After the Storm, the Swindlers
The Web site katrinafamilies.com is one of several with ties to a white supremacist group that has been ordered to stop fund-raising activities.By TOM ZELLER Jr.
Published: September 8, 2005
Even as millions of Americans rally to make donations to the victims of Hurricane Katrina, the Internet is brimming with swindles, come-ons and opportunistic pandering related to the relief effort in Louisiana, Mississippi and Alabama. And the frauds are more varied and more numerous than in past disasters, according to law enforcement officials and online watchdog groups.
How to Avoid the Heartless (Sept. 8, 2005)
Florida's attorney general has already filed a fraud lawsuit against a man who started one of the earliest networks of Web sites - katrinahelp.com, katrinadonations.com and others - that stated they were collecting donations for storm victims.
In Missouri, a much wider constellation of Internet sites - with names like parishdonations.com and katrinafamilies.com - displayed pictures of the flood-ravaged South and drove traffic to a single site, InternetDonations.org, a nonprofit entity with apparent links to white separatist groups.
The registrant of those Web sites was sued by the state of Missouri yesterday for violating state fund-raising law and for "omitting the material fact that the ultimate company behind the defendants' Web sites supports white supremacy."
Late yesterday afternoon, the Federal Bureau of Investigation put the number of Web sites claiming to deal in Katrina information and relief - some legitimate, others not - at "2,300 and rising." Dozens of suspicious sites claiming links to legitimate charities are being investigated by state and federal authorities. Also under investigation are e-mail spam campaigns using the hurricane as a hook to lure victims to reveal credit card numbers to thieves, as well as fake hurricane news sites and e-mail "updates" that carry malicious code aimed at hijacking a victim's computer.
"The numbers are still going up," said Dan Larkin, the chief of the Internet Crime Complaint Center operated by the F.B.I. in West Virginia. He said that the amount of suspicious, disaster-related Web activity was higher than the number of swindles seen online after last year's tsunami in Southeast Asia. "We've got a much higher volume of sites popping up," he said.
The earliest online frauds began to appear within hours of Katrina's passing. "It was so fast it was amazing," said Audri Lanford, co-director of ScamBusters.org, an Internet clearinghouse for information on various forms of online fraud. "The most interesting thing is the scope," she said. "We do get a very good feel for the quantity of scams that are out there, and there's no question that this is huge compared to the tsunami."
By the end of last week, Ms. Landford's group had logged dozens of Katrina-related swindles and spam schemes. The frauds ranged from opportunistic marketing (one spam message offered updates on the post-hurricane situation, with a link that led to a site peddling Viagra) to messages said to be from victims, or families of victims.
"This letter is in request for any help that you can give," reads one crude message that was widely distributed online. "My brother and his family have lost everything they have and come to live with me while they looks for a new job."
Several antivirus software companies have warned of e-mail "hurricane news updates" that lure users to Web sites capable of infecting computers with a virus that allows hackers to gain control of their machines. And numerous swindlers have seeded the Internet with e-mail "phishing" messages that say they are from real relief agencies, taking recipients to what appear to be legitimate Web sites, where credit card information is collected from unwitting victims who think they are donating to hurricane relief.
On Sunday, the Internet security company Websense issued an alert regarding a phishing campaign that lured users to a Web site in Brazil that was made to look like a page operated by the Red Cross. Users who submitted their credit card numbers, expiration dates and personal identification numbers via the Web form were then redirected to the legitimate Red Cross Web site, making the ruse difficult to detect. The security company Sophos warned of a similar phishing campaign on Monday.
"They're tugging at people's heartstrings," said Tom Mazur, a spokesman for the United States Secret Service. Mr. Mazur said there were "a number of instances that we're looking into with this type of fraud, both domestically and overseas," but he would not provide specifics.
http://www.nytimes.com/2005/09/08/technology/08fraud.ready.html?th&emc=th
Author