Xbox 360 hoaxes, social engineering, and gamertag exploits

Proceedings of the Annual Hawaii International Conference on System Sciences

Volumn , Issue , 2013, Pages 3239-3250

  Podhradsky, Ashley ^a   D'Ovidio, Rob ^b   Engebretson, Pat ^a   Casey, Cindy ^c  

^a DAKOTA STATE UNIVERSITY   (United States)

^b DREXEL UNIVERSITY   (United States)

^c DESALES UNIVERSITY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

ACHILLES' HEEL; AT RESTS; IDENTITY THEFT; ONE-TIME; SENSITIVE INFORMATIONS; SOCIAL ENGINEERING; VIRTUAL SOCIETIES; WEAKEST LINKS;

SYSTEMS SCIENCE;

PERSONAL COMPUTING;

EID: 84875550745     PISSN: 15301605     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/HICSS.2013.633     Document Type: Conference Paper

References (57)

1. Swatting Hacker Uses Xbox to Trick Police. (2012, 3 7). Retrieved 6 1, 2012, from Acttion News: http://abclocal.go.com/wpvi/story?section=news/ crime&id=8571101
2. Acquisti, R. G. (2005). Information Revelation and Privacy in Online Social Networks (The Facebook case). ACM Workshop on Privacy in the Electronic Society (WPES) (pp. 71-80 ). Alexandria: ACM.
3. Allen, J. (2012, 2 13). Call Of Duty Game Leads To Prank Lewisville 911 Call. Retrieved 6 1, 2012, from CBS News: http://dfw.cbslocal.com/2012/02/13/ call-ofduty-game-leads-to-prank-lewisville-911-call/
4. Ashley Podhradsky, R. D. (2011). Identity Theft and Used Gaming Consoles: Recovering Personal Information from Xbox 360 Hard Drives. AMCIS 2011 Proceedings. Detriot.
5. AT&T. (2012). Standard TTY. Retrieved 6 1, 2012, from AT&T Relay Services: http://relayservices.att.com/content/2/im-relay-3.html
6. Baker, J. A. (2006). Xbox 360 System Architecture. IEEE Micro, 27-35. Retrieved from Microsoft
7. BBC. (2009, 2 20). Hackers target Xbox Live players. Retrieved 5 22, 2012, from BBC News: http://news.bbc.co.uk/2/hi/technology/7888369.stm
8. CAI Networks. (2000). Strict, Moderate, and Open NAT - Load balancing Xbox Game Servers. Retrieved 5 4, 2012, from CAI Networks: http://www. cainetworks.com/support/how-to-NAT-strict-open.html
9. Charles E. Lively, J. (2003, 12). Psychological Based Social Engineering. Retrieved 5 22, 2012, from SANS: http://www.giac.org/paper/gsec/3547/ psychological-based-social-engineering/105780
10. Computer Gyaan. (2010, 11 2). Disk formatting and Data recovery. Retrieved 5 3, 2012, from Computer Gyaan: http://www.muamat.com/classifieds/174/ events/2010-12-30/11663-Disk-formatting-and-Data-recovery.html
11. Couts, A. (2011, 7 1). Hacker hijacks Xbox 360, sends SWAT team to home. Retrieved 6 1, 2012, from Digital Trends: http://www.digitaltrends.com/gaming/ hackerhijacks-xbox-360-sends-swat-team-to-home/
12. Craigslist. (2012). Craigslist U.S. Retrieved 5 23, 2012, from Craigslist Online Community: http://www.craigslist.org/about/sites#US
13. Crawley, D. (2011, 12 4). How I was hacked. Retrieved 5 24, 2012, from http://venturebeat.com/2011/12/04/how-iwas-hacked-a-tale-of-hijack-xbox-live- andfifa-trading-cards/
14. Dakota State University. (2012). Trojan Football Individual Records. Retrieved 6 7, 2012
15. DataRescue. (2012). DrDD - DataRescue's DD freeware. Retrieved 5 1, 2012, from DataRescue: http://www.datarescue.com/photorescue/v3/drdd.htm
16. David Becker. (2001, 1 6). Microsoft got game: Xbox unveiled. Retrieved 5 4, 2012, from CNET News: http://news.cnet.com/Microsoft-gotgame-Xbox-unveiled/ 2100-1040-3-250632.html?tag=untagged
17. Digiex. (2011, 11 14). Party Buffalo Drive Explorer 2.0.0.9 Download Xbox 360 FATX Hard Drive & USB Explorer. Retrieved 5 4, 2012, from Digiex.com: http://digiex.net/downloads/download-center-2-0/xbox-360-content/apps/ 7328-partybuffalo-drive-explorer-2-0-0-9-downloadxbox-360-fatx-hard-drive-usb- explorer.html
18. Dr. Ashley Podhradsky, D. R. (2011). A Practitioners Guide to the Forensic Investigation of Xbox 360 Gaming Consoles. The 2011 Conference on Digital Forensics, Security, and Law (ADFSL). Richmond: ADFSL.
19. DSU. (2005). DSU Academic, leadership and Athletics Honors in 2005. Retrieved 5 5, 2012, from Dakota State University : http://www.departments.dsu. edu/student-services/honors/2005/default.htm
20. Ebay. (2012). eBay My World: reaver95. Retrieved 5 16, 2012, from Ebay: http://myworld.ebay.com/reaver95
21. eBay. (2012, 6 7). Xbox 360 Consoles. Retrieved 6 7, 2012, from eBay U.S. : http://www.ebay.com/sch/Systems-/139971/i.html?-nkw=xbox+360
22. FCC. (2012). Caller ID and Spoofing. Retrieved 6 1, 2012, from Federal Communications Commission: http://www.fcc.gov/guides/caller-id-andspoofing
23. Ferro, M. (2012, 1 8). Thousands of hacked Xbox Live accounts up for sale on black market. Retrieved 6 6, 2012, from Gamer.Blorge: http://gamer.blorge. com/2012/01/08/thousands-of-hacked-xbox-live-accounts-up-for-saleon-black- market/
24. Game Tuts. (2012). Modio Download. Retrieved 5 5, 2012, from Game Tuts: http://www.gametuts.com/community/modio.php
25. Goodin, D. (6, 30 2011). Xboxer SWATTED by armed cops after online spat. Retrieved 6 6, 2012, from The Register: http://www.theregister.co.uk/2011/06/30/ xbox-swat-police-rait/
26. Heeringa, C. (2011, 9 11). 911 hoax in Sammamish leads to major police response. Retrieved 5 22, 2012, from Sammamish Review: http://sammamishreview. com/2011/09/08/911-hoax-in-sammamish-leads-to-major-policeresponse
27. Kevin D. Mitnick, W. L. (2002). The Art of Deception: Controlling the Human Element of Security. Indianapolis : Wiley.
28. Meer, A. (2008, 9 11). 10 Xbox 360 tricks Microsoft won't tell you. Retrieved 5 22, 2012, from Techradar: http://www.techradar.com/news/gaming/ consoles/10-xbox-360-tricks-microsoft-wont-tellyou-464200
29. Microsoft. (2011, 9 30). Managing my Xbox LIVE account. Retrieved 5 29, 2012, from Xbox Forums : http://forums.xbox.com/xbox-forums/xbox-support/f/12/t/ 97215.aspx?PageIndex=3
30. Microsoft. (2011, 12). Xbox LIVE Terms of Use. Retrieved 5 22, 2012, from Microsoft : http://www.xbox.com/en-US/legal/livetou
31. Microsoft. (2012). Article ID: 906502 - How to format an Xbox 360 Hard Drive or Memory Unit. Retrieved 6 1, 2012, from http://support.microsoft.com/kb/ 906502
32. Microsoft. (2012). Download, move, or delete your Xbox LIVE profile. Retrieved 5 30, 2012, from Xbox Live: http://support.xbox.com/en-US/xbox-360/ settings-and-initialsetup/profile-move-delete
33. Microsoft. (2012). Manage your Xbox LIVE payment options. Retrieved from Xbox: http://support.xbox.com/en-US/billing-andsubscriptions/manage-payment- options/addedit-xbox-live-payment-option
34. Microsoft. (2012). Reaver95's Profile. Retrieved 6 1, 2012, from Xbox: http://live.xbox.com/en-US/Profile?GamerTag=Reaver95
35. Microsoft. (2012). Xbox Live Membership Overview. Retrieved from Xbox: http://www.xbox.com/en-US/live/join?xr=shellnav
36. Microsoft. (2012). Xbox LIVE online safety and privacy. Retrieved from Xbox Live: http://support.xbox.com/en-US/xboxlive/online-privacy-and-safety/ onlinesafety#ec4193e4c26143f18e1960c08f2ed876
37. Microsoft. (2012). Store your saved games in the cloud. Retrieved 5 22, 2012, from http://support.xbox.com/en-US/xboxlive/game-saves-in-the-cloud/cloud- savegames
38. Monisha Pasupathi, U. M. (Vol 37, May 2001). Seeds of wisdom: Adolescents' knowledge and judgment about difficult life problems. Developmental Psychology, 351-361.
39. Mosin Hasan, N. P. (Vol.2, No.2, June 2010). Case Study on Social Engineering Techniques for Persuasion. International Journal on Applications of Graph Theory in Wireless ad hoc Networks and Sensor Networks, 17-23.
40. NDSU. (2007, 9 25). Wrestling Bio. (Gobison.com) Retrieved 6 1, 2012, from North Dakota State : http://www.gobison.com/ViewArticle.dbml?DB-OEM-ID= 2400&ATCLID=659643
41. Nelson, B. (2008). Guide to Computer Forensics and Investigations, Third Edition. Boston : Cengage Learning.
42. Nmap.org. (2012). Nmap. Retrieved 5 3, 2012, from Nmap.org: http://nmap.org/
43. OXID. (2012). Cain and Abel Passowrd Recovery Tool. Retrieved 6 1, 2012, from OXID.com: http://www.oxid.it/cain.html
44. PEW Internet Project. (2008, 12 9). Nearly All US Teens, 53% of Adults Play Video Games. Retrieved 5 22, 2012, from PEW Research Center: http://www.marketingcharts.com/interactive/nearly-all-us-teens-53-of-adults- play-videogames-7114/
45. Plunkett, L. (2012, 5 25). Report: How Scammers Are Stealing Xbox Live Accounts, and the Few Things You Can Do to Protect Yourself. Retrieved 5 29, 2012, from Kotaku: http://kotaku.com/5913228/report-howscammers-are-stealing- xbox-live-accountsand-what-they-do-with-them/
46. Podhradsky, D. A. (2011). Data sanitization policy: How to ensure thorough data scrubbing. Retrieved 6 6, 2012, from SearchSecurity.com: http://searchsecurity.techtarget.com/tip/0,289483,sid14-gci1526403,00.html
47. Protowise Labs. (2011). XFT 2.0 Game Console Forensics is Released. Retrieved 5 22, 2012, from XFT 2.0 Game Console: http://protowise.com/?tag=xft- xbox-forensics
48. Rubin, B. P. (2012, 1 9). Xbox Hacks Continue: Gamer Exposes Microsofts Fraud Prevention Problems. Retrieved 5 23, 2012, from Inside Daily Gaming : http://www.insidegamingdaily.com/2012/01/09/xbox-hacks-continue-gamer- exposesmicrosofts-fraud-prevention-problems/
49. Siciliano, R. (2010, 7 16). What is "Swatting" And How Do I Protect My Family. Retrieved 6 1, 2012, from Infosec: http://news.cnet.com/8301- 17852-3-57377796-71/xbox-360-threat-leads-to-swatteam-raid/
50. Taylor, K. (2012). Hacked on Xbox. Retrieved 5 29, 2012, from Hacked on Xbox: http://www.hackedonxbox.com/
51. Todd Bishop. (2012, 2 3). Xbox 360 tops Wii and PS3 for 1st time in yearly global sales. Retrieved 5 28, 2012, from Geek Wire: http://www.geekwire. com/2012/xbox-360-tops-wii-ps3-1st-time-yearly-global-sales/
52. Washington High School. (2011, 4 17). Classmate Updates. Retrieved 6 6, 2012, from Washington High School Class of 2001: https://sites.google.com/site/ whsclassof01/classmateupdates
53. Xbox Gamertag. (2012). Search Xbox Live Gamertags. (Xbox Community Developer Program (XCDP)) Retrieved 5 23, 2012, from Xbox Gamertag: http://www.xboxgamertag.com/
54. Xbox Live Score. (2012). Maliki67. Retrieved 6 5, 2012, from Xbox Live Score : http://www.xboxlivescore.com/profile/Maliki67
55. Zach Jones. (2006). DSU Freshman Year. Retrieved 5 5, 2012, from ZachJones.com: http://www.zachjones.com/Picutesoffolks/DSUFreshmanYear.html
56. Murph, Darren. (2012) Internet Explorer Coming to Xbox 360 this year, Kinect/Voice Integration and All. Retrieved 8 30, 2012, from http://www.engadget.com/2012/06/04/internet-explorer-coming-to-xbox-360- kinectintegration-and-all/
57. Florian, Cristian (2012). The Most Vulnerable Operating Systems and Applications in 2011. Retrieved 8 30, 2012, from http://www.gfi.com/blog/the- most-vulnerableoperating-systems-and-applications-in-2011/