Drops for stuff: An analysis of reshipping mule scams

Credit card fraud has seen rampant increase in the past years, as customers use credit cards and similar financial instruments frequently. Both online and brick-and-mortar outfits repeatedly fall victim to cybercriminals who siphon off credit card information in bulk. Despite the many and creative ways that attackers use to steal and trade credit card information, the stolen information can rarely be used to withdraw money directly, due to protection mechanisms such as PINs and cash advance limits. As such, cybercriminals have had to devise more advanced monetization schemes towork around the current restrictions. One monetization scheme that has been steadily gaining traction are reshipping scams. In such scams, cybercriminals purchase high-value or highly-demanded products from online merchants using stolen payment instruments, and then ship the items to a credulous citizen. This person, who has been recruited by the scammer under the guise of "work-from-home" opportunities, then forwards the received products to the cybercriminals, most of whom are located overseas. Once the goods reach the cybercriminals, they are then resold on the black market for an illicit profit. Due to the intricacies of this kind of scam, it is exceedingly difficult to trace, stop, and return shipments, which is why reshipping scams have become a common means for miscreants to turn stolen credit cards into cash. In this paper, we report on the first large-scale analysis of reshipping scams, based on information that we obtained from multiple reshipping scam websites. We provide insights into the underground economy behind reshipping scams, such as the relationships among the various actors involved, the market size of this kind of scam, and the associated operational churn. We find that there exist prolific reshipping scam operations, with one having shipped nearly 6,000 packages in just 9 months of operation, exceeding 7.3 million US dollars in yearly revenue, contributing to an overall reshipping scam revenue of an estimated 1.8 billion US dollars per year. Finally, we propose possible approaches to intervene and disrupt reshipping scam services

Europa im Geflecht der Welt

Der Band dokumentiert Vorträge und Workshops der internationalen Abschlusstagung des DFG-Schwerpunktprogrammes 1173 „Integration und Desintegration der Kulturen im europäischen Mittelalter“, die Ende Mai 2011 in Berlin stattgefunden hat. Bei der Arbeit im Schwerpunktprogramm hatte sich gezeigt, wie schwierig es ist, Europa im geographischen und historischen Sinne vom Mittelmeerraum mit Nordafrika und Vorder¬asien zu trennen. Daher wurden die Grenzen des mittelalterlichen Europa bewusst überschritten und auch die Geschichte weiter entfernter Länder in den Blick genommen. Als thematischer Schwerpunkt boten sich in diesem Zusammenhang Migrationen an. Migrationen sind ja ein globales Phäno¬men, das an allen Orten und zu allen Zeiten immer wieder die Geschichte der Menschheit prägt und dabei unvermeidlich – selbst in der scheinbaren Isolation einer „Diaspora“ oder „Parallelgesellschaft“ – zu transkulturellen Verflechtungen führt. Fremde und einheimische Gruppen und Individuen werden in neue soziale Umgebungen gerückt und Kontakte oder Konflikte zwischen ihnen erzeugt. Wo aber das jeweilige Leben gegeneinander abgeschottet werden soll, verliert Kultur ihre Inno¬vations¬kraft und versteinert die Gesellschaft. Mit dem Sachthema der „Migrationen“ und mit einem Blick weit über Europa hinaus, bis nach Amerika, Japan und ins südliche Afrika, wird der Übergang von einer eurozentrierten Mittelalterforschung zu einer transdisziplinären Mediävistik in globalen Zusammenhängen markiert

Out of Sight, Out of Mind: Detecting Orphaned Web Pages at Internet-Scale

Security misconfigurations and neglected updates commonly lead to systems being vulnerable. Especially in the context of websites, we often find pages that were forgotten, that is, they were left online after they served their purpose and never updated thereafter. In this paper, we introduce new methodology to detect such forgotten or orphaned web pages. We combine historic data from the Internet Archive with active measurements to identify pages no longer reachable via a path from the index page, yet stay accessible through their specific URL. We show the efficacy of our approach and the real-world relevance of orphaned web-pages by applying it to a sample of 100,000 domains from the Tranco Top 1M. Leveraging our methodology, we find 1,953 pages on 907 unique domains that are orphaned, some of which are 20 years old. Analyzing their security posture, we find that these pages are significantly ((p < 0.01) using (χ2)) more likely to be vulnerable to cross-site scripting (XSS) and SQL injection (SQLi) vulnerabilities than maintained pages. In fact, orphaned pages are almost ten times as likely to suffer from XSS (19.3%) than maintained pages from a random Internet crawl (2.0%), and maintained pages of websites with some orphans are almost three times as vulnerable (5.9%). Concerning SQLi, maintained pages on websites with some orphans are almost as vulnerable (9.5%) as orphans (10.8%), and both are significantly more likely to be vulnerable than other maintained pages (2.7%). Overall, we see a clear hierarchy: Orphaned pages are the most vulnerable, followed by maintained pages on websites with orphans, with fully maintained sites being least vulnerable. We share an open source implementation of our methodology to enable the reproduction and application of our results in practice.Information and Communication Technolog

Europeização e/ou africanização da Espanha Medieval: diversidade e unidade cultural européia em debate Europeanization and / or africanization of Medieval Spain: european cultural diversity and unity in discussion

Os conflitos políticos e sociais dos últimos anos na Europa, como os com a imigração e o terrorismo, orientam muitas questões levantadas pelas ciências humanas na atualidade. No que se refere à medievalística, muitas obras e projetos europeus apresentam a discussão em torno da diversidade cultural européia, a qual pode ser fundamentada desde a Idade Média através do convívio e trocas culturais entre cristão, judeus e muçulmanos. No centro destas discussões, está a crítica à idéia de centro e periferia dentro da própria Europa e no mundo, além da reflexão sobre conceitos de europeização e africanização, utilizados pela historiografia européia desde a primeira metade do século XX até poucos anos atrás. Neste artigo, serão apresentadas, à luz da Nova História Cultural Alemã (Neue Kulturgeschichte), algumas críticas aos conceitos de europeização, africanização, centro, periferia e unidade cultural na Idade Média européia. Questões estas que acaloram os debates na Alemanha atual.<br>Political and social conflicts during recent years in Europe - such as immigration and terrorism - have guided humanities issues today. Regarding Middle Age research, many works and projects present a debate on European cultural diversity, which lay the foundations since the Middle Ages through interaction and cultural exchanges between Christians, Jews and Muslims. Within the discussion, is the criticism to the idea of center and periphery within Europe itself and the world, as well as the consideration of concepts such as europeanization and africanization, used by European historiography, from the first half of the twentieth century until a few years ago. This article presents criticism to the concepts of europeanization, africanization, center, periphery, and cultural unity in the Middle Ages, in light of the New German Cultural History (Neue Kulturgeschichte), issues that inflame the debate in Germany today