BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//pretalx//pretalx.com//bsides-cymru-2024//talk//8SYSTT
BEGIN:VTIMEZONE
TZID:Europe/London
BEGIN:DAYLIGHT
DTSTART:20230428T000000
TZNAME:BST
TZOFFSETFROM:+0100
TZOFFSETTO:+0100
END:DAYLIGHT
BEGIN:STANDARD
DTSTART:20231029T020000
RDATE:20241027T020000
TZNAME:GMT
TZOFFSETFROM:+0100
TZOFFSETTO:+0000
END:STANDARD
BEGIN:DAYLIGHT
DTSTART:20240331T020000
RDATE:20250330T020000
TZNAME:BST
TZOFFSETFROM:+0000
TZOFFSETTO:+0100
END:DAYLIGHT
END:VTIMEZONE
BEGIN:VEVENT
SUMMARY:Hurr Durr\, He Wrote: That awesome time I trolled the stupidest sc
 ammer in the world - Matt Wixey
DTSTART;TZID=Europe/London:20240427T100500
DTEND;TZID=Europe/London:20240427T105000
DTSTAMP:20260812T141917Z
UID:pretalx-bsides-cymru-2024-8SYSTT@pretalx.com
DESCRIPTION:What do you get when you cross a bored security researcher wit
 h a gullible scammer? You get this talk\, of course – an epic dive into 
 weeks of trolling\, lulz\, and horrendous OPSEC.\n\nI’ve been trolling s
 cammers as a hobby for a while now\, amusing myself by replying to their e
 mail lures with deliberately outrageous scenarios and turns-of-phrase. Usu
 ally\, the scammers figure out I’m on the wind-up and disengage pretty q
 uickly.\n\nNot this time.\n\nJoin me as we walk through a complex\, long-t
 erm email scam from start to finish – a journey featuring a ‘solicitor
 ’ who out of the goodness of his heart wanted to help me claim an inheri
 tance worth millions\, and a ‘bank’ which was only too willing to faci
 litate this. \n\nAlong the way we’ll meet my slightly unhinged alter ego
  (the intended victim of this scam)\, and his fictional\, put-upon\, and p
 ossibly kidnapped roommate\, Tarquin Fortitude. Together they turned a sim
 ple phishing lure into a litany of trolling involving increasingly ludicro
 us personal details\, the most amateurishly-fabricated library card ever\,
  a fake bank transfer\, a giant purple envelope\, and hilarious misunderst
 andings. Every time I thought I’d gone too far – like when I asked the
  scammer to send ME money – the scammer continued to reply\, even laying
  the groundwork for a follow-up scam by telling me their son was undergoin
 g cancer treatment.\n\nBut it wasn’t all just for the lulz. As I trolled
 \, I also documented every domain\, snippet of information\, and attachmen
 t\, which provided a useful insight into how modern email scammers operate
  and the techniques and tactics they use. It also eventually resulted in m
 e obtaining some very interesting details about the scammer…\n\nIn this 
 talk I’ll tell you the story in all its gory detail\, explore some pract
 ical learning points\, and share the IOCs and TTPs I collected.
LOCATION:Main Room (Ballroom) - Track 1
URL:https://pretalx.com/bsides-cymru-2024/talk/8SYSTT/
END:VEVENT
END:VCALENDAR