Pokémon Go: An invitation to spammersSince its release, Pokémon Go has become a sensation. With over 7.5 million downloads in the United States, it became an attracting force for spammers. The launch of any game brings a launch of its cheat codes. The man hunt began for cheat codes of Pokémon Go, and the spammers took advantage of it. While researching for cheat codes, I ran into a website hackmobilecheats[.]com, which stated that you can get “Pokémon Go Hack Tool” for free. This is tempting, how can a gamer avoid it when at a standstill in the game and needs extra PokeBalls/PokeCoins?
So, the magic button of “Get Access Now” redirects you to “trianglefoxfile[.]com as you intended (not really). After reaching the destination, the following page is displayed:
The pop-up stated that the website has detected signs of you being a SPAM ROBOT! You have to verify that you are a HUMAN by clicking on one of the offers. The offers were so amazing, and it became extremely difficult to pick one. Also, I needed the cheat codes, so I had no option.
- Get a Glade Sample Pack
- Get Starbucks Samples (Coffee Lovers )
- Get a New Samsung S7!
- Get a Brand New Xbox One!
- Do You Fly Delta? (Sidenote: Gary is not a loyal member)
- Who Would You Conquer in a Battle?
Below is the Fiddler capture of the redirect:
So far we have changed 3 websites and no sign of cheat codes. It is just the beginning. Now we are required to fill a survey about Xbox.
TYPES OF INFORMATION WE COLLECT
Here are some of the types of Information we collect from users:
|• Name||• Postal address||• E-mail address|
|• Telephone number||• Cell/landline phone number||• Gender and date of birth|
|• IP Address||• Survey responses||• Device ID & location|
|• Browser User Agent||• Referring URL|
Children and Non- US Residents: We don’t knowingly collect or retain information from the Websites from children under the age of 13. The Websites are intended for use by U.S. residents who are not minors. If you are a minor, not a U.S. resident or don’t agree with this Policy’s terms, please don’t access or use our Websites.
USE AND SHARING OF INFORMATION
We may use Information and share it with third parties (who may compensate us) in many ways and for many purposes including the following:
- To fulfill an incentive;
- To maintain suppression or opt-out lists that we may share with third parties so that a user is not contacted when the user has asked not to be;
- For site operation;
- To provide users with information and/or offers for products or services from us or third parties;
- To notify the IRS that a user has received an incentive if the value exceeds the reporting threshold;
- To track online behavior for behavioral advertising and other marketing purposes. If a user registers on one of our Websites, the user may receive relevant third party daily emails from that Website, its exclusive emailing partner and other websites we or our affiliates own and operate;
- To develop and/or enhance our Affiliates’ and/or third parties’ products and/or services;
- If we are acquired by or merged with another company, we may transfer our users’ information to the acquirer;
- To respond to subpoenas, court orders, or legal process, or to establish or exercise our legal rights or defend against legal claims or when we determine it is necessary to comply with applicable laws or regulations; and
- To assist with site operation and other communication services, we may share Information with third parties, including vendors and contractors who provide services to us.
Personal Health Information: Our surveys may ask health-related questions which we may share with our third party marketing partners who advertise health-related products and services on our Websites or who otherwise promote health-related products or services. We will use this health information only with your consent and for the purpose of displaying offers for health-related for products and services or to provide Information to these providers so they can contact you. You may always request modification or removal of your information by contacting us at email@example.com.
SECURITY OF YOUR INFORMATION
We use commercially reasonable efforts to prevent unauthorized access or disclosure, or accidental loss or destruction of your Information. We currently do not encrypt Information that we store. Given the nature of the Internet, your Information passes through entities that we are unable to control. Therefore, we cannot guarantee that our security measures or those of third parties who access or transmit your Information will prevent your Information from being illegally accessed, stolen or altered.
So after everything is in place, it is time to confirm.
It was high time that one should realize that this is a vicious circle, and getting out of it seems to be impossible.
Below is the Fiddler Trace to where I am redirected, “promoandsweeps[.]com”
This is how you get trapped when being greedy and trying to cheat your way up in Pokémon Go. What’s the best way to avoid this? Try using your time to do something good like a responsible person, and use the DELETE app function in your smart phone. This will not only prevent you from scammers but save your valuable time.
Guest blogger Arsh Arora came to UAB to earn his Masters Degree in Computer Forensics & Security Management (MS/CFSM). As part of his degree, he and other students participate in real-world cybercrime investigations. Arsh has decided to stay for a PhD to continue his malware research.
For those interested in the Computer Programming side of Computer Science, but aren't interested in seeking a graduate degree afterwards, please consider our new Bachelor of Arts in Computer Science! The BA focuses on applying data analytics and programming skills to complement the student's interest in another field. Think of it as "Computer Science APPLIED TO Biology/Chemistry/Criminal Justice/name-your-major-here."