Sinisterly
SE Fraud Detecting Software - Printable Version

+- Sinisterly (https://sinister.li)
+-- Forum: Hacking (https://sinister.li/Forum-Hacking)
+--- Forum: Social Engineering (https://sinister.li/Forum-Social-Engineering)
+--- Thread: SE Fraud Detecting Software (/Thread-SE-Fraud-Detecting-Software)

Pages: 1 2


SE Fraud Detecting Software - Waifu - 06-11-2021

Hello all,

I came across and article when I was reading through mothereds' blog. I found it extremely interesting but at the same time scary for the future of SE. This company is called Kount, in which specializes in preventing the widely known "refunding" methods across retailers and sellers. Not only that, this company uses AI in order to fingerprint the user who is committing such deceitful actions. To add more, this AI can distribute a users fraudulent refund information to many other companies using their services.

Here is the article link: https://kount.com/blog/what-is-refund-fraud/

Here is what they state:
Quote:How to prevent eCommerce refund fraud
1. Implement a fraud prevention solution that uses AI and machine learning
Kount Command is the predominant fraud prevention software, maintaining a variety of strategies for detecting eCommerce refund fraud. From account creation to login and checkout, Kounts Identity Trust Global NetworkTM analyzes billions of identifiers to establish real-time links between identity elements and return identity trust decisions. Knowing more about these identity trust elements can help merchants and fraud teams determine when someone is seeking a legitimate refund.

Refund Fraud Stats
Kount can add identity elements  like shipping addresses, payment tokens, and email addresses  for customers who request refunds often to a grey list, Harrison explained. There's a lot of flexibility, so they can understand more about each transaction before they ship new orders.

Furthermore, Kount's AI and machine learning informs refund data. If one merchant declines a purchase because the bad actors identity elements are associated with a high volume of refunds, that information informs other parts of Kount's network. When that bad actor goes to another merchant for a refund, machine learning takes those likely fraudulent refunds into account.

Are you guys afraid of these companies and how they are catching up to us?
Do you really think this will be implemented?
Do you think what they are doing is efficient and suffice for this manner?
Will their what-so called "AI" really be able to detect something that is for ex: stated as "lost"?

I would really love to hear your guy's opinion on this and if you think that this company and/or other companies similar to it will detect such fraudulent things as stated in the beginning.


RE: SE Fraud Detecting Software - mothered - 06-11-2021

For the reasons stated In my blog, the knowledge of the article's author Is limited.

His method abbreviations suggest he's copied the work of others, namely due to his translation of their objective Is (for the most part) not consistent with how company manipulation & exploitation operates as a whole.

Quote:Are you guys afraid of these companies and how they are catching up to us?
It's only a matter of time before companies realize they've been deceived.

Quote:AI can distribute a users fraudulent refund information to many other companies using their services.
That's about as far as It will go.

There's too many variables for an AI to detect each and every SEing event In Its manipulated form.


RE: SE Fraud Detecting Software - Waifu - 06-11-2021

(06-11-2021, 06:00 AM)mothered Wrote: For the reasons stated In my blog, the knowledge of the article's author Is limited.

His method abbreviations suggest he's copied the work of others, namely due to his translation of their objective Is (for the most part) not consistent with how company manipulation & exploitation operates as a whole.

Quote:Are you guys afraid of these companies and how they are catching up to us?
It's only a matter of time before companies realize they've been deceived.

Quote:AI can distribute a users fraudulent refund information to many other companies using their services.
That's about as far as It will go.

There's too many variables for an AI to detect each and every SEing event In Its manipulated form.

Definitely. I think what they missed out on is that we can create multiple email addresses, burner phones, use vpns, and finally leave a parcel in a drop address. This is a way that can totally defeat the purpose of this AI as it cannot read detect who you are. The AI can only detect your fraudulent activities through accounts with similar emails, names, and probably IP addresses too. Moreover, the AI cannot differentiate between a normal customer and an SE'r who is using them for proprietary gain - hence why they are collecting data on these type of activities to limit such things from happening again. The SE methods that include EB, DNA, PEB, and LIT can all be legitimate reasons to what has occurred to a customer during package arrival/retrieval. Therefore, as you stated this AI can only go as far as:
Quote:distributing a users fraudulent refund information to many other companies using their services



RE: SE Fraud Detecting Software - mothered - 06-11-2021

(06-11-2021, 06:35 AM)Stevenkhandani Wrote: Definitely. I think what they missed out on is that we can create multiple email addresses, burner phones, use vpns, and finally leave a parcel in a drop address. This is a way that can totally defeat the purpose of this AI as it cannot read detect who you are. The AI can only detect your fraudulent activities through accounts with similar emails, names, and probably IP addresses too. Moreover, the AI cannot differentiate between a normal customer and an SE'r who is using them for proprietary gain - hence why they are collecting data on these type of activities to limit such things from happening again. The SE methods that include EB, DNA, PEB, and LIT can all be legitimate reasons to what has occurred to a customer during package arrival/retrieval.
You've summed It up very well, which I've summarized In my previous post as per below:
Quote:There's too many variables for an AI to detect each and every SEing event In Its manipulated form.

The problem Is, the author of the article Is a "data analyst" who's trying to speak Intelligently about "social engineering" In the mentioned capacity.

There's a huge difference between the two and after first reading his comments and the context of how they're worded, I can confidently say that he has very little to no experience In the SEing sector.  Analyzing Is one thing, having years of experience under your belt by social engineering entities on every scale, allows you to discuss matters based on every event you've been through.

As such, advice, Implementations, recommendations and so forth, can be provided on "first-hand experience" and not what you've "analyzed".


RE: SE Fraud Detecting Software - Waifu - 06-11-2021

(06-11-2021, 10:48 AM)mothered Wrote:
(06-11-2021, 06:35 AM)Stevenkhandani Wrote: Definitely. I think what they missed out on is that we can create multiple email addresses, burner phones, use vpns, and finally leave a parcel in a drop address. This is a way that can totally defeat the purpose of this AI as it cannot read detect who you are. The AI can only detect your fraudulent activities through accounts with similar emails, names, and probably IP addresses too. Moreover, the AI cannot differentiate between a normal customer and an SE'r who is using them for proprietary gain - hence why they are collecting data on these type of activities to limit such things from happening again. The SE methods that include EB, DNA, PEB, and LIT can all be legitimate reasons to what has occurred to a customer during package arrival/retrieval.
You've summed It up very well, which I've summarized In my previous post as per below:
Quote:There's too many variables for an AI to detect each and every SEing event In Its manipulated form.

The problem Is, the author of the article Is a "data analyst" who's trying to speak Intelligently about "social engineering" In the mentioned capacity.

There's a huge difference between the two and after first reading his comments and the context of how they're worded, I can confidently say that he has very little to no experience In the SEing sector.  Analyzing Is one thing, having years of experience under your belt by social engineering entities on every scale, allows you to discuss matters based on every event you've been through.

As such, advice, Implementations, recommendations and so forth, can be provided on "first-hand experience" and not what you've "analyzed".

Loved the response. Well said. And I totally agree with you that the author has little to no knowledge about the art of social engineering. Social engineering will still live on for light years to come unless all of humanity ceases to exist. Artificial Intelligence is extremely bogus when it comes to dealing with real-time human emotion - it cannot interpret but gather data in such a way that predicts an individuals activity. This can be far misleading considering that the AI is not 100% efficient with predicting human emotions. Thanks for your response Smile


RE: SE Fraud Detecting Software - mothered - 06-12-2021

(06-11-2021, 11:29 PM)Stevenkhandani Wrote: Social engineering will still live on for light years to come unless all of humanity ceases to exist.
Absolutely.

Due to companies tightening their claims management process, Inclusive of training staff to Identify the warning signs of an attack vector, methods will Inevitably cease to serve their purpose, but new methods will continue to evolve. Social engineers will always manipulate a way to achieve a certain objective- It's a characteristic/attribute that cannot be stopped.


RE: SE Fraud Detecting Software - Waifu - 06-12-2021

(06-12-2021, 04:06 AM)mothered Wrote:
(06-11-2021, 11:29 PM)Stevenkhandani Wrote: Social engineering will still live on for light years to come unless all of humanity ceases to exist.
Absolutely.

Due to companies tightening their claims management process, Inclusive of training staff to Identify the warning signs of an attack vector, methods will Inevitably cease to serve their purpose, but new methods will continue to evolve. Social engineers will always manipulate a way to achieve a certain objective- It's a characteristic/attribute that cannot be stopped.

Wow, very well said once again. If I were to fear one person in this world, I'd have to fear you the most. Even knowing that you have been in the SE field for decades, I would probably still fall for your manipulative actions against me. Just please don't do that to me, I'm still young and wanting to learn more about the world of SE. Though, I will carry on your legacy Smile


RE: SE Fraud Detecting Software - mothered - 06-12-2021

(06-12-2021, 07:54 AM)Stevenkhandani Wrote:
(06-12-2021, 04:06 AM)mothered Wrote:
(06-11-2021, 11:29 PM)Stevenkhandani Wrote: Social engineering will still live on for light years to come unless all of humanity ceases to exist.
Absolutely.

Due to companies tightening their claims management process, Inclusive of training staff to Identify the warning signs of an attack vector, methods will Inevitably cease to serve their purpose, but new methods will continue to evolve. Social engineers will always manipulate a way to achieve a certain objective- It's a characteristic/attribute that cannot be stopped.

Wow, very well said once again. If I were to fear one person in this world, I'd have to fear you the most. Even knowing that you have been in the SE field for decades, I would probably still fall for your manipulative actions against me. Just please don't do that to me, I'm still young and wanting to learn more about the world of SE. Though, I will carry on your legacy Smile
Appreciate your kind words.

I'd never target anyone on a personal level. I've stated that many times In my blog, and I do hope my readers can adapt to the same principle.


RE: SE Fraud Detecting Software - Waifu - 06-12-2021

(06-12-2021, 10:06 AM)mothered Wrote:
(06-12-2021, 07:54 AM)Stevenkhandani Wrote:
(06-12-2021, 04:06 AM)mothered Wrote: Absolutely.

Due to companies tightening their claims management process, Inclusive of training staff to Identify the warning signs of an attack vector, methods will Inevitably cease to serve their purpose, but new methods will continue to evolve. Social engineers will always manipulate a way to achieve a certain objective- It's a characteristic/attribute that cannot be stopped.

Wow, very well said once again. If I were to fear one person in this world, I'd have to fear you the most. Even knowing that you have been in the SE field for decades, I would probably still fall for your manipulative actions against me. Just please don't do that to me, I'm still young and wanting to learn more about the world of SE. Though, I will carry on your legacy Smile
Appreciate your kind words.

I'd never target anyone on a personal level. I've stated that many times In my blog, and I do hope my readers can adapt to the same principle.

I can tell that you have put a lot of dedication and effort in your blogs. Quite literally, everything from the ground up is just unbelievable. Your writing style, explanations, formatting, and narrative is straight up amazing. I cannot fathom to thank you enough for the tools and things you provide within your blog. I have been reading your blogs on and off and learned things that I would never have thought of. It just gave me a sense of how the world of SEing works - so I got addicted. Many people would have sold this information for thousands of dollars. Thank you for putting out your long extensive research out there instead of selling your thoughts.

Now let me be your apprentice and name me the 10 testaments of SE.


RE: SE Fraud Detecting Software - mothered - 06-12-2021

(06-12-2021, 12:45 PM)Stevenkhandani Wrote:
(06-12-2021, 10:06 AM)mothered Wrote:
(06-12-2021, 07:54 AM)Stevenkhandani Wrote: Wow, very well said once again. If I were to fear one person in this world, I'd have to fear you the most. Even knowing that you have been in the SE field for decades, I would probably still fall for your manipulative actions against me. Just please don't do that to me, I'm still young and wanting to learn more about the world of SE. Though, I will carry on your legacy Smile
Appreciate your kind words.

I'd never target anyone on a personal level. I've stated that many times In my blog, and I do hope my readers can adapt to the same principle.

I can tell that you have put a lot of dedication and effort in your blogs. Quite literally, everything from the ground up is just unbelievable. Your writing style, explanations, formatting, and narrative is straight up amazing. I cannot fathom to thank you enough for the tools and things you provide within your blog. I have been reading your blogs on and off and learned things that I would never have thought of. It just gave me a sense of how the world of SEing works - so I got addicted. Many people would have sold this information for thousands of dollars. Thank you for putting out your long extensive research out there instead of selling your thoughts.

Now let me be your apprentice and name me the 10 testaments of SE.
I truly thank you for everything mentioned above.

There's a lot that happens behind the scenes with each and every article on my blog, one of which Is my undivided attention to process every minute detail to Its fullest potential. All In all, I'm glad you're benefiting from my guides and on-topic of this board, I look forward to reading what you have planned with your forthcoming SEs.