I’m having some fun with a Nigerian 419 scammer at the moment. It all kicked off with this email from about a week ago:
Dear Beneficiary,Re: Payment of your withhold/Outstanding contract/inheritance Fund of USD$2.4 Million.
Regards to our earlier correspondence in respect of the above subject matter,kindly be informed that we have here in our bank
and file record the above mentioned sum on your name that has been approved for immediate payment to you.In view of this and considering the number of applications and request we have received regarding this same amount,we are
requesting for the re-confirmation of the following information so as to enable us ensure that this fund is paid to the rightful and original beneficiary.1)Your full name and address.
2) Your telephone number(s) and fax No.(if any)
3)Your age and occupation.The above information are required to enable us cross-check with the information in our record and to ensure that you receive
your fund directly.We have had people here submitting several application claiming that you gave them power of attorney to
receive the fund on your behalf.This is why we needed this re-confirmation of information from you.We are anticipating your most urgent response.
Thank you.
Respectfully,
Ms Kemi Martins
For:SKYE BANK PLC
Fairly standard stuff, and the type of thing I’d usually just delete and think nothing more of. Occasionally I report the sender to their email provider in the vain hope that something might be done and they get disconnected, but that’s getting less and less effective. If time and mood allows, I now prefer to pick a spammer a week and just screw around with them for a while. I justify this to myself in a few ways: a) scammers have too easy a ride on the internets, b) them dealing with me and my perceived stupidity takes up their time for ultimately no reward, c) it’s fun and d) an actual, proper, confirmed Nigerian scammer is just too good an opportunity to pass up. I’ve been replying back-and-forth to the email address in question (skyebkgroupplc@live.com) from one of my disposable webmail accounts for a few days now and I’m acting a bit…startled. I mean, come on, I thought my bank account was doing OK and now I hear I’m in line for some free money — how could I miss an opportunity like this!
The guy on the Nigerian end of things (82.128.116.64) has sent me a file today, asking for my bank details so I can have my new VISA card sent directly to me. He sent skye_bank_form.doc (31kb), and I must open it, fill it out, and return it. What he’s actually going to get in return is skye_bank_form-completed.doc.zip — I’ll explain in my best naïve voice that I had to include some bank statement scans and the file is a bit larger than I expected. Mmm, juicy bank statements – an excellent reason to open the attachment at his end.
I won’t actually be sending bank statements, of course – I’m sending him a zip bomb. When he opens skye_bank_form-completed.doc.zip, it’ll extract a file called skye_bank_form.doc, which will look like a Word document in WinZip, and he’ll eagerly open it. The thing is, skye_bank_form.doc is full of zeroes. Lots of zeroes. A hundred gigabytes of zero — or, in old money, 107374182400 zeroes…one hundred and seven billion, three hundred and seventy four million, one hundred and eighty two thousand four hundred zeroes. That 100 gigabyte file zips down to a few megabytes and will extract to full size when he opens it. Which will likely crash his computer. Or kill it completely. Or something worse, I don’t know — and I don’t care.
Here’s how I did it. This assumes you have a UNIX-esque operating system, I’m sure it’s possible for Windows but you’re on your own with that. Make sure you have enough free space on your hard disk, and you’re not doing anything important, then open a terminal prompt and type:
dd if=/dev/zero of=skye_bank_form-completed.doc bs=1m count=100k
That command takes a never-ending zero generator (the /dev/zero part) as its input file, and dumps it to skye_bank_form-completed.doc, with a blocksize of 1 megabyte, and it stops when it has 100000 blocks in a row…a thousand megabytes is a gigabyte, and a hundred of those make a hundred gigabytes. That’s stage one complete. Next: zip it. A billion of the same character in a row will compress exceptionally well. My hundred gigabyte file has been squished into a file that’s of an email-friendly size…and is currently headed along the interweb choobs to a dial-up account in Nigeria.
Posted in Pete's blog by pete on Mon, Jan 24 2011 · Comments: 1





