Chapter 11: Practical and Tactical Digital Defence (Part 2)


Overview

An eBay Version of Rocky

In ancient Rome, Caligula rigged auctions by employing shills to drive up his bid prices. Two millennia later, a flim-flam man pulled the same trick on eBay. His shills drove the bid price of an abstract painting by the artist Diebenkorn, which later turned out to be a forgery, to a mind-boggling $135,805. Fortunately, eBay got wind of the scam and pulled the plug on the auction before any bidders got burned. In 2002, Jason Eric Smith also got swindled on eBay. But unfortunately for Jason, this time eBay couldn't do diddly-squat.

Smith was a 21-year-old college student at the University of New Orleans studying to be a teacher. Making ends meet can sometimes be a struggle, which is how Jason stumbled upon eBay. He's had a lifelong passion for all things (Apple) Macintosh, and he discovered he could augment his income by buying and auctioning Mac computers and peripherals.

click to expand
Figure 11.1: Remodern BBS

Some names have been changed to protect the innocent and those not yet proven guilty.

The word "con" derives from the word "confidence." Smith had a good thing going on eBay until a con man tricked Jason into trusting him. What happened to Jason could have happened to anyone ; it's what he did about it that sets him apart! Here's Smith's story in his own words, as they appear on http://www.remodern.com/caught.html.

Mac Addicts to the Rescue, or How I Caught a Counterfeiter with a Little Help from My Friends

by Jason Eric Smith

I am a college student (my second time around). Specifically, I'm studying to become a high school history teacher. I am a student with a lifelong habit, though ”Macintosh. I got my first Mac in 1986, a used Mac Plus with 1 megabyte of RAM and a massive 40-megabyte external hard drive. Since then, I've always had to keep up ”first it was the SE, then the Ilsi, the PowerBook 140, and from then on, more Macs than you can shake a stick at. (I missed the Mac TV.) I usually keep my Mac for about six months, and then resell it and move up. I almost always buy used, so don't get any ideas about me being rich.

Since I went back to being a student again, I've been selling Macs more regularly, picking up good deals on used Macs locally and then reselling on eBay. I've been doing this for about two years now. It's relatively easy, taking about an hour each day, and it usually pays the rent. In November, when the new PowerBooks came out, I decided I was going to buy one for myself as an early Christmas present. It would come in handy for taking notes in class and finishing up a presentation I needed to do on the New Orleans school system. The day they were announced I ordered a nice new PowerBook G4 867 and found it on my doorstep only a few days later.

It was a beautiful machine! If you've never played with one in person, you won't believe it. I played with it for a couple of days, and took it to school to take notes and do research on. The more I used it, the more I loved it. But it was just too much to be carrying around. $2300 in my backpack had a tendency to make me a little nervous. I decided maybe I should turn it around and pick up an iBook. My girlfriend and I decided we would use the extra money to donate to some charities for Christmas. So on November 19th, up on eBay it went, along with an Airport Base Station and a bunch of other knickknacks. I set a buy-it-now price on a whim for $2950. The next morning I checked my auction, and a couple of bids had been placed, so the buy-it-now option was gone. Checking my e-mail, I got a couple of questions about the computer and, much to my surprise, an offer to buy it for $2900 from Steve M., a dad with a lucky son in college who was going to be getting a PowerBook for his birthday. Steve wanted to pay for it COD, which was no problem. It's actually how I usually sell things.

I called him on the phone number he gave to ask a couple of questions and make sure everything was on the up and up. He reiterated that he was buying it as a last-minute present for his son and, since it was already set up as a package, he thought it was a good deal. Not to mention the Chicago Apple stores were still out of stock. I got home from school, packed up my PowerBook and accessories, and off they went FedEx overnight to Chicago, never to be seen again.

At 10:21 a.m. on November 21st, a man going by the name of Paul S. signed for my two packages and gave the driver an official cashier's check from LaSalle Bank for $3052.78. The check made it back to my doorstep the next morning. I went to the bank, deposited the check and withdrew enough to go ahead and pay my rent and pick up a couple of household items. I sent an e-mail to Steve to make sure he got everything and to check that nothing had been damaged in shipping. No reply. As the old saying goes, no news is good news, right?

My girlfriend and I went away for Thanksgiving, and when we got back on Friday, I had a message from my bank. The branch manager called to let me know she had a returned item for $3052.78 and that my account was now in the negative. Seriously in the negative! No problem, I thought, I'll just call Steve and see what's up. So I dialed his number. In the back of my mind I expected a "this number has been disconnected" message. Instead I got an answer; the voice sounded identical to Steve, so I asked if Steve was there.

"Oh, Steve, yeah, that's my cousin. He's out of town for Thanksgiving, you know. He'll be back Tuesday."

"Can I leave a message for him?"

I left my information and asked that he return my call. That little voice in the back of my mind let out a sigh and an "uh-oh." The voices were the same, right? Was I being scammed? Well, if I was, I certainly wasn't going to let the weekend go by without doing a little investigating.

I started off with the information I had. His AOL e-mail address, his phone number, and the address I shipped the computer to. The AOL address didn't yield anything. Doing a reverse lookup on the address (thanks to whitepages.com), I got three names and phone numbers , none of which matched anything I had. The phone number didn't give me anything. I finally found a way to look up the exchange on the number to see if it was a cell phone or a landline (by using FoneFinder).

It came back as Nextel, and I wanted to scream. There really isn't anything you can do with a cell phone number. There are no directory services; the cell phone companies won't give out any information; and that's that. I called Nextel and pleaded with them. The customer service rep I spoke with seemed more confused than anything. He kept asking me what my Nextel phone number was and why I suspected someone was fraudulently billing to my account. I calmly explained at least three times that I was not a Nextel customer, that I was just trying to get an address for another customer I suspected has defrauded me, etc. I finally gave up on Chris from Nextel.

I was at a dead end! I'd just sent my $2300 laptop, my Airport Base Station, and a load of stuff to somebody I didn't know, and all I had to show for it was a bill from FedEx for overnight shipping and a returned cashier's check. It's hard to sleep comfortably knowing some asshole has your Mac and is doing God knows what with it.

Sunday the first of December, I sprang into action full force. I called for help! I knew I wasn't going to get anywhere with this on my own, so I figured I might be able to get some help from some bulletin boards . I posted my tale of woe and call for assistance on every Mac bulletin board I could think of. I hoped that somebody who worked for Nextel or some fellow Mac addict like myself might be willing to bend the rules a little. I wanted this guy's address, and I wanted it bad. I was already pricing flights to Chicago and putting my professors on notice that I might have to miss a little class. I may have made an error in trusting this person, but I'm not someone you want to have that happen to. I will get you. I will hunt you down, and I will bring a baseball bat with me!

click to expand
Figure 11.2: Photo of baseball bat

I got more replies than I could keep up with. Everyone wanted to know what they could do to help, or at least offer support. Well, everyone except one guy who just wanted to let me know how incredibly stupid he thought I was. He said he'd never have accepted a counterfeit anything. But I think a 102:1 great-person-to jerk ratio is pretty good. Several people living in Chicago offered their assistance, be it in gathering information or even forming a tough guy squad if necessary!

The most important reply I got was a pointer to an online PI service that does reverse lookups on cell phones (Cell Phone Magic). I was already beyond broke, but I figured $85 more wouldn't kill me. Twelve hours and $85 later, I had a name, an address, and a landline phone number for this guy. The name and his AOL e-mail were eerily close; actually, with a last name like his, it would be pretty weird if it didn't match up. I couldn't believe it. A Chicago resident named Christmas had just ruined my Christmas! I expected William Faulkner to come popping out of the pantry at any moment and laugh at me.

I was now ready to call the police. I called the Chicago police department and filed a report. I gave the operator all of my information, including Mr. Christmas' real name and address. "A detective will contact you within one to two weeks. Thank you." One to two weeks?!? I found this guy. I'd done all the work already! All they had to do was go pick him up. I'd even gone ahead and called FedEx and spoken to the Chicago station manager, and was assured that the driver would cooperate in identifying this guy if necessary. All they had to do was pick him up. In one to two weeks he could be gone. And all the while my precious PowerBook was being used by somebody completely undeserving of a Mac! I know in my heart that Christmas is really a PC guy.

I was furious that the Chicago PD wasn't going to do anything about this. If they were anything like the New Orleans PD, one to two weeks was likely to turn into never! I figured I'd call Mr. Christmas myself. Let him know I was going to give him a chance to fix this and, I thought, maybe at least scare him. Let him know he was dealing with someone who would track him down no matter what, even if I had to make a deal with the Prince of Darkness to do it. Mr. Christmas said he didn't even know what e-mail was. Obviously a PC user !

I kept checking the message boards. Maybe someone would have a better idea. I called the local FBI field office. Agent Jones was very understanding, but let me know that even though this crossed state lines, the field office didn't take anything involving less than $5000. "Try the Chicago PD."

I kept everyone on the Mac boards updated as best I could. On Tuesday I got a useful reply: "Try the Secret Service; counterfeiting is their jurisdiction." I made my way to the under-renovation Federal Building here in New Orleans. After walking down several dark, scary hallways I found myself at the door of Agent Keith L. Keith came out and heard my case. I had brought copies of all the e- mails between myself and Steve M./Paul S./Mr. Christmas, a copy of the check, and the call journal I had started keeping. Agent L. told me the same thing the FBI did. "It falls under our jurisdiction, but we can't take the case." He wanted to let me know that he really felt for me. Thanks! I left the office determined to call and bother him and the Chicago PD every day for the rest of my life, or at least until Christmas was behind bars.

Finals were fast approaching. It's not very easy to concentrate on school when all you can think is that all of your student loans for the next semester are going to cover this counterfeit check. That, and the fact that some grubby criminal has your PowerBook. Tuesday night I got an e-mail from someone who had seen my story posted on O'Grady's PowerPage, a PowerBook enthusiasts ' site. George D. had seen the story and thought it sounded eerily similar to his. I called him, we compared notes, and turns out it was the same guy! George forwarded me all of his e-mails. Everything was the same, word for word. It was like Mr. Christmas just copied and pasted and magically made money. George was in it worse than I was, though, and he had completely given up. He was out $6000 and two computers. He also let me know that there were more victims. He'd talked to at least three other people who had been taken by the same guy, all of whom had just given up. I was not going to give up! That night I dreamed of Mr. Christmas and a baseball bat, some duct tape, and roofing nails .

Wednesday morning I decided I was going to Chicago. I set up another eBay auction under my girlfriend's account, this time for the same computer but from a different city. Three hours later, lo and behold, I received an e-mail from eBay user xxxxxx55 (the same one) asking me if I'd like to sell the computer right now for $2500. Oh yes, I'd love to sell the computer; I'll even be there when it gets delivered to make sure it gets "set up properly."

He e-mailed me a new address and phone number, and the phone number again traced back to the same address for Mr. Christmas. I called the Secret Service and the Chicago PD, pleading; all they had to do was be there when FedEx dropped off the package. It was a guaranteed hit. He'd have another counterfeit cashier's check; all they'd have to do was arrest him! "Sorry, Detective McDonaugh will be out until next Wednesday. Can I take a message?" Fine, if the cops won't do it, I decided I'd just Price-line a ticket and be waiting next door when it got dropped off. So I'd know what kind of neighborhood I was looking at, I asked for help again in the Mac boards. Two Chicago residents replied, and the next morning, courtesy of Tim, I had 23 pictures of the house, the cars in the driveway (with license plate numbers) and the neighborhood. I started planning my trip. I decided I'd leave on Saturday, have the package delivered on Monday, and make it back just in time to screw up on all my finals!

On Friday, in preparation for my trip to Chicago, I mapped the address for Mr. Christmas to see how close it was. As I looked at the map, it hit me. The address wasn't in Chicago. It was in a suburb, Markham. I Googled for the Markham police, and 5 minutes later was talking to a very enthusiastic Sergeant K. I had hit the jackpot ! The drop was outside of Chicago jurisdiction and therefore outside of their inattentiveness as well. Sergeant K. informed me he loved this kind of thing and even had a UPS and FedEx uniform ready. He'd call FedEx and they would set it up for Tuesday. I was certain I was dreaming. After talking to two detectives in Chicago, an FBI field agent, an agent in the New Orleans field office of the Secret Service, an agent with the LA. Secret Service and having a conference call with a large group of agents from the Chicago Secret Service, I finally was getting somewhere! And I didn't even have to stand on someone's doorstep with a baseball bat to do it.

I spent the entire weekend on pins and needles . What if Mr. Christmas figured something out between now and Tuesday? All would be lost. I wouldn't even get the chance to confront him on my own. On Monday I spoke with Sergeant K. to make sure everything was ready to go. I had sent him a package with all of my documentation (he didn't have e-mail), and I tried to explain what all the e-mail meant as best I could. He had worked everything out with FedEx, and they were set for the delivery on Tuesday.

I called my brother in Nashville and had him send the package. I set everything up to come from there so Mr. Christmas wouldn't get suspicious. I could barely sleep Monday night. All I could think about was something going wrong and my only chance at getting this guy being missed. I wanted to update everyone on the Mac boards, but I had to keep it quiet until I knew something was going to happen.

Tuesday afternoon Sergeant K. called. They had tried the delivery but no one was home. I wanted to scream. The board users kept posting how the suspense was driving them nuts. Well, it was going to give me an aneurysm. A million possibilities went through my head. Maybe he had somebody working at FedEx who tipped him off? Maybe I worded something in one of my e-mails a little off? Sergeant K. called me back to let me know they would try the delivery again the next day. He also wanted to let me know that they had intercepted another package that was being sent to the same address. Looks like he'd already struck again! Thankfully, the lady from New York would get her computer back. He also told me that he was definitely going to keep pursuing this, and that, oddly enough, the address I'd given him was also related to another fraud case; this one much bigger (hundreds of thousands) and involving a certain Chicago franchise I won't mention. So maybe I had led them to something bigger than just another small-time counterfeiter.

I had finals all day. I'm a 4.0 honors student. I'd had a 4.0 all semester, but I wasn't sure I'd keep it after that day. I couldn't sleep the night before. All I could think about was Mr. Christmas and the delivery. I couldn't study either. So I winged it. I called Sergeant K. at 2:45. He told me he was on his way back to the house. They'd already made the delivery and arrested the guy. He had more than $10,000 in counterfeit cashier's checks waiting for deliveries.

When will criminals learn? You just shouldn't mess with Mac people! Here are the sites with great users that helped me out. You can sign up for the forums and read all about this as it was going on.

  • www.macrumor.com

  • www.macnn.com

  • www.thinksecret.com

  • www.powerpage.org

  • www.whitepages.com

  • www.fonefinder.com

  • http://www.bethanyrayne.com/clcellmagic.htm

click to expand
Figure 11.3: Smith news article with picture



Invasion of Privacy. Big Brother and the Company Hackers
Invasion of Privacy! Big Brother and the Company Hackers
ISBN: 1592000436
EAN: 2147483647
Year: 2004
Pages: 135
Authors: Michael Weber

flylib.com © 2008-2017.
If you may any questions please contact us: flylib@qtcs.net