[[E-SPEAIT | Back to the course page]]

[[Category:ITSPEA]]

ICO wiki - User contributions [en]

ICS0018 Hands-on seminars

E-SPEAIT Participants