Autotrader UK - interesting examples of fraudulent adverts

An interesting example

Re-listed by scammer on 31 Mar and again on 3 Apr

http://www.autotrader.co.uk/used-cars/bmw/x5/used-bmw-x5-xdrive30d-m-sport-5dr-auto-shepherds-bush-fpa-201404033043106?logcode=p 3 Apr _

£8,046 2012 BMW X5 XDrive30d M Sport 5dr Auto Diesel Estate 3.0 - Reg YG12UBC

Photos from here

http://www.claridgescars.co.uk/used/bmw/x5/xdrive30d-m-sport-5dr-auto/luton/bedfordshire/14905061

BMW X5 3.0 xDrive30d M Sport 5dr Auto Price: £34,950

The interesting thing about this advert is that it's posted on an anonymous dealer profile with a fake phone number.

Though I say it's anonymous, actually it isn't, but I'll do some research and hopefully reveal what's going on some time in the near future.

You find one - you can usually bet there's a whole nest of them somewhere.

More.

http://www.autotrader.co.uk/used-cars/mercedes-benz/c-class/used-mercedes-benz-c-class-c250-cdi-blueefficiency-sport-5dr-auto-manchester-fpa-201403212701413?logcode=p

£5,000 2009 Mercedes-Benz C Class C250 CDI BlueEFFICIENCY Sport 5dr Auto Diesel 2.2

Photos taken from here

http://www.ebay.co.uk/itm/Mercedes-Benz-C-Class-C250-CDi-BlueEfficiency-Sport-5dr-Diesel-Estate-Auto-/281288360523

£15,450.00 2009 Mercedes Benz C Class C250 CDi BlueEfficiency Sport 5dr Diesel Estate Auto

The fact that I can now pick up these fraudulent adverts increases the overall numbers significantly - not that the number was small to start with.

One of my favourites and clearly one of the scammers' favourites.

Re-listed by scammer 2x on 31 Mar and again on 1 Apr and 2x again on 2 Apr and 2x on 3 Apr and again on 4 Apr and again 8 Apr.

http://www.autotrader.co.uk/used-cars/audi/a1/used-audi-a1-1-4-tfsi-competition-line-3dr-s-tronic-hammersmith-fpa-201404083172215?logcode=p 8 Apr

£5,085 2012 Audi A1 1.4 TFSI Competition Line 3dr S Tronic Hatchback - Reg GV61FRK

Photos taken from

http://www.ebay.co.uk/itm/2012-61-Audi-A1-1-4-TFSI-122PS-S-tronic-Competition-Line-WHITE-SAT-NAV-B-TOOTH-/261417367282?pt=Automobiles_UK&hash=item3cddb076f2&nma=true&si=vsTw1f1SNeEnQEg48HzO32k4vYQ%253D&orig_cvip=true&rt=nc&_trksid=p2047675.l2557

2012/61 Audi A1 1.4 TFSI 122PS S tronic Competition Line WHITE SAT NAV B/TOOTH £15,500.00

See preceding post for related advert

http://ebm.cheetahmail.com/c/tag/hBTIJBUB8hmZwB8i6pDAAePvR.B8hmZwG-/doc.html?t_params=DEALER_PHONE_NUMBER%3D%252807834%2529%2520444786%26DEALER_EMAIL%3Dprettyhomicide1748%2540ospawn.onmicrosoft.com%26MASTER_IMAGE_ID%3D6a9b7459e37b978b36a3bfb6036ee624%26ADVERT_DESCRIPTION%3D3%2520Door%2520Hatchback%252C%2520Petrol%252C%2520Automatic.%2520A%2520Stunning%2520Audi%2520A1%25201.4%2520TFSI%2520Competition%2520Line%2520Model%2520In%2520striking%2520...%26ADVERT_TITLE%3DAudi%2520A1%25201.4%2520TFSI%2520Competition%2520Line%25203dr%2520S%2520Tronic%2520Hatchback%26ADVERT_ADVERTURL%3Dhttp%253A%252F%252Fwww.autotrader.co.uk%252Fclassified%252Fadvert%252F201403212706132%26DEALER_NAME%3DSanders

Re-listed by scammer on 31 Mar and on 1 Apr and again on 3 Apr and again on 8 Apr

http://www.autotrader.co.uk/used-cars/audi/a5/used-audi-a5-2-0-tdi-black-edition-2dr-start-stop-2011-hammersmith-fpa-201404083170048?logcode=p 8 Apr

£8,028 Audi A5 2.0 TDI Black Edition 2dr [Start Stop] (2011) - Reg YH61UFN

Photos taken from here

http://www.ebay.co.uk/itm/2011-61-AUDI-A5-2-0TDi-S-LINE-BLACK-EDITION-COUPE-WHITE-/301129819652

2011 61 AUDI A5 2.0TDi S-LINE BLACK EDITION COUPE. WHITE. Lytham St Annes
Lancashire £22,500

Another regular fraudulent advert posted 26 Mar and again on 8 Apr

http://www.autotrader.co.uk/used-cars/mercedes-benz/cls/used-mercedes-benz-cls-cls-350-cdi-4dr-tip-auto-southgate-fpa-201404083171523?logcode=p 8 Apr

£8,057 2010 Mercedes-Benz CLS 350 CDI 4dr Tip Auto Diesel Coupe 3.0 Saloon for sale in Southgate

Photos taken from here

http://www.ebay.co.uk/itm/2010-MERCEDES-BENZ-CLS350-CDI-7-G-TRONIC-COMAND-AUTO-BLACK-/301098859954

2010 MERCEDES-BENZ CLS350 CDI 7 G-TRONIC COMAND AUTO BLACK Item location:HYDE, Cheshire, United Kingdom £17,450

£14,850.00 Declined
£14,000.00 Declined

Interesting to note that the advert is posted as being by a dealer.

The only information appearing on the advert is the location Walthamstow and the name 'Humphrey' and that it's posted by a dealer. Using the site search function, no dealer of that name comes up for Walthamstow !

Fraudulent advert

A regular listing I first spotted on 26 Mar and has been appearing regularly since then.

http://www.autotrader.co.uk/used-cars/audi/a1/used-audi-a1-1-4-tfsi-competition-line-3dr-s-tronic-brockley-fpa-201404173414671?logcode=p 17 Apr

£5,036 2012 Audi A1 1.4 TFSI Competition Line 3dr S Tronic Hatchback - Reg GV61FRK - Phone 07833 155238

Photos taken from

http://www.ebay.co.uk/itm/2012-61-Audi-A1-1-4-TFSI-122PS-S-tronic-Competition-Line-WHITE-SAT-NAV-B-TOOTH-/261417367282?pt=Automobiles_UK&hash=item3cddb076f2&nma=true&si=vsTw1f1SNeEnQEg48HzO32k4vYQ%253D&orig_cvip=true&rt=nc&_trksid=p2047675.l2557

2012/61 Audi A1 1.4 TFSI 122PS S tronic Competition Line WHITE SAT NAV B/TOOTH £15,500.00

Re-listed 7 Apr and again 8 Apr

http://www.autotrader.co.uk/used-cars/mini/coupe/used-mini-coupe-1-6-john-cooper-works-3dr-southgate-fpa-201404083171525?logcode=p 8 Apr

£5,040 2012 MINI 1.6 John Cooper Works 3dr Coupe - Mayfair Reg VA61AON

Bizarrely it exists currently under two separate listings at different prices at the same time claiming to be at two different locations. I've taken screen prints which I'll post up in due course.

http://www.autotrader.co.uk/used-cars/mini/coupe/used-mini-coupe-1-6-john-cooper-works-3dr-leyton-fpa-201404073141436?logcode=p 7 Apr

£5,096 2012 MINI 1.6 John Cooper Works 3dr Coupe - Leyton Reg VA61AON

I'll make copies of both listings as an example of how bad things have become.



Photos taken from here

http://archive.freemotormarket.co.uk/listings_6/Mini_Coupe_1456876.html

2012 Mini Coupe £16,595

http://www.autotrader.co.uk/used-cars/audi/a5/used-audi-a5-2-0-tdi-177-black-edition-2dr-holmfirth-fpa-201404033045418?logcode=p 4 Apr

£5,895 2010 Audi A5 2.0 TDI 177 Black Edition 2dr Coupe Special - Reg WN11LRE

Photos taken from here

http://www.ebay.co.uk/itm/Audi-A5-Coupe-2-0-TDI-S-Line-/221368109568?nma=true&si=vsTw1f1SNeEnQEg48HzO32k4vYQ%253D&orig_cvip=true&rt=nc&_trksid=p2047675.l2557

Audi A5 Coupe 2.0 TDI S-Line 2011 Ended: 14 Feb, 2014 20:59:55 GMT
Price:£21,725.00 Cheltenham

Interestingly the scammer has attempted to hide the vehicle registration number as I've been using them to warn potential buyers. Hiding them alerted me.

Fraudulent Advert

http://www.autotrader.co.uk/classified/advert/201404173414675/sort/default/usedcars/model/qashqai%2B2/make/nissan/page/1/postcode/e178aa?logcode=p

£5,053 2012 Nissan QASHQAI+2 1.5 DCi [110] Tekna 5dr Diesel Hatchback - Reg PE12EKO - Phone 07822 072527

Photos taken from here

http://www.chorleygroupfiat.co.uk/used/used-nissan-qashqai-2-tekna-chorley-79341012.asp

Vehicle Nissan Qashqai+2 Tekna
Reg Date 3/26/2012
Mileage 12025
Colour Arctic White
Body Style Hatchback
Engine Size 1500
Gearbox Manual
Fuel Diesel
Registration PE12EKO
Retail Price £18000

http://www.autotrader.co.uk/used-cars/audi/a1/used-audi-a1-romford-fpa-201404263693514?logcode=p 26 Apr

Tel: (0117) 9989043 - Romford

£4,050 2005 Audi A1 1.6 TDI Sport 3dr Diesel Hatchback - Reg OV60LWM

The last time these photos appeared on Autotrader UK on 10th April 2014

http://webcache.googleusercontent.com/search?q=cache:pD3crVK4TygJ:www.autotrader.co.uk/used-cars/audi/a1/used-audi-a1-1-6-tdi-sport-3dr-cricklewood-fpa-201404103227289+&cd=1&hl=en&ct=clnk&gl=uk

Tel: (0117) 9859043 - Cricklewood

£4,050 2006 Audi A1 1.6 TDI Sport 3dr Diesel Hatchback - Reg OV60LWM

Setting aside all other irregularities and variations, the fact is that it would be illegal to put a newer registration on an older car. It would be illegal to sell a car like this - even if the seller had it to sell.

The next time these photos appear, perhaps the discrepancies will be corrected. The question is - how many more of these fraudulent adverts have been posted.

Be very careful. I can't spot them all.

Boycie, can I ask if you have noticed a general reduction in fraudulent listings over the last couple of weeks? I know you haven't been well lately and may not have spent as much time looking but after speaking with Auto Trader and discussing their new methods to detect and remove listings I would like to know how effective it has been.

Jules

The 'singletons', that is the adverts with the email contact addresses inserted in to the photographs, are being removed promptly and I am not seeing them recently.

The dealer hacks remain at the same level but, it has always been my belief that they are just different delivery methods for the hacker/fraudster, and that the vulnerability remains unchanged. I am not referring so much to a computer system vulnerability, but a weakness in the overall set up that means that what appears to be flexible usability for the dealer is a Godsend to a hacker who, once having 'cracked' a dealer account, can post his fraudulent adverts anonymously or under multiple identities. Whether or not that's true is largely irrelevant but, as I mention later, I do often get an insight in to the login ID's the hacker is misusing.

Of course I understand the commercial pressures to offer an attractive and flexible package, but that is counter productive if it's just enabling a hacker to trash the site. I have been a little poorly but, counter intuitively, that means I can put more time and effort in to this, as it takes my attention off how I feel. I just don't feel very communicative, but that's my problem.

I don't expect Autotrader UK to explain how their system works to me, though I can make educated guesses, and from some of the links to fraudulent adverts I've been posting I can clearly see that at times the hacker appears to be using multiple linked account ID's. At some stage I'll probably put some work in to tracking their usage.

Don't take this the wrong way Tools, but it's not my job to alert Autotrader UK to fraudulent adverts. They can use this forum as a resource if they need assistance, but with system access they shouldn't need my help.

As you know my background is banking from the days when security and system security was rigidly effective, and I have doubts whether or not organisations are willing or capable of effecting the changes to achieve a similar state.

I'll try and catch up with all contacts over the weekend and I would be willing to help Autotrader UK in any way that I can, but not in a way that will deflect me from the work I'm currently doing.

The unintended benefit of the current level of fraudulent adverts is that people will be much more cautious when using ad sites and, from some of the other adverts I can't post as obvious frauds, that is very wise.

The only effective solution is to bring the resources of the police to bear on the gang doing this who are also 'attacking' the Ebay and Gumtree sites (you may have noticed the posts about the 90 fraudulent posts by one scammer). I have passed on information that would help locate these people. My challenge is whether these sites are serious about stamping this fraud out ? The police won't listen to me, but they may listen to commercial interests.

The 'singletons', that is the adverts with the email contact addresses inserted in to the photographs, are being removed promptly and I am not seeing them recently.

The dealer hacks remain at the same level but, it has always been my belief that they are just different delivery methods for the hacker/fraudster, and that the vulnerability remains unchanged. I am not referring so much to a computer system vulnerability, but a weakness in the overall set up that means that what appears to be flexible usability for the dealer is a Godsend to a hacker who, once having 'cracked' a dealer account, can post his fraudulent adverts anonymously or under multiple identities. Whether or not that's true is largely irrelevant but, as I mention later, I do often get an insight in to the login ID's the hacker is misusing.

They are introducing new steps for dealer accounts so that if any account login or contact details are changed the dealer will be notified and asked to confirm the change

Of course I understand the commercial pressures to offer an attractive and flexible package, but that is counter productive if it's just enabling a hacker to trash the site. I have been a little poorly but, counter intuitively, that means I can put more time and effort in to this, as it takes my attention off how I feel. I just don't feel very communicative, but that's my problem.

I don't expect Autotrader UK to explain how their system works to me, though I can make educated guesses, and from some of the links to fraudulent adverts I've been posting I can clearly see that at times the hacker appears to be using multiple linked account ID's. At some stage I'll probably put some work in to tracking their usage.

They explained many more systems they have/will have in place, needless to say I can't disclose them

Don't take this the wrong way Tools, but it's not my job to alert Autotrader UK to fraudulent adverts. They can use this forum as a resource if they need assistance, but with system access they shouldn't need my help.

As you know my background is banking from the days when security and system security was rigidly effective, and I have doubts whether or not organisations are willing or capable of effecting the changes to achieve a similar state.

I'll try and catch up with all contacts over the weekend and I would be willing to help Autotrader UK in any way that I can, but not in a way that will deflect me from the work I'm currently doing.

The unintended benefit of the current level of fraudulent adverts is that people will be much more cautious when using ad sites and, from some of the other adverts I can't post as obvious frauds, that is very wise.

The only effective solution is to bring the resources of the police to bear on the gang doing this who are also 'attacking' the Ebay and Gumtree sites (you may have noticed the posts about the 90 fraudulent posts by one scammer). I have passed on information that would help locate these people. My challenge is whether these sites are serious about stamping this fraud out ? The police won't listen to me, but they may listen to commercial interests.

As you know I'm working on that side of things

I must admit that all you say sounds very good Tools and I'll be the first to acknowledge Autotrader UK's efforts if they introduce these new security features. I'm not so naive as not to realise that the first priority of any commercial entity is to maximise revenue, and AT UK haven't lost a penny through any hack, but that's ignoring the effect of a hacker daily trashing their website, which is their business.

The hacker won't let go easily and I can foresee other tactics he may use, but I'm not going to speculate and give them ideas. The criminals behind this aren't interested in isolated frauds. Their tactic is effectively to pollute every major vehicle website and leave buyers with them as the alternative wherever they shop. Purging them from one major website will undermine their whole strategy and it will also promote AT UK as a more secure site to use. Allowing the hacker to continue isn't an option.

Having said this I'm very critical of UK banks, as without bank accounts to launder stolen money through this fraud wouldn't exist, and I say this in spite of my own banking heritage. From recent news items it appears that some banks are discovering how dangerous such accounts are to themselves. When a bank is over half a million pounds out of pocket through money laundered through their own accounts, that's even more incentive to act than regulatory action by the FCA.

It appears that the hacker is demonstrating, from tonights performance, that just by hacking one dealer's account he can fill the AT UK with fraudulent adverts. I'll adapt my counter-strategy accordingly.