63

I found, in a chat where I am active, a user who was advertising his new phishing site. I flagged and kick banned the user from the chat, but I have still the impression that I should have taken more action. What do you think?

9
  • 11
    I've reported the site at: safebrowsing.google.com/safebrowsing/report_phish
    – Cerbrus
    Apr 11, 2017 at 11:40
  • 2
    Thank you for sharing that link I have to bookmark it.
    – rekire
    Apr 11, 2017 at 11:42
  • 22
    "Nuke him from orbit. that's the only way to be sure!" - Ellen Ripley Apr 11, 2017 at 11:48
  • 6
    Not much you can do SO wise more than flagging as you did - thanks for that. The message is now deleted and right now I don't see a need for any other action. Of course - if they persist or otherwise show untoward behaviour then flag again and we'll review it. Apr 11, 2017 at 11:52
  • 3
    @JonClements, Cerbrus - together, your comments form an answer. I'd like to see the link that Cerbrus gave as an answer, so that it will be preserved here on Meta - and updated when necessary. Would either of you write this as an answer? (Obviously I could do it myself, if you want - if you don't mind me "stealing" the comments). Apr 11, 2017 at 12:00
  • 1
    For a Ms report you need to use IE( Yes, the cure is worse than the disease) Click on Menu(Gears), Security, Report Unsafe Website. Apr 11, 2017 at 12:06
  • 1
    @S.L.Barth no objection from me - help yourself. Apr 11, 2017 at 12:07
  • 5
    rekire, I rolled back your edit, because "a user" is correct: english.stackexchange.com/questions/105116/…
    – Tom
    Apr 11, 2017 at 12:15
  • 7
    @Tom thank you for the hint, gamma is one of my weaker fields.
    – rekire
    Apr 11, 2017 at 12:25

1 Answer 1

56

If you see this happen, there are two actions to take.

  1. Flag the user, as Jon Clements points out in his comment.
    When you're the Room Owner, you can also move the message to one of the trash rooms, to negate its exposure until the flag is handled.

  2. Report the site, as Cerbrus did.

As Lundin points out in a comment, you could also alert the police - if the police force in your country has a department dealing with cybercrime. (Or the police force in the country where the phisher operates, assuming you can reasonably identify it.)

14
  • 5
    Might be worth adding that until the flag is looked at - if the message is hanging about for a bit then RO's can move it to one of the trash rooms to negate its exposure. Apr 11, 2017 at 12:15
  • @JonClements Edited that in, thanks! Apr 11, 2017 at 12:17
  • @JonClements so it is fine to (re)move the message? I was skeptic regarding the aspects of proof security.
    – rekire
    Apr 11, 2017 at 12:24
  • 1
    @rekire until it can be deleted (which requires a mod or suitable number of abusive flags) - it's fine to move it from plain sight. Apr 11, 2017 at 12:31
  • Umm... why would we report to Google and Microsoft that a site is trying to steal sensitive information from you, for unclear purposes? Report crimes to the police instead.
    – Lundin
    Apr 11, 2017 at 14:46
  • 23
    @Lundin Search engines have a lot more influence on which sites users see as "safe" than the local police department does. Apr 11, 2017 at 14:48
  • 3
    @blackorchid You don't say! That does however not deal with the criminals themselves. Also, mentioned companies are the true masters at phising...
    – Lundin
    Apr 11, 2017 at 14:52
  • 3
    @Lundin The one does not exclude the other. I've updated the answer a bit. Alerting the police of cybercrime is a good idea, if one has access to a police force that deals with cybercrime. Apr 11, 2017 at 14:58
  • 10
    Last time I called my local police station to report my stolen bike they said they don't care. Is cybercrime higher on their priority list?
    – rene
    Apr 11, 2017 at 15:13
  • @rene You'd have to ask them, not me... FWIW The Dutch police does have it on their website, including a piece about reporting it, at the bottom of that page. Apr 11, 2017 at 15:20
  • 15
    @rene I once reported an eBay seller that scammed me and a couple of other people out of a €100 to my local police (not expecting much to come from it), and to my surprise a few months later I got an invitation to attend the court case. (The scammer and victims were in the same country, so that probably made things much easier.) Apr 11, 2017 at 21:04
  • @m69 the skeptic/unbeliever in me needs a link to the case documents... I want to believe, but...
    – Braiam
    Apr 12, 2017 at 15:37
  • @Braiam Seriously? That's a bit... sad.
    – miradulo
    Apr 12, 2017 at 16:21
  • 21
    @Braiam You know you've been on SE for too long when people tell you a story and you're like, "Where is that documented? Where's the canonical reference?" :-) Apr 12, 2017 at 18:27

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .