Ecole d'ingénieur et centre de recherche en Sciences du numérique

Inside the SCAM jungle: A closer look at 419 scam email operations

Isacenkova, Jelena; Thonnard, Olivier; Costin, Andrei; Francillon, Aurélien; Balzarotti, Davide

EURASIP Journal on Information Security, 2014, ISSN: 1687-417X

419 scam (also referred to as Nigerian scam) is a popular form of fraud in which the fraudster tricks the victim into paying a certain amount of money under the promise of a future, larger payoff. Using a public dataset, in this paper, we study how these forms of scam campaigns are organized and evolve over time. In particular, we discuss the role of phone numbers as important identifiers to group messages together and depict the way scammers operate their campaigns. In fact, since the victim has to be able to contact the criminal, both email addresses and phone numbers need to be authentic and they are often unchanged and re-used for a long period of time. We also present in detail several examples of 419 scam campaigns, some of which last for several years -representing them in a graphical way and discussing their characteristics.

Document Doi Bibtex

Titre:Inside the SCAM jungle: A closer look at 419 scam email operations
Mots Clés:Web security, Vulnerability study, Input validation
Type:Journal
Langue:English
Ville:
Date:
Département:Sécurité numérique
Eurecom ref:4208
Copyright: © EURASIP. Personal use of this material is permitted. The definitive version of this paper was published in EURASIP Journal on Information Security, 2014, ISSN: 1687-417X and is available at : http://dx.doi.org/10.1186/1687-417X-2014-4
Bibtex: @article{EURECOM+4208, doi = {http://dx.doi.org/10.1186/1687-417X-2014-4}, year = {2014}, month = {01}, title = {{I}nside the {SCAM} jungle: {A} closer look at 419 scam email operations}, author = {{I}sacenkova, {J}elena and {T}honnard, {O}livier and {C}ostin, {A}ndrei and {F}rancillon, {A}ur{\'e}lien and {B}alzarotti, {D}avide}, journal = {{EURASIP} {J}ournal on {I}nformation {S}ecurity, 2014, {ISSN}: 1687-417{X}}, url = {http://www.eurecom.fr/publication/4208} }
Voir aussi: