<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Es Tea Double Eye &#187; security</title>
	<atom:link href="http://stii.co.za/tag/security/feed/" rel="self" type="application/rss+xml" />
	<link>http://stii.co.za</link>
	<description>You&#039;re never too old for a happy childhood</description>
	<lastBuildDate>Fri, 19 Aug 2011 02:20:18 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.2.1</generator>
	<atom:link rel='hub' href='http://stii.co.za/?pushpress=hub'/>
		<item>
		<title>and so Homemark hits us&#8230;</title>
		<link>http://stii.co.za/general/and-so-homemark-hits-us/</link>
		<comments>http://stii.co.za/general/and-so-homemark-hits-us/#comments</comments>
		<pubDate>Mon, 30 Mar 2009 08:32:11 +0000</pubDate>
		<dc:creator>Stii</dc:creator>
				<category><![CDATA[General]]></category>
		<category><![CDATA[fraud]]></category>
		<category><![CDATA[homemark]]></category>
		<category><![CDATA[security]]></category>

		<guid isPermaLink="false">http://stii.co.za/?p=550</guid>
		<description><![CDATA[You&#8217;ve probably heard this a lot lately, since Homemark came to Twitter. There are horror stories of how Homemark abuse customers. At first I thought what a load of bullshit! Nobody can simply do that and get away with it, right? WRONG! They are ruthless. Here is what happened to us. We got a pamphlet [...]]]></description>
			<content:encoded><![CDATA[<p><img src="http://stii.co.za/wp-content/uploads/2009/02/homemark.png" alt="homemark" title="homemark" width="206" height="169" class="alignright size-full wp-image-409" />You&#8217;ve probably heard this a lot lately, since <a href="http://stii.co.za/twitter/homemark-abuse-is-funny-but-is-it-significant/">Homemark</a> came to <a href="http://stii.co.za/tag/twitter">Twitter</a>. There are horror stories of how <strong>Homemark</strong> abuse customers.</p>
<p>At first I thought what a load of bullshit! Nobody can simply do that and get away with it, right? <strong>WRONG</strong>! They are ruthless. Here is what happened to us.</p>
<p>We got a pamphlet thing with our <strong>Multichoice</strong> magazine about last year some time. This pamphlet said you can get one of those crappy blow-up mattresses for free if you order it. Since we do get visitors often and often do need these kind of things, my wife decided to go for it. At the same time, she saw they advertised some ceramic baking dishes and ordered that, which she paid for by credit card.</p>
<p>Last week, out of the blue, her <strong>credit card gets debited for R348.95 by Homemark</strong>. No explanation. No details whatsoever. Nothing. Now, I&#8217;m not one to jump to conclusions, so we tried to contact them and find out whether someone used our card fraudulently. Someone could have skimmed her card, as it so often does happen, and used it. HAH! We might as well have phoned <a href="http://www.hellkom.co.za">Telkom</a>. It is of NO use trying to figure out what happened.</p>
<p>We had to phone the bank, cancel the card and get a new card issued. What a bloody mission. We were requested by the bank to lay a charge of fraud with our bank, so it does sound that this happens quite frequently. Oh well, I&#8217;m not very optimistic that anything concrete will come from all this, so here is some sound advice:</p>
<h2 style="color: red">DO NOT UNDER ANY CIRCUMSTANCES DEAL WITH HOMEMARK</h2>
<p>Simple advice that will go a long way and save you plenty of trouble.   </p>
]]></content:encoded>
			<wfw:commentRss>http://stii.co.za/general/and-so-homemark-hits-us/feed/</wfw:commentRss>
		<slash:comments>3</slash:comments>
		</item>
		<item>
		<title>Yet another scammer on Bestjobs</title>
		<link>http://stii.co.za/hacking/yet-another-scammer-on-bestjobs/</link>
		<comments>http://stii.co.za/hacking/yet-another-scammer-on-bestjobs/#comments</comments>
		<pubDate>Fri, 13 Feb 2009 08:00:43 +0000</pubDate>
		<dc:creator>Stii</dc:creator>
				<category><![CDATA[Hacking]]></category>
		<category><![CDATA[best jobs]]></category>
		<category><![CDATA[bestjobs]]></category>
		<category><![CDATA[erecruitment]]></category>
		<category><![CDATA[identity theft]]></category>
		<category><![CDATA[phishing]]></category>
		<category><![CDATA[security]]></category>

		<guid isPermaLink="false">http://stii.co.za/?p=378</guid>
		<description><![CDATA[Found yet another scammer on BestJobs today. I was graced this morning with this email from Rebels Personnel. Here is the email: A very good day to you Stii Pretorius, We have received your response to our advertisement, but now need you to please forward the following documents to us, via fax: 0866523502 ID document [...]]]></description>
			<content:encoded><![CDATA[<p>Found yet another scammer on <a href="http://stii.co.za/hacking/warning-bestjobscoza-is-a-breeding-ground-for-identity-thieves/">BestJobs</a> today. I was graced this morning with this email from <a href="http://stii.co.za/hacking/warning-bestjobscoza-is-a-breeding-ground-for-identity-thieves/">Rebels Personnel</a>. Here is the email:</p>
<blockquote><p>
A very good day to you Stii Pretorius,</p>
<p>We have received your response to our advertisement, but now need you to please forward the following documents to us, via fax: 0866523502</p>
<p>ID document<br />
CV<br />
Reference letters (if you have)<br />
Certificates (if applicable)</p>
<p>Please try your best to forward these documents to our fax number as soon as possible.<br />
We cannot process your application without these documents.</p>
<p>Kind Regards</p>
<p>Liane<br />
Pre-Screening<br />
Recruitment Dept.<br />
<strong>Rebels Personnel</strong>
</p></blockquote>
<p>As with <a href="http://stii.co.za/hacking/warning-bestjobscoza-is-a-breeding-ground-for-identity-thieves/">Aggies Recruitment Services</a>, it is sent from a domain called rebels.com which is co-incidentally the same name as the supposedly recruiter Rebels Personnel. If you visit rebels.com, you get to exactly the same free email account service as if you would visit aggies.com.</p>
<p>I&#8217;ve sent my post yesterday to <a href="http://stii.co.za/hacking/warning-bestjobscoza-is-a-breeding-ground-for-identity-thieves/">Bestjobs</a>, and to date heard nothing from them. </p>
]]></content:encoded>
			<wfw:commentRss>http://stii.co.za/hacking/yet-another-scammer-on-bestjobs/feed/</wfw:commentRss>
		<slash:comments>34</slash:comments>
		</item>
		<item>
		<title>Nissan.co.za got hacked&#8230;</title>
		<link>http://stii.co.za/hacking/nissancoza-got-hacked/</link>
		<comments>http://stii.co.za/hacking/nissancoza-got-hacked/#comments</comments>
		<pubDate>Mon, 19 Jan 2009 21:32:45 +0000</pubDate>
		<dc:creator>Stii</dc:creator>
				<category><![CDATA[Hacking]]></category>
		<category><![CDATA[capetown]]></category>
		<category><![CDATA[nissan]]></category>
		<category><![CDATA[security]]></category>

		<guid isPermaLink="false">http://stii.co.za/?p=251</guid>
		<description><![CDATA[I&#8217;m out on a car hunt and quite fancy the Nissan X-Trail. I went to the Nissan South Africa website to locate the dealer in Cape Town, but their search function doesn&#8217;t work. When I select Western Cape, type in Cape Town and hit search, it finds nothing. After trying various combos I thought I&#8217;ll [...]]]></description>
			<content:encoded><![CDATA[<p>I&#8217;m out on a car hunt and quite fancy the <strong>Nissan X-Trail</strong>. I went to the <strong>Nissan South Africa</strong> website to locate the dealer in <strong>Cape Town</strong>, but their search function doesn&#8217;t work. When I select <strong>Western Cape</strong>, type in <strong>Cape Town</strong> and hit search, it finds nothing. After trying various combos I thought I&#8217;ll leave all search criteria blank and hit the search button. </p>
<p>It worked! Only, not quite as expected&#8230; Every dealer has the name:</p>
<h3>Hacked by m0sted and DrakuLa İsrael and usa stop No War</h3>
<p>Here is a screen shot:</p>
<p><img src="http://stii.co.za/wp-content/uploads/2009/01/picture-4-400x199.png" alt="picture-4" title="nissan hacked" width="400" height="199" class="aligncenter size-medium wp-image-252" /></p>
<p>I wanted to notify <strong>Nissan</strong>, but oddly enough, the only contact details for <strong>Nissan</strong> was the dealers. Which are coincidentally all called <strong>m0sted</strong> and <strong>DrakuLa</strong>. Hmmm. They better do something as I have a strong suspicion that this might only be the beginning of something worse to come. Oh, and <strong>Nissan</strong>, at least put some contact form or head office phone number or email address on your site so we can notify you in cases like these.</p>
<p>What was even more weird was that when I went to <strong>whois.co.za</strong> to find some form of contact, I saw that the technical contact was <strong>Netmaster</strong> from <strong>Infovan</strong>. Cool, let me go to <strong>www.infovan.co.za</strong>. ACK! This is what&#8217;s on the <strong>Infovan</strong> site&#8230; very strange&#8230; </p>
<p><img src="http://stii.co.za/wp-content/uploads/2009/01/picture-5.png" alt="picture-5" title="Infovan" width="261" height="292" class="aligncenter size-full wp-image-254" /></p>
<p>Anyways, all good, emailed the addresses found on <strong>whois.co.za</strong> and if they have not responded by tomorrow I&#8217;ll give them a tinkle.</p>
<p>If you want to check for yourself, here is what you do:</p>
<ol>
<li>Go to: <strong>http://www.nissan.co.za/buying_dealers.asp</strong></li>
<li>in the left hand column, don&#8217;t make any selections or enter any criteria</li>
<li>hit enter&#8230;</li>
</ol>
]]></content:encoded>
			<wfw:commentRss>http://stii.co.za/hacking/nissancoza-got-hacked/feed/</wfw:commentRss>
		<slash:comments>14</slash:comments>
		</item>
	</channel>
</rss>

