GF - Look! The scammer is coming!

good afternoon welcome back to b-sides las vegas ground floor this talk is given by sibel olivieri and is titled look the scanner scammer is coming the peculiarities of brazilian frauds hackers creativity and their resilience before we get started i'd like to thank our sponsors especially our inner circle sponsors critical stock stack and valley mail and our stellar sponsors amazon the national security agency silence and many more cell phones please remember that this talk is streamed and is a courtesy to our speakers and everyone else please silence your cell phones also uh for the folks here on site if you have questions at the end of the talk there is a microphone in the center of the room please use microphone for

questions so with that said let's get started please welcome sabel olivier

hey hi everyone first english is not my first language so if you don't understand something i said please say you are saying something totally wrong you are you know babbling a lot please say really it's true so um my talk is about brazilian scams that is completely different from us or other parts of the world and why i was answering during my uh my lecture and to show how different is from the u.s you know and how these types of fraud is rich in u.s and europe this basic is about this my my talk and again if you don't understand something i said please say out loud because in my mind it's complete it's perfect my english

okay so who am i my my name is isabel i'm from brazil i love cats i have two cats they are my babies and i'm a vegetarian so i love tofu and i love chili spank listen bank rock i work as so i work as a cyber sec cyber security analyst at tampa security intelligence in brazil and i also part of mozilla community and a wrangler we will have this mozilla festival next year so i hope to see everybody there in amsterdam will be awesome remember guys amsterdam so of course and the director of kazakh is an organization in brazil we try to emancipate and empower people technological you know especially people uh i don't know how to say exactly this

in english but it's not poor people how do i say like they don't have the opportunity to learn about technology how what they can do with this so basically it's me there's much more than this of course i have a lot of tattoos so lots of stories and so what we're to talk today about our social landscape so why this happens and or a brazilian underground like uh fro how crowds banks money mo mules scams tools i hope to get more worse you know is the last part but i hope so and why does it happens okay so when you what comes your mind when you think about brazil definitely it's not about scams probably it's about caraval

caipirinha summer this so but probably never crossed her mind that one of uh brazil is one of the leaders leading countries in uh global uh and grow up sorry and on online fraud see i i took this map from 2020 but it's pretty much the same you know brazil's highest frauds and bank frauds in brazil's a lot you know according to this research is holland berger we are in the fifth country suffered most cyber crimes in brazil in last year and january last year for example we have a mega league exposing data from more than population in brazil because included that the c deceased ones too i mean two million two hundred million and something i mean

a lot of data leak you know you know what we can do with data leaks a lot everything we can use for any purpose you know to hack or even just because for fun you know to do all scenes in someone so we have and in brazil beside the cyber crimes they have had many many data breaches all the time this sucks but happens a lot um wow among this information this data that was leaked there was okay a social security number that is is another name in portuguese but id name birthday vinco the employer identification number credit card scores addresses photos education i mean everything it was online so was leaked and wow it's a lot of

information and this data as i said before is extremely crucial for criminals or not criminals i can just do for because just because they can use this data for fraud for example for fishing or smashing or whatever so this sucks you know there's a lot of data so our landscape why why where it's begun you know brazil has a massive social inequality so many many many people there adopted this so-called gambiah you know as a way of life what is gambia macgyverism you know it's something like this in brazil jerry i i don't know what's the best word for this macgyver is with jerry but which one is better in english macgyver now i know

so the definition of gambia is this that how you pronounce gambiah this is very important it's completely different here is a brazilian way of fixing things as expression we can do our work around or everything just to i don't know sue a button or leave just for leave you know from battle situations for to work for hacking for everything and inexpensive of others this is not cool of course you know this is bad but people do this so what happens in our underground underground uh let's give a quick uh overview no so back in the mid of 90s early 2000s you know internet and home internet start began you know so people want oh how i do this how i can

check if vulnerabilities on com on that website that's very weird at websites do you remember that blog from 90s is kind of yeah weird so they used to deface that to explore what's going on so and there was a many many uh photos to discuss this from people from around the world but as you know brazil is not a super rich country so who have a computer was kind not rich but good life you know could speak english not everybody can speak english is not our first language not even spanish see guys we don't speak spanish please we speak portuguese so people so people who are in this forums could speak english to talk with

another people from the rest of the world um have computer so they have this discussion oh wow how we can exploit some vulnerabilities how we can learn remember that time we didn't have framework so many books that didn't have like internet as we know today you know to check information you know what's hard you have to talk with someone in almost in real life to know information so people talk about this and that so defacement was the rule in everywhere um sorry i lost here in my notes sorry sometimes i get i'm kind of nervous not butterflies here but uh dragons cool thank you thank you thank you [Applause] so again if i'm speaking too fast or

weird words please let me know so this was or underground that time you know and then they what they do like well let's see they don't have much information but in the middle of 2000 bank robbers start to get that what something you know guys start to bank uh hover banks and they think maybe these nerds can help me you know to do something online because uh in the beginning of 2000 online banks start to happen brazil was the one one of the first countries in the world to have online banking so it's a big thing so this criminal said oh hey nurse can you help me you know to hop some cash for us you can get money

me too and not much you know it's not so dangerous how to get a gun oh save like give me your money you know it's kind of easy okay let's do this so this for people who know about how to exploit vulnerabilities on the website say okay let's do this and start to you know break the banks and get money and then okay so with the time these guys uh i don't know i don't want to learn more about vuenerability you know to learn how to hack things because this is easy money for me so they stopped just stopped to learn and they bought this like a kit with everything you know someone developed and they use

this to exploit and that's it and they then start the cyber criminal in brazil but this is very important they don't use like any tour sites or tor uh on in underground farms was just you know open now in the beginning was irc forums and then they moved to facebook whatsapp tick tock and now instagram so it's super easy to find these things online um but before we go on something very very important about you know the brazilian things maybe you don't know about this so social engineer of course is the backbone of best of most of our scans this is very important we have this very popular bank transaction it speaks uh that is instant

stand payment i i think there is something kind of this here but not like in brazil because in brazil there is a central bank it's straight with central bank and here there's uh someone in the middle uh zeal zell something like this right so in brazil this is very popular we do this every time everything oh give me one hell okay i i sent you so in order to do this you need uh and then an uh kind of identification maybe is my id or my phone number or my email so with this information we can send for someone else but when you send this for other person you can see in the in the bank or you send for

someone joe da silva for example and that is his id number you shouldn't give for everybody like social number you shouldn't give for some everybody know your social number so that's this number your phone your counter number counter number sorry again so a lot of information as you know we can do a lot with this information if a little piece of information uh what else in brazil we love make payments using volatiles uh like bank sleep it's a kind of bank sleep is not the same but something like this we pay everything with boleto especially like cars we have like a thousand of bullets we pay every single amount or to buy appliances like a fridge or

whatever we can do this for everything to buy a phone to buy a shoe yes this is weird but we use this a lot uh we use a lot of uh what's up top counters to use what's up and of course we have many many many scans using whatsapp many uh and brazilian bank system is pretty much digital so we it's easy to open an account to get personal loan not big banks because they have many protections but small banks because opens a new digital bank every every single day and some of the case i present here is in my where i work in the campus is in english you can read about this there's more in

deep and other frauds and other another things is a cool blog so you can check there so okay how they can do this you know the fraudsters they for example they can open a bank account in the in the digital bank in the name of someone some target a victim you know for example i will open a bank account in the name of maria maria is a very common name in brazil and they use it using her data because everybody has or data leaked in somewhere so with this they use or they use a social engineer to get this when they open up so another bank account in the same name of someone who's alive oh what like what he can do

this this criminal he can transfer money you know from him is that clean money you know no no trails that was illegal they can uh ask for a loan or you know money money laundering he can do everything or he can our fraudsters also can uh lend lend or borrow land land you know someone account like you can rent me your account for example oh you can use my account and i transfer the money i get from my scans and i give you half so perfect this is a business in brazil they land their account you know for a part of this money usually 55th and everybody's had of course this is illegal pretty illegal

or what else they can do they can do a lot with this bank account this fake not fake it's not a fake account it's a original account they can make the same name of the a victor or land for someone so here uh besides this they can take over account you know with the data they are they are linked they can they can take over your account of course it's easy to get someone's you know password oh what's your name when you when you're born where what's your mom name and your dog you know you know how easy you know using a little bit of social engineer to get some information people don't don't get it you know with their

passwords they just don't care you see when you open your instagram oh what's your favorite food or the name of her cat or dog see your face is here you know fixing this square diamond or you know many faces so everything is there so it's super easy you know to hack an account or i mean take over in a bank account they can do this um so when they can do this this is later let us just like oranges but there's no meaning in english so as a bank meal thank you so this is uh some people uh say oh i want to rent my my bank account for you to use um no actually sorry they are selling

here uh they are available for deliver these documents the person is selling the documents okay here uh what are and i asked here a person is landing her account for whatever people wants the criminal wants you know just put the money and i return you some percentage same other so so see this is in facebook is open we don't use like deep dark web forums to hide things everything's so open you know and when you go online you see oh my god really of course there's some groups more clothes in telegraph or even what's up but so freaking easy to get these things illegal everybody knows it's not a secret not from police from anyone just

happens it's weird right i don't know do you have this kind of thing here so easy in us no yeah i i though i thought what else this uh uh this first this woman is renting her account because she needs paid her hand rent so okay give me some money put some money here and i return another money see four different banks a lot of banks the other ones say oh come on guarantee your holiday money you know this is like christmas or this kind of season oh we you just have to give me back 45 so why not it's easy money to come to my account and another guy said oh do you need some

back right now okay we don't need your password for example it's just the account that it's super easy why because people are great okay i want money easy money but you know there is no free dinner or lunch or free beer you know this is well last week i guess police arrest like a bunch of people because of this because it's totally illegal but i don't know why they arrest these people i don't know why but yeah now you make i'm not cool with this let's arrest so that sucks uh one more but more bank accounts available for delivery but this first one they stole the bank you know they took over the bank account so they can do this they

sell or rent this bank account and it's not working anymore okay move on let's change another one and you know because it's a digital account it's not when you go to any bank you know physical bank go across there and that that one they are selling for 250 reis is something like less than 50 bucks super cheap you know everyone can buy this oh what a money okay you can use this account just pay me like thirty dollars okay let's go and they stay documented this happens a lot too you know and they test if this document is valid if it's not that from a deceased one if it's valid you know it was not cancelled by i

you know when you don't pay the in the end of the year when you don't pay your taxes the guys can you know arrest you is the same in brazil but they will not be arrested but your document is cancelled until you pay so here is not a video i'm sorry so sorry but they test if this documents works you know oh it's valid okay i can use can be any document what else here uh someone she this person actually is a woman she got over there well 150 original documents like driver driver's license id and she makes some packages you know with selfies it's very important because when you open a bank account you need like uh

to show that you are who you really are sometimes oh move your head here your eyes up down blah blah blah so but some banks uh they put oh sometimes too close too far it's good my advice okay cool so but this new bank they don't have so much protections you know online bank so if you take a send a picture holding your document oh it's fine so but come on guys it's easy you know to to do things like this so this person is selling some documents with selfie without selfie but she don't guarantee cred scarf because this is very important you know if i want a personal loan with the name of someone else i want like at least 10

10k it's a good money it's not wow i'll be rich but 5k maybe so with high credit score of course we get more money or whatever if i want to buy a car you know oh i have this in my account so good cred uh credits car so okay you can buy this car but it's not my money this happens and then of course this guy works with me he yes he said to me please say i'm not a thief i'm not a cyber criminal i just a guy who works with ai so he was testing this these algorithms to do this so with simple thing you can find online easy easy on any github you know oh

let's see how can i uh bypass this protection easy you know how can i check someone's iphone oh super easy you know this happens and you that uh there's another apps like my heritage something you know you can make some picture mover head or eyes so it's easy you know to trick just sorry so there's many many tools around now not just in brazil and everywhere showing how easy we can we can do this you know but this is very cool right i can't remember what github is this algorithm is but i can looking for if someone is interested in you know for of course academic purpose please yes uh and here that someone uh

in what's up how you can see and that is in facebook selling this uh this app you know that is an app they develop an app to trick biometrical liveness or liveness liveness liveness okay cool so you can use this app clone and some banks is impossible you know to trick because they have uh many levels of security because they're bigger banks as i said small new banks they it's kind of harsh you know because it's super easy they don't have so much despite to be a bank they don't have so much money to invest in cyber security thanks for us we have you know jobs forever i'm super happy with this kind of um

and the other side someone selling these pictures too you know uh kichibiko uh i don't know because some kind of like filler jobs you know something like this they sell if someone needs uh this kind of job a very simple job live in construction or something like this but they need a document of course a valid document because sometimes they check who what you if you are arrested if you are if you uh you have to pay your taxes or something like this and sometimes they say no no no you can work here because you have problems in your past you have to solve this first and pay your taxes whatever you have to do and then you work but i need money

like clean money first you know so this person sell this you know pictures these poor guys you know they are victims they are not criminals with documents so they just sell fantastic right lovely how this happened in brazil and if you need a open a bank account use these apps as well it's super easy you download they show you how to use this you know even better no go there and here you can find many many videos this on youtube and scans i love this one i i i i named this physical man in the middle why so the guy the guy or woman i don't know we never know this person create a fake

website and someone oh okay it's my bank this happens some maybe because uh trojan or because uh fake link the person's very oh she's right this i go here and then click there in this spam and go to this bank you know this is uh cyber criminal uh dashboard and this what the person is seeing see so the cyber criminal is in his computer here talking with the victim so everything the victim does he can see see and then uh the person put his bank account um blah blah does his password and oh this is wrong why how he knows because in the other computer he's trying oh this is the number of bank account oh it's password

oh this is wrong you know say and then here you can i don't know if you can see really well clear but there's um some messages prepare message to send oh this is wrong try again put your token id or things like this and just keep going it's like a man in the middle physical because two computers and he's trying he's just seeing what the person is doing super easy this is a fake page of course uh capture the date of this bank no um i went the whitman and put his um social security number in the fake page the these send a post for this control panel dashboard informing the new access so this can go on for forever you know

no so and when this interaction happens sorry this operator has total control of every steps of this fishing this super coefficient is not so wow amazing super technological full of you know hacker things it's just easy just a simple page they you know simple fake page count uh here you know it's like a live mode exactly oh see capturing the the protections is like exactly like in the bank so the guy here the cyber criminal is seeing can you understand my explanation now for me it's super easy in my mind but i have to translate to english to try to make you understand what i say so again if you not understand raise your hands or scream okay

uh so this keeper happens there's many many parts of pages of this scam this is the dashboard you seem uh these are phrases that the machines at the bank could say oh wrong password try again or okay it's open uh now you are on you can do some transactions the same here you know many options so super easy and stupid and happens all the time this vision these scams yes this is another skin uh the company where i work uh found this scheme is very lots of money what happened um someone had a brilliant idea to recruit some uh this uh car shops car shops you know oh hey guys you are the owner of the shop do you want to

make some easy money again and because you have credentials she was accessed as a financial system you know when you go buy a car the guys check okay you can buy a car you have credit on the bank so if you have this sex come come join access come join us so uh and then they try they make um ad selling a car okay then can be a picture i took a picture like outside here of a bmw or any like fancy car luxury car and that's okay okay but maybe this car is not real but can be a real car but this trash right now is you know it's not working anymore i don't know

the word in english for this but you know what i mean right guys so or even a picture a car and but they this guy tried to recruit many in many levels this uh the owner of the car car store the guy in the bank the the person who who checked this you know so they try to they you know and and every place that is inside because it's very important has an insider you can do this just out of the blue you know you need an insider they recruit these people because it's easy money again so uh one of the we could capture this you know oh there's someone in dmv system that will

register this car you know even if this car doesn't exist anymore or it's a car that i took a picture on the streets uh but not in real life as i said and they get a lot of money with luxury cars so they have to approve this financial in the bank this is the very important part that the guy in the the car store is not a car store is it's another name right car dealer thank you very much new word i will memorize thank you so i've proven this someone in the bank probably will approve because yeah okay it's here says oh this person have money so that's okay but we found who are these guys he's he

was opening a very expensive whiskey bottle you know with a gun like this oh i have a lot of money you know that hyper is like money like this it is oh i opened this very expensive uh whiskey bottle with my gun see lots of money now luxury car impressive bmw is really really expensive like for rich people not really really really expensive and and everywhere they have a lot of money they you know they drive these expensive cars all the time they post on instagram on facebook and tell for everyone they are stupid right of course they are stupid because i have money i still money i'm a fraud a scammer and i show this for everyone

of course this yeah in any point could be wrong of course like we when we see on tv or on internet people there's hanzo our operators you know when they get arrested with lots of money and cars and jewelry and bars of gold and wow something like this but in brazil it's it's weird because most of people are poor there is a lot of poor people in brazil like when i mean poor like poor and poor medium class and few higher class really rich but unfortunately i'm not in the rich ones damn it okay another fraud you know this we it's happens really all the time um someone copy like for example um there is uh this is my

health is written in here like minister of health you know especially with koveed and things like this they have they of course they page on instagram but people ask their oh something happen with my password or i can i cannot get my my vaccination or any question even in health or a store they ask questions there it's not the proper place to ask questions of course no it's because it's there but people ask so what this person people do they copy and the people go there and oh okay let let's do this on on private and send a message and the person gives lots of information you know personal information there so it's pretty easy even without that blue thing

there the people believes because oh if someone answers for me and trying to help me oh cool and see it's super easy to copy you know and to people get there and not like don't need to be stupid people like when i mean stupid lord like i can't read but or moms can do this because they don't pay attention my mother penalties and everything she's very oh since okay are you good i go here oh so and this starts they can you know get a lot of information oh okay now but now the person can say oh you have to transfer this kind of money for me to in order to you know to fix things can be

like a health or can be a store or anything this this is a very common scan in brazil and fake stores this wow this is amazing of course um this is old ad but like a phone like 103 eyes so okay it's not a black fro friday uh so i can sell you for the half of price what happens here the guy stole this merchandise and tried to sell or the problem is this or they are creating this fake ad and the person pay with bullet remember the bank sleep so bank sleep now is quick because they meet a bank sleep you pay and then when is in the system of the store oh okay

the money is here now we can send you okay the merchandise but so people know oh you take like three days to the my money the guy see my money in the account and then start give me send my merchandise but so this happens okay you pay with this with the boleto bank sleep and wait and wait and wait it never comes because it's this merchandise doesn't exist maybe exist because they stole this merchandise and sen and selling for the half of prices for win-win situation for everyone this is the kind of message message sorry you can receive in what's up remember we use whatsapp for everything for everything to send newt to send money for to everything in brazil skype

please don't send nudes through whatsapp don't do this never so this is uh a conversation you know the this is about say oh hello victim name someone joel mary i don't know unfortunately our promotion is only valid for banksley payments this is very important so don't worry you can pay me you can can ask me for this the um you can pay this and you send your the product okay so we have nothing then five identify your payment for our the disorder you know please request a second payment sleep go to this website whatever and pay well if you pay woohoo wow your order just has been delivered to the car carrier so the people is

waiting because they know to take us sometimes a long time sometimes it's next day but if it's a fraud of course it will never be next day and this in the black friday oh my god in brazil we don't say black friday is black fraud because it's never the half of the bread never never never is a fraud every year so yes do you have this kind of fraud here yeah it's just common right too it's something fraud always a black fraud in brazil but people wait the whole year to buy especially people who don't have money doesn't have money so wow i can buy a tv i can buy a new phone like even i can buy a iphone

in brazil is super ultra expensive iphone really really expensive so they we know they keep saving money the whole year and then frankfurt find that this is the kind of dashboard well it is the dashboard for fishing some use you know you can buy this is is just buy and use this like hence where operators sometimes sell this you know the the malware the dashboard you can do this for fraud too so uh the boletos there the bank sleep they send different numbers and what's up matches oh we don't we we don't see your payment please try again oh if you pay this before just consider this and so on you know something like this the dashboard is

very simple really really simple dashboards and as i say fake bait up bank sleep it's something like this we use a lot of course we can we can spot if that's something weird you know if you are attention you know the numbers like tho is not the same of the bank but you have to be a very good eye for this and know what you're looking for because anyone if you check this okay it's okay and remember we use this for everything in your life we can use this for about to buy a car can you picture like 24 bank sleeps you pay every single amount if you don't pay okay you can have to pay a extra fee because you

don't didn't pay in the same day but that's okay and finally peak speaks that instant payment so there is a lot of fraud used in peaks for example this one of course people want again easy money everybody wants money like here in vegas everybody thinks oh i win the machine every single time i love of course you're on the machine but timbre oh if you send me like terry ice this will return a hundred three eyes or a thousand realize why someone you send me send you money why in the hell like free money just don't exist so this is one of the frauds and this happens a lot more than you can picture there is another fraud

in brazil not using nothing tech someone in the streets oh you know is where is this place i have to go there because uh a rel a relative died and gave me a heritage heritage so but no no better i have this uh lottery i want but i can't you know return this money for me if but can you help me i have to come back to i don't know where in a city very very very far in the other state and can you help me please give me like a thousand re-eyes or something like this i give you this it's like ten hundreds of thousands okay and people do this my neighbor did this you

know she gave like a thousand dollars so a thousand dollars in brazil multiply by six so it's a lot of money a lot of money and and some jewelers for this guy she never met in her life but he said oh give me this i give you this uh lottery that one so it's super easy you know to cheat people because people believe they can have free money not work because work is for stupid people of course yeah so some tools oh this is interesting this um i think i don't have images for this one well he test uh loggings this uh as a kind of email hijack that is uh i don't know if i have yes i have

uh you know we use like gmail or we used to use hotmail but there is other you know uh domain like simple domains that's not big like google but so really really simple what these guys do they hijack the emails you know and let me show actually the dashboard the two tests these two you test the these domains you know and searching for keywords for example boletto but only works in these small domains now different domains not google not the big ones the smaller ones so it would check for this and then oh he spotted uh oh a payment sleep okay good perfect what he does he download this and then he changed the numbers the

barcode changed for the for his account and put again how he does this using imap protocol because you can change using imap you know this uh see oh the guy found this the star this two so is that two with many first he found the keywords the emails you know that's our round found changes uh this attach it um payment sleep so the guy you get money it's it's a a little work you know to do this because you have to looking forward and then download and then you can move like in paint brush for example really so just this and then back to the um the mail box and the person you never see this

because when this um these domains use imap and you can change things you know using imap and the people don't even notice this you know not be will not be open like in gmail when you check oh it's something if you open before it's there it's open but not here so they do this it's i show is some kind of scam that happens in brazil but there's there's a lot of more what's much more written wow there's one for example it's like uh if you order eye food and then the guy someone calls you oh you ordered eye food okay but the guy suffer accident so we are sending again another guy with your you

know what you are there but the guy you know arrived there oh this is your food but you have to pay just a little tax because you know i have to come here again it's pay but they give the that card machine you know uh broken with this you know the screen broke and the person okay use the credit card instead like charged henry eyes will charge like ten thousand rights super happens again all the time there's another fraud very cool oh oh are you the uh some company will deliver you a gift so the guy will deliver your gift and he said oh remember this guy is a criminal and has your data and so oh i have to take a

picture of you to prove that i deliver new this gift free gift for no reason oh let me take a picture with you holding this but while the person is he's opening her account you know or a bank account the name of this person because you know lifeless you know biometric aliveness it's happen i don't know what happens here too no yes we are super creative it's not a good way to be creative but it happens this and these two super eaper simple tool to modify and there are some testers you know like uh severance pay to tester uh these two tests this um your social security number in order to log in log in to

withdraw this money severance pay i don't know how this severance payment works here in the us but when you uh you're not in the you change it your job you have this money there you know spare that you can use in the future but oh i need money now i want to buy a house or i need this money right now so how you can withdraw this money oh you need this your social security number and then you login in the app you know oh that's things that you're doing the app and but this too this uh they check if it is working usually it's up for check if uh the person have this severance pay in the account is working

and then they try and withdraw money for usually for poor people really poor people like have minimum wage that sucks but it's easier to get money from poor people because it's a little money no one cares of course we care everybody cares for this but just don't care oh this is super awesome you know you i don't know how they do this but uh this first criminal cell uh you can console this it's look this look ipa lookup panel you know you can check like the phone number your how much your your income your neighbor's name everything in your life if even your nickname your kid's name where they study what's your zodiac horoscope yeah so you can check everything with

this information you can you can i don't know do you can kidnap a person you can yes because the whole life of the person is here picture and documents and everything and just okay i want to check this so i buy for uh seven consultings like i can use for seven days and get you know everything what i want for a victim or many victims and you can find this person on what's up wow do you have something like this this panel here i i don't know is it truly genuinely more spread this is everything all together this i mesmerized every time i see this really it's no it's much bigger than this it's just a part you know you can see every

everything even the shoe size true really it's not not a joke it's true uh and finally malwares you know how cyber criminals can subvert bank protections another level you know that's not just for kids but just a little smarter person can do this because of course you can buy a mower you know why did you use a mower but in brazil this is uh most common in brazil guildma or astarot casbanero some works here in u.s in europe in latin america and in brazil just everything i say is not just in brazil they are this kind of scans is spreading all around the world but what they have in common uh they are like a frankenstein they try they

uh they just buy this ready to use and change every time police oh you can do this i have just five minutes so i speak really fast and try to but if you have some questions i'm here so um well they what they have in common they use um overlay screen you know they use overlay screen why this happen if everybody use because this kind of mowers is easy to use on desktop right and everybody use bank app but some uh central transactions well in brazil we have to use in desktop and they sent spend like gitma or astronaut they send like a million spends per day is a lot of so someone oh okay i can do this and click that and

get fished so and they get money and they only on desktop they are super simple they are very resilient and do this every time this trojan uh don't need knowledge you know you don't beca be a super hacker to do this and a lot of gambia macgyverism and they are right in delphi come on it's pretty old versions really using overlay attack and the infinite patience and resilience of these guys trying over and over again in every possible way you know to get this to use this expert doesn't anything is new or super genius it's just like this why this happen because first impunity is quite easy you know to not be a rat if you are arrested

you are releasing the next day or two three days later uh lenny and law or we have many laws please we have laws we have some sometimes work but they are okay this kind of you know this kind of fraud man we don't care no digital education we we are very digital in brazil everybody has a cell phone or things like this but don't we don't have digital education this i do for for free you know for people in brazil and then social inequality there's many many poor people especially right now after pandemics people are really poor and no effective effective less ideas sorry it's sometimes hard to say these words and what this what happened

so there's many many many more to talk about these uh it is a very cool subject for me and sorry but it's weird to explain this in english but if you need you'll have some questions i'm here and this happens working like this a perfect cyber crime storm so this happened like everything all the time every single day and for this thanks for this i have a job forever and i can come here to talk about this for you guys and thank you very much my twitter and my linkedin and i'm around if you want to talk or something like this thank you very much guys [Applause]