Scammers Target Neopets Users 122
An anonymous reader writes "If you have children that play on the popular virtual world game Neopets, you might want to warn them of a social engineering scam gleefully targeting 12-year-old kids. Neopets users looking for rare items are sent private messages from the scammers, who direct them to sites hosting keyloggers & trojans. They then use the infected PC as a means to get to data the parents might have stored there, be it credit card details, Paypal accounts or online banking. Seeing the screenshots of some of these people talking about putting these children into botnets is just unbelievable — if ever you wanted proof that people up to no good online will go to any lengths to get their hands on some money (or even just feel good about outsmarting a 12-year-old), here it is."
Scumbags (Score:5, Insightful)
Jeeze, all scammers are scum of the earth. Why would you expect them to be any different with 12 yo kids?
[John]
Webkinz (Score:5, Insightful)
Even sites that do have forums like Nick.com have moderators approve every post. I'm sure it's more expensive to run it that way, but I would think if your site is built to cater to young children, it's incumbent on you to either moderator-approve every posting like Nick does or limit postings to pre-approved phrases like Webkinz does. Anything else is just asking for trouble.
And the parents? (Score:5, Insightful)
Whatever you do, don't blame the parents for:
1. Putting sensitive info on their computer, then
2. Letting their kid use that computer unsupervised, while
3. Leaving that computer relatively unguarded against intrusion.
Sure, not every parent can be expected to be a genius, but if you're going to let children use a computer on the internet, you have responsibilities to act as a sysadmin.
Not to mention responsibilities to act as a guardian. Just as with TV, the computer is not a babysitter. Worse, a net-connected computer is a social interaction tool where every pervert and scammer in the world has direct access to your child. And you're really going to just let them hang out alone with those people?
The real solution (Score:4, Insightful)
The real solution is for the kids to have their own computer. And the adults do not use it for online banking, or anything else.
It's hard to believe the cost would be a problem, but if a netbook is too dear, old PCs are being given away. Put Linux on it, and it's their online playpen.
No need to argue about porn and whatnot. All of those concerns can be addressed depending as the age of the computer's owner varies.
Gee, really? (Score:4, Insightful)
Targeting the weakest link in the security chain? Who would have thought the spammers would do that? Alright, it's scummy to target this towards kids, but it has happened since the start of the internet. Think back to the bad old days of AOL and Compuserve chats, or telling scriptkidz that your ip address was 127.0.0.1 and to 'hack me if you dare'.
What does surprise me, is that people are letting their kids play on websites while logged in as administrator. How computer savvy do you have to be to realize this is a bad idea. Admin on their own computer, maybe. If you make them clean up their own mess and just smile when they lose their Neopet.
OT: Go Play Outside (Score:1, Insightful)
I'm no parent, but hell, the intended audience of this game should be PLAYING OUTSIDE and PRACTICING SPORTS, not learning to get hooked on MMOs. I know I was, even though my parents got me an Atari, I still had to go to swimming lessons at 6 a.m. before school (oh yeah, no heated swimming pool).
And they wonder why obesity rates are at an all-time high, geez!!
Parents (Score:2, Insightful)
and a separate user account (Score:5, Insightful)
Re:OT: Go Play Outside (Score:5, Insightful)
I'm no parent
What you do, then, is you print out your post, and save it in a safe place. Then, read it again, on your first child's 9th birthday, and realize what an ass you sounded like in your callow youth. It's very humbling, and good for the soul. When I first started posting on Usenet in 1991, before I had children, I wrote some incredibly stupid and glib things about parents and parenting. I ran across a box filled with print-outs from that era about six months ago (yes, I did print out my Usenet posts... I was in love with the sound of my own voice way back then too) and was startled by my trite ignorance. I am trying to learn from that experience in lots of ways, but it's a wisdom only painfully won.
Re:And the parents? (Score:4, Insightful)
Sure, not every parent can be expected to be a genius, but if you're going to let children use a computer on the internet, you have responsibilities to act as a sysadmin.
I'm sorry: are you joking? So many people can't even act as their own sysadmin to the point that there's little difference between a child inadvertantly downloading tons of malware and the parents' own activities. No, no: the ordinary person's computer will only be safe when the next "version" of the internet is only accessable through cryptic terminal commands and the only people online are the ones who know what they're doing.
/semiTongueInCheekStatement
Re:And the parents? (Score:3, Insightful)
Re:OT: Go Play Outside (Score:4, Insightful)
Because it is impossible for a kid to play baseball in the park all day and then play a video game for half an hour after dinner.
And there's never weather conditions that make playing outside not such a great option.
Oh wait you could have your atari and still do sports, but no one else can take part in more than one activity? You are special!
Re:And the parents? (Score:3, Insightful)
I don't think you understand the mentality of a young kid. It's easy to say "don't open things you don't know about". But then they're playing their game, and they're looking for that one item that no one else has, and someone says "I used this program to just give myself the item, it works, here's the link", the kid is not going to flash back to you telling them not to open untrusted things, they're going to be so caught up in the fact that they think they're so close to getting this item that the program gets executed before they even think about it.
Expecting kids to understand the intricacies of internet security is about as realistic as expecting an average parent to understand the intricacies of being a sys admin. Keep in mind that most adults don't even understand internet security, let alone their children.
Re:OT: Go Play Outside (Score:3, Insightful)
You clearly don't live in a city. It would be nice if nobody needed to, but most people do. Playing outside is ... risky. Traffic is only one of the reasons.
I'll agree that staying inside at that age isn't healthy, but neither is being outside and unsupervised. (And, yes, when I was growing up I did that, and it was essentially safe. That doesn't make it safe now.)
Re:And the parents? (Score:4, Insightful)
Re:Scumbags (Score:2, Insightful)
Offtopic?
This is funny.
How about exploration? (Score:3, Insightful)
20 minutes? really? Way back in the stone-age, when I was a kid we'd spend hours exploring what our amazing Commodore 64s and Apple IIs could do. We'd dial into BBSs, and run our own. We'd write our own software, and tinker with other peoples' code. Sometimes we'd end up in places we weren't welcome (Hello Joshua, shall we play a game?). Our parents hadn't the vaguest understanding of what we were up to (boys? Why is the phone making a funny whistling sound? Did you hook up that video game thing to it?). We're the application developers and software engineers, the IT architects, and the hardware engineers now. Our understanding of how these machines work come from all the hours we spent exploring them as children.
It's fun to demonize children "wasting their time" on the internet, but it's part of our world, and worthy of exploration. I hear all the time about how "this latest generation" is made up of computer geniuses since they grew up with them, but honestly, most of the ones I talk to know virtually nothing about these machines other than day-to-day use. They can't fix'em, they can't upgrade'em, and they still make horrible messes of them that leave an actual power-user scratching their heads. Maybe, just maybe, the whole idea of heavily supervised "play-dates" with their computers plays into this. At their most curious ages they're told not to touch, not to explore, and in the end they turn out not really learning any of the really cool things that they could do.....
Re:OT: Go Play Outside (Score:4, Insightful)
You're 'startled' mostly because parents spend a great deal of time compromising their [parenting] ethics away. It's hard to raise kids the way you think you will when you don't have - and 99% of all parents give up trying, while convincing themselves they aren't.
There is definitely an element of that (google project yes badmommymoments for a really awesome essay about getting back on track).
But I also see a metric ton of people who say they'll do this or that differently from people they know, and what they don't realize is, it WON'T WORK. Or, might not work with their kids. It turns out that children, far from being the blank slate at birth hypothesized by Piaget, have inborn personalities and temperaments that require individualized responses.
My oldest is "low persistence," which was highly convenient in the toddler years, because I could just hold a cabinet closed for a couple minutes and then he'd forget he ever wanted to open it... but it'll be a really difficult thing for him to cope with as he gets older, and has to work at things that don't come naturally. My younger son is VERY persistent, and if I just hold the cabinet closed, he will keep trying for a good minute, then will scream and rant (at 14 months, he may not be much for talking, but yes, he can RANT), then will, I kid you not, try to FAKE ME OUT so I will let go and he can go back and open that cabinet. We never needed to install child locks and such for kid #1, but definitely need them for kid #2.
A friend of mine followed the Continuum Concept parenting approach with her oldest, teaching him how to use the tools in his environment properly, rather than simply restricting access. At just over a year, he could put a DVD in the player right-side up, and they never had to worry about him sticking a cracker in there instead. So I asked her for advice when my oldest turned out to be the Implacable Destructo-Baby, who would systematically toss everything left on the coffee table over his shoulder, for example. She smiled, and nodded, and sort of implied I wasn't trying hard enough. Then her second hit that age, and she emailed me an apology... she now had her own Implacable Destructo-Baby, and wanted MY advice!
So people who have never raised a kid talk about how *their* kids will do this or won't do that, but the truth is, they have NO IDEA what the implementation is going to look like until they get there.
So while I agree that there's the issue of getting lazy and compromising one's parental ethics, I think a large part of the difference between what people say they will do and what they actually do has to do with having no idea how to actually implement their grand designs with the children they get.