Godaddy Corner Ad

Rogue Dialers - The Nets Latest Scamola!

By: Robert Palmer
Friday July 09 2004, 00:07:00
http://www.desknet.co.uk
Category: General




If recent news stories concerning worms, trojans and security exploits within Microsoft's Internet Explorer, left you feeling vulnerable, this will leave you terrified. PC's the world over are already being hit by a new breed of trojan type software called Rogue Dialers. More malevolent than most ordinary spyware, Rogue Dialers actually hijack the computer's modem and then uses it to dial-up a premium rate telephone number, racking up huge telephone charges. Many Dialers operate whilst the victim is actively surfing the Net by dropping the current connection and then performing an automatic reconnection via a premium rate number. Most scary of all, are the Dialers which connect themselves to a premium rate number while the victim is away from their machine; achieving this by detecting long periods of inactivity.

Most "infections" of Rogue Dialers are contracted by the "drive-by download" method, where-by the dialer software is automatically downloaded from a webpage without the victim ever being aware. This method of installing software onto a users PC was pioneered by the online, adult services industry as a way of putting spy and adware programs onto a customers PC without them knowing. Originally confined to adult websites, drive-by downloads of spyware used to be known as the Electronic Pox; a risk the end-user took when visiting adult websites. Of course, just like the first pop-up box, also developed by the adult industry, the rest of the Internet was soon to follow. Thanks to a glaringly obvious design flaw in Microsoft's Outlook Express, which allows emails, including those containing HTML and embedded malevolent code, to be previewed without any warning, Rogue Dialers can be placed onto a victims PC without them ever going near a website. Rogue Dialers are just the nex!
t generation of electronic misery which can be inflicted upon the end-user. Unfortunately for any victims, Rogue Dialers hit the pocket and they hit it hard!

In America, one victim of a Rogue Dialer scam racked up some $500 in charges after their modem was hijacked and a premium rate number was contacted on just six occasions. In the UK too, numerous victims have reported huge telephone charges, with some in excess of £1500 ($2800).
The consumer website, Bad Business Bureau has received over 1300 complaints from victims of this latest scam and, while this whole matter is being investigated by Federal Trade Commission in the States and by the Office of Fair Trading in the UK, scammers are already responding with new software which dials numbers in countries where trade controls are lacking.

A further blow has recently been delivered to UK based victims with announcements from the leading telecoms providers, BT and NTL, that they are "not responsible" for calls which have been made fraudulently and that customers will not be exempted from any charges incurred.

Protecting Yourself & Your Wallet
Firewalls and and anti-virus software WILL NOT provide protection against Rogue Dialer infections. The "drive-by download" method of introducing a Rogue Dialer onto a PC normally involves an ActiveX script and users are advised, at the very least, to set their browser settings to either disable ActiveX or warn of its existence. For a more professional approach to protecting your modem, StopItNow, an Australian based software company has released a specific Rogue Dialer killer which retails for just $16.95.

To avoid having a Rogue Dialer dumped onto their computer via the preview pane of Outlook Express, users may want to consider an alternative email client such as the freeware program, Eudora.


Related Links:
http://www.badbusinessbureau.com
http://www.stopitnow.com.au
http://www.ftc.gov
http://www.oftel.gov.uk
http://www.eudora.com


Viewed 5593 times.

Copyright © 2004-2007 Robert Palmer. All Rights Reserved.
Print

Add A Comment

Comments

jgandjg@tiscali.co.uk wrote:
You made no mention that people using broad band are not at risk providing that their old modem is disconnected from the phone line.
11/30/04 05:58:08
Alan Peel Shaw wrote:
Rogue diallers are illegal and by definition, fraudulent when used without the consent of the modem owner, or if you wish, the victim. A rogue dialler captures your modem, then uses it to phone premium or international numbers, and has the cost charged to the victims account. As far as I can see, there are two possible offences committed by such a scam, firstly, "Dishonestly obtaining the use of a telecommunications system with intent to avoid payment for that service"or alternatively, Obtaining by deception, a financial reward or pecuniary advantage. In either case, surely a criminal offence is committed, which should be investigated by the police, and could result in a fine, custodial sentence or both. Of course, if the culprits acted from outside the UK, and would thus be outside the jurisdiction of UK law, surely such offences would be contracry to international law and therefore subject to investigation by Interpol.

BT state they are not responsible for protecting us from such acts, for according to them, they only rent the line and if the person renting wants to stick a computer on the end of that line, then he/she must be responsible for calls dialled out from that line. I do not agree with such sentiment, if BT advertises and encourages potential customers, to not only rent a line, but to use BT as an internet service provider for narrowband and/or broadband, then by definition they have a duty of care to ensure users are in the first place advised of all dangers and scams, and in the second place, ensure victims are not made to pay for the illegal actions of criminals - NO INNOCENT PERSON SHOULD BE MADE TO FINANCE THE CRIMINAL ACTIVITIES OF ANOTHER PERSON.

I would recommend all users of ISPs, especially those that have been the victim of Rogue diallers and then made to pay for the privilege by BT, to obtain a copy of The Independent Newspaper, dated 19th March 2005, and read the article written by David Prosser, which deals with three aspects: (1)Rogue diallers (2) A current County Court Judgement case against BT, by a claimant who is disputing BTs refusal to pay refunds to thousands of people who have lost out in rogue dialler scams and (3) The fact that BT is currently investigating 80,000 complaints from customers who think they have been caught out by the scams.

There appears to be little purpose in reporting such scams to ICSTIS, for although they allegedly look into the illegal use of Premium Numbers, but not International Numbers, their involvement stops at the point of detecting the culprit and taking action against him/her, they DO NOT assist the victim to recover any losses, but merely advise taking civil court action against the villain.

It is high time that BT took a much more sympathetic attitude toward their customers who have been the subject of such scams - lets face it, there are some 80,000 of them at this time, all helping to keep BT in business, and most of whom could be foregiven if they considered BT was more interested in its bottom line than recouping the cost of such scams from the perpetrators.

I would suggest that BT take action to sort out this situation, before its customers start to vote with their feet.
03/27/05 09:50:00

Link This Article

Code:

Preview:

Rogue Dialers - The Nets Latest Scamola!