I found, in a chat where I am active, a user who was advertising his new phishing site. I flagged and kick banned the user from the chat, but I have still the impression that I should have taken more action. What do you think?
-
11I've reported the site at: safebrowsing.google.com/safebrowsing/report_phish– CerbrusApr 11, 2017 at 11:40
-
2Thank you for sharing that link I have to bookmark it.– rekireApr 11, 2017 at 11:42
-
22"Nuke him from orbit. that's the only way to be sure!" - Ellen Ripley– Drag and DropApr 11, 2017 at 11:48
-
6Not much you can do SO wise more than flagging as you did - thanks for that. The message is now deleted and right now I don't see a need for any other action. Of course - if they persist or otherwise show untoward behaviour then flag again and we'll review it.– Jon ClementsApr 11, 2017 at 11:52
-
3@JonClements, Cerbrus - together, your comments form an answer. I'd like to see the link that Cerbrus gave as an answer, so that it will be preserved here on Meta - and updated when necessary. Would either of you write this as an answer? (Obviously I could do it myself, if you want - if you don't mind me "stealing" the comments).– S.L. Barth is on codidact.comApr 11, 2017 at 12:00
-
1For a Ms report you need to use IE( Yes, the cure is worse than the disease) Click on Menu(Gears), Security, Report Unsafe Website.– Drag and DropApr 11, 2017 at 12:06
-
1@S.L.Barth no objection from me - help yourself.– Jon ClementsApr 11, 2017 at 12:07
-
5rekire, I rolled back your edit, because "a user" is correct: english.stackexchange.com/questions/105116/…– TomApr 11, 2017 at 12:15
-
7@Tom thank you for the hint, gamma is one of my weaker fields.– rekireApr 11, 2017 at 12:25
1 Answer
If you see this happen, there are two actions to take.
Flag the user, as Jon Clements points out in his comment.
When you're the Room Owner, you can also move the message to one of the trash rooms, to negate its exposure until the flag is handled.Report the site, as Cerbrus did.
To report the site to Google, go to https://safebrowsing.google.com/safebrowsing/report_phish/
To report the site to Microsoft, use Internet Explorer, click on Menu (the gear icon in the top right corner) -> Security -> Report Unsafe website (Credit to Pierre Lebon).
As Lundin points out in a comment, you could also alert the police - if the police force in your country has a department dealing with cybercrime. (Or the police force in the country where the phisher operates, assuming you can reasonably identify it.)
-
5Might be worth adding that until the flag is looked at - if the message is hanging about for a bit then RO's can move it to one of the trash rooms to negate its exposure. Apr 11, 2017 at 12:15
-
-
@JonClements so it is fine to (re)move the message? I was skeptic regarding the aspects of proof security.– rekireApr 11, 2017 at 12:24
-
1@rekire until it can be deleted (which requires a mod or suitable number of abusive flags) - it's fine to move it from plain sight. Apr 11, 2017 at 12:31
-
Umm... why would we report to Google and Microsoft that a site is trying to steal sensitive information from you, for unclear purposes? Report crimes to the police instead.– LundinApr 11, 2017 at 14:46
-
23@Lundin Search engines have a lot more influence on which sites users see as "safe" than the local police department does. Apr 11, 2017 at 14:48
-
3@blackorchid You don't say! That does however not deal with the criminals themselves. Also, mentioned companies are the true masters at phising...– LundinApr 11, 2017 at 14:52
-
3@Lundin The one does not exclude the other. I've updated the answer a bit. Alerting the police of cybercrime is a good idea, if one has access to a police force that deals with cybercrime. Apr 11, 2017 at 14:58
-
10Last time I called my local police station to report my stolen bike they said they don't care. Is cybercrime higher on their priority list?– reneApr 11, 2017 at 15:13
-
@rene You'd have to ask them, not me... FWIW The Dutch police does have it on their website, including a piece about reporting it, at the bottom of that page. Apr 11, 2017 at 15:20
-
15@rene I once reported an eBay seller that scammed me and a couple of other people out of a €100 to my local police (not expecting much to come from it), and to my surprise a few months later I got an invitation to attend the court case. (The scammer and victims were in the same country, so that probably made things much easier.) Apr 11, 2017 at 21:04
-
@m69 the skeptic/unbeliever in me needs a link to the case documents... I want to believe, but...– BraiamApr 12, 2017 at 15:37
-
-
21@Braiam You know you've been on SE for too long when people tell you a story and you're like, "Where is that documented? Where's the canonical reference?" :-) Apr 12, 2017 at 18:27