#tarunpodder

BEWARE TARUN PODDER CONMAN…HIS SCAM:

Anatomy of a Long-Con Phish

A fraudster on LinkedIn used my online profile in an apparent attempt to pull off a wide-ranging scam business venture.

Phishing is one of the oldest fraud techniques online. Phishers often utilize a spray-and-pray method to hit as many potential victims as possible. The aim of such an attack is quick profit via the harvesting of user login or banking credentials. Once the victim surrenders his/her valuable information, the phisher moves on, either to the next victim or a different campaign altogether.

But some phishing attacks are entirely different. For the lack of a better term, I call them "long-con phishing." I was on the receiving end of one such phishing scam recently. In March, I received this LinkedIn message:

 Even though I was connected to this guy, Tarun Poddar, I had no idea who he was (Okay, I admit, I have way too many LinkedIn connections. But hey, it's LinkedIn.) Mr. Poddar here, who claimed to be a board member at Sequoia Capital, was looking for people who could join him in his new "venture capital firm." His profile showed association with Sequoia Capital and that he had graduated from Stanford University with an Master of Business Administration degree.

His work experiences showed executive positions at high-profile companies like Apple, Boeing, and Cognizant.  

Sponsored Content

The Threat from the Internet -- and What Your Organization Can Do About It

For most enterprises, the increasing use of the Internet has created new business opportunities, greater efficiencies, and a greenfield for innovation.

Brought to you by Dark Reading

But if you scroll down on Mr. Poddar's profile and look at his recommendations -- none of them could spell or write in proper English.

I was mildly amused at how flashy his profile was yet how obvious the phishing techniques were. Never mind a reputable venture capital firm would never look for partners or investors on LinkedIn - the poorly worded recommendations were a classic sign of a made-up profile. I wondered if this was a sockpuppet account, so I googled Tarun Poddar. What came up was quite interesting. I found a press article about his being named Apple's Process Head for Singapore, and another article on him being a "best-selling author" of a book called Love Turns Back. Both were from media sites of questionable quality. 

I also found a news article on a Delhi conman, Tarun Poddar, who posed as best-selling author and executives of global brands to defraud unsuspecting victims.

The article described Poddar, a 24-year-old computer science graduate, swindled a sizable sum from a Delhi woman by promising to get her nephew admitted to a top school. He posed as a best-selling author and a high-power executive with valuable connections. The article went on to say that he had taken a published book, redesigned the front and back covers, and republished it with an online shopping app. He also wrote many of the positive reviews himself for the book.

A further look found that Poddar has a YouTube channel and a SoundCloud account, both claiming him as a best-selling author and a high-flying executive of multinational corporations.

This guy is a piece of work, I remember saying that to myself. I briefly considered humoring him to see how far this would go, but thought better of it - I simply did not have the time. So I did not respond and put that out of my mind. 

A few weeks later, I received a LinkedIn message from a different person, whose profile looked like a real professional. Her message to me was simple: "Do you know Tarun Poddar?" 

I was intrigued by this and decided to respond: "No I do not." 

What transpired after that was quite interesting. She said: "Do you know that they listed you on their website as a managing partner for their new venture fund?" She gave me the URL of Foxhog Ventures, a new "company" started by Tarun Poddar.

For a few seconds I thought to myself, "Is this a sophisticated, coordinated phishing scam to get me to click on the URL?" But I decided that she looked real enough and that this was probably too sophisticated a coordination for them to pull off. So I took a barely used Chromebook and went to Foxhog's website.