Got a phising SMS this week whis lead me to a fake DHL-website and asked me for personal data, credit card data and so on.
Though if they like collecting data so much I might help them and wrote the following script to help them collecting credit card data:
#!/bin/python3
import requests
import ccard
import pprint
import random
from termcolor import colored
target_addr="https://<SCAMMERS-DOMAIN>/PHP/send.php"
counter=0
while 1:
cc=str(ccard.visa())
cc_str=cc[0:4]+" "+cc[4:8]+" "+cc[8:12]+" "+cc[12:16]+" "
cvv=(random.randint(100, 999))
year=(random.randint(23, 27))
month=(random.randint(1, 12))
valid_date=str("{:02d}".format(month))+"/"+str("{:02d}".format(year))
cc_data={"cc":cc_str,"exp":valid_date,"cvv":cvv,"type":"livraison"}
r=requests.post(target_addr,json=cc_data)
if r.status_code != 200:
print(colored("ERROR - statuscode: "+r.status_code, "red"))
else:
counter=counter+1
print(counter, end="\r")
The script will just generate face credit card numbers CVVs and face validation-dates and post it to the script, the scammer used to receive the data from the phising-site.
