Detectives without diplomas.

[Арсен]

Detectives without diplomas.

View attachment 7760

It is no secret that fraudsters often try to squeeze every last detail out of their victims. But what if the victim already realized that she had been deceived? Everything is simple - deceive in a new way by offering help in solving problems.

This technique, for example, even 20 years ago, was perfectly mastered by Nigerian scammers. The scheme is as follows. Suppose a person believed that the African prince in exile really wants to share part of his fortune with him in exchange for the service provided and transferred a certain amount of money to the attackers. The receipt of money in the account of fraudsters is a kind of signal for them: the client is trustful and creditworthy. The process of spinning up the victim begins with the goal of pulling everything from it to the last. However, sooner or later, the victim runs out of money or patience, and in general she begins to suspect something. And then the scammers use Plan B.

In the case of Nigerian letters, this same plan “B” was that a letter was sent to the victim on behalf of a police officer who promised to help return the money already transferred to the scammers for a small fee / commission / tax, etc. Well, then the whole story unfolds in the second round.

Well, nothing has really changed in the last 20 years. And the technique “bad scammers - a good cop” is still actively used to this day, and on a grand scale.

Have you heard anything about online police? Not the one that the “K” Office is about, but about some private detective agency with the name that helps victims of blackmail, extortion and online fraud?

Surely not heard. We also learned about it by chance, understanding the features of the national sextortion, in other words, blackmail on sexual grounds, which has been flourishing on the net for a good ten years. The essence of such blackmail is simple - the attackers in one way or another get at their disposal intimate photographs or videos of the victim, after which they begin to extort money, threatening to otherwise post compromising materials in the public domain.

The main danger of such blackmail is that it can continue indefinitely. Attackers have no reason to delete incriminating photos and videos, because with their help you can get a steady income.

Reading the revelations of the victims of blackmail in social networks, we constantly met comments mentioning the miraculous service that helps to remove unwanted photos and videos from the Internet.

Links in the comments led to such a curious VKontakte group: Fehler | VK and sites: www.policeshantaz.ru , https://police-online.ru , https://policeshantaz.forum2x2.ru .

View attachment 7761


Of course, helping victims of extortion is a worthy task, but at the same time not an easy one, because removing compromising materials with the guarantee that they will not come up anywhere else is a task that is far from always possible even for a real police force. So we decided to understand a little how the so-called “Internet police” work and who is behind this mystical organization.

Necessary note: this article contains only the most interesting points from the significant amount of information that we received during this investigation. The publication of the entire amount of data does not help understanding the essence of the issue, but on the contrary, confuses readers. Therefore, we intentionally omit some details, including contact details that are not directly related to the case or are dead ends.

First, let's see what interesting can be found in the group in contact. First of all, the advertising video attracts attention , shot quite at a decent level - at the level of a regional television channel. A bit of Google Maps magic, and we find that the video was shot in Donetsk. In the initial shots, the Donbass Arena stadium and the Victoria Hotel building clearly loom in the background.

View attachment 7762

The video was shot by Gorilla Style, it can be found in the portfolio of the studio In contact: GorillaStyle | VK .

View attachment 7763

An employee of online-police.net named Vlad Kartavets turns out to be Donetsk sports journalist Vlad Baranenko ( Wlad Baranenko | VK )

View attachment 7764

Well, real detectives rarely want to shine on camera, so let's continue our research. Let's try to analyze the sites of the "Internet police". Despite the fact that only one of the indicated resources is currently available - the forum https://policeshantaz.forum2x2.ru , in the web archive we found page samples of interest to us.

So, the website police-online.ru used a design that was very reminiscent of the sites of public authorities.



View attachment 7765

“Independent Investigation Committee” sounds very loud. Click on the “Get Help” button.




View attachment 7766

View attachment 7767

View attachment 7768

View attachment 7769


We don’t want to offend anyone, but the application form will give 100 points ahead of the similar form on the Ministry of Internal Affairs website.

Let's see who is behind this site. We open the section "About Us".

View attachment 7770


Very loud statements. A detective agency gives a one hundred percent guarantee of removing incriminating evidence and a refund of money and fully reveals the identity of a fraudster ... If we were a desperate person whose intimate photos were about to go for a walk on the network, we would probably believe it, but we are old cynical burned out who They know that not a single investigation, let alone a computer crime investigation, can be completely effective. Well, okay, let's write this off to the marketing ploy.

Let's see information about the legal entity. What do we see? The organization was liquidated on December 12, 2018, having existed for 3 years. The financial statements of the company are also very curious - it demonstrates the complete absence of financial and economic activities for all three years of the detective agency's existence.

But do we believe in good deeds? Suppose people have registered a detective agency to help victims of fraud and blackmail for free. We understand, it sounds so-so.

View attachment 7771


Lebedev is listed as one of the founders of the detective agency. But let's now stop temporarily believing in good deeds and suppose the idea that the agency may not have anything to do with this site at all - someone just used the data of a dead company. Could this be? Quite. Moreover, there is no contact information other than the aforementioned form on the site and it is very problematic to understand with whom exactly we are dealing.

The second site from the list is www.policeshantaz.ru - currently also unavailable, but previously on this domain a redirect to the third site hung - https://policeshantaz.forum2x2.ru . This resource lives and lives and, perhaps, it is it that is of greatest interest now.

View attachment 7772

Here, with the contact details, everything is opposite - excellent. Almost every message mentions the phone +79930196628 and Telegram: Help with blackmail . By the way, the same data was also indicated in the corresponding VKontakte group.

View attachment 7773

The forum is driven by a certain "Captain", whose photo is an avatar ...

View attachment 7774


Russia in the Kirov region, which probably does not suspect that his image is used on the site either of the Internet police, or of a detective agency. The level of trust in the resource is rapidly falling. However, the site has a lot of reviews from people supposedly saved from blackmailers, so let's dig a little deeper.

In addition to the VKontakte community and the above sites, the Internet police has a Facebook group at: Bei Facebook anmelden | Facebook .

View attachment 7775

And this group is very interesting. First of all, by the fact that it consists of one person, he is also the creator of the group - someone under the pseudonym “Andriana Malta”. It somehow does not look like either detective Lebedev or the mysterious captain from the forum.

View attachment 7776

The photo of Andriana was taken from the Miss Police of the Republic of Crimea 2018 contest.

View attachment 7777


Given that Andriana’s data is clearly fake, let's see what email address this account is bound to. Through simple manipulations known to any OSINT fan, we find out that the account is tied to an email address: rXXXXXXX4@mail.ru .

And now we need a little luck. And she smiled at us. When we collected information on blackmail, we came across such a group In contact: Blackmail models. | VK .

View attachment 7778

The group is completely spammed by the advertising of the now deceased community. Fehler | VK , but if you scroll through the messages a couple of years ago, you can find a lot of interesting things in them. For example, mention of the blackmailer’s email address.

View attachment 7779


So, the situation is like in the game “Field of Miracles”. We have Andriana Malta's email address - rXXXXXXX4@mail.ru , from which we know only the total word length and two letters: the first and last, as well as the mailing address referred to as the contact address of the blackmailer - reeee3444@mail.ru .

The first and last letters, as well as the word length, match. But this is by no means enough to draw any conclusions. So far this is just an interesting coincidence.

Let's go to Mail.ru and study the user profile reeee3444.

View attachment 7780

Wow! The account is very active in the "Answers" service. Only here, in almost all comments, the user reeee3444 copies the same text with a recommendation to visit the site ... policeshantaz.ru. Now this resource is also unavailable, but in the past the domain had a redirect to the forum we already knew https://policeshantaz.forum2x2.ru .

View attachment 7781
View attachment 7782View attachment 7783


It looks like a drum "sector prize" and mail reeee3444@mail.ru is directly related to the Andriana Malta account, and therefore to our “online police”.

But we continue to study the activity of our user on the "Mail.ru Answers".

View attachment 7784


Oh what is that? Is it really a classic divorce for nude photos with the aim of further blackmail? And here is another curious answer, which suggests banning someone else’s help group for blackmail victims.

View attachment 7785

Competitive fight? In general, reading the answers of this user is a very interesting lesson. What is it worth, for example, like this.

View attachment 7786


This answer is repeated many times, only the amount changes: 3 million, 2 million rubles, 200 thousand euros, 10 thousand dollars ... In some cases, in addition to mail, the site is mentioned https://prodatdevstvennost.ru

View attachment 7787

And this is very interesting, since the same site, and at the same time the forum known to us as “Internet police”, are mentioned in the group “Blackmailing Models”.

View attachment 7788

The first of them belongs to Alexander Demorchuk, who lives in the city of Livnevo, Novosibirsk Region.

View attachment 7789

The second photo is also apparently taken on the Internet.

View attachment 7790


Since it belongs to a certain Marseg Shagirov, who does not have the best reputation in the network.

View attachment 7791


A Google search shows us that the hero of today's story not only helps blackmail victims and buys virginity, but also possesses the skills of very strong witchcraft, helping to return the prodigal husband to the family.

View attachment 7792


To summarize the subtotal. At the moment, we know that the Andriana Malta, connected to the “Internet police” and obviously fake Facebook account, was created from email reeee3444@mail.ru . This email address is used, on the one hand, to advertise the Internet Police forum and, on the other hand, to advertise sites selling virginity and send nude photos in exchange for an iPhone. In addition, this email address is mentioned in social networks as the contact address of a fraudster and blackmailer.

By the way, in addition to advertising the forum "Internet police", in social networks you can find groups created by their victims. For example: https://policeshantaz.forum2x2.ru/ scammers | VK .

View attachment 7793


So. Now that we already understood that everything is far from clean with the “Internet police”, we will try to reveal the identities of our online investigators without diplomas. But about who the cyber-detective blackmailers really are and what does Novosibirsk have to do with it, read the next part of the investigation organized by our channel @ In4security .

Сыщики без дипломов. Часть первая

Не секрет, что мошенники нередко стараются выжать из своих жертв все до последнего. Но что делать, если жертва уже поняла, что ее обманули? Все просто – обмануть по-новому, предложив помощь в решении проблем. Этот прием, например, еще лет 20 назад отлично освоили нигерийские мошенники. Схема...

te.legra.ph

Great article!

 

[Макаров Виталий Николаевич]

Thanks for the interesting material provided! Every day more and more scammers and swindlers !!!