,
5 tweets,
2 min read
Read on Twitter
I thought I’d recap some fun that @c0ldbr3w & I had yesterday interacting with a fraudster. I posted to Craigslist an add for furniture that we’re selling. I then received a text from a fraudster who asked me to provide the code that he just sent to “prove” I’m a real person. /1
The fraudster used my email address & phone # to reset my Google pw & Google sent me a 2 factor authentication code to verify that I made the request. He wanted me to “share the code” with him. This type of social engineering methodology via text message is known as SMiShing. /2
Of course he didn’t know that the sellers of a closet tower/book case happened to include a data privacy expert (me) & ethical hacker (@c0ldbr3w). 😂 So, we crafted a plan to play around with this asshat. He asked for a code, so we gave him a 6 digit code. 
When the code didn’t work, we dropped this little nugget, the U.S. Criminal Code for wire fraud. We received no more communication from him, but we both had a belly laugh! /end
Partners who scheme to annoy fraudsters, phishers, SMiShers, creeps, & Internet trolls are the best new trend! #TrollflixAndChill
