Be careful of MSN hackers 小心MSN黑客

I was online today browsing the web as usual and procrastinating to draw or not to draw, when a Taiwanese friend, who we had not kept in touch since I graduated from San Francisco 3 years ago,  suddenly messaged me on MSN. The whole conversation was in Chinese and I had summarized and translated them so it went on like this:

今天上網的時候和往日一樣在想要不要動筆。突然，有一位自從3年前我們從舊金山畢業以後就沒聯絡的台灣朋友MSN我。中文談話內容在下面：

xxxxxxxxxxxxxxxxxxxxxxxx

Joe says: (PM 04:28:01)
Is it convenient to help me now?
Can you help me to buy a few MyCard point cards?

€va says: (PM 04:28:38)
myCard? What's that?

Joe says: (PM 04:29:44)
It's sold in all convenient stores. I use it to accumulate points to change for things. Is it convenient to help me buy a few of them?

€va says: (PM 04:31:27)
Do you have a website with some explanation?
For example, like how it looks like, how much?

Joe says: (PM 04:33:28)
Nope... do you have a Taobao account?

€va says: (PM 04:34:08)
No...I only have Paypal

Joe says: (PM 04:34:38)
oh... so do you buy things online?

€va says: (PM 04:36:45)
Yes, Rakuten

Joe says: (PM 04:37:22)
Can you help me buy online then?

€va says: (PM 04:38:35)
Well, if you want me to help you buy, it's better to have a website, photographs and price so that it is easier to make the right purchase.

Joe says: (PM 04:40:04)
Oh, ok, let me go and find them

€va says: (PM 04:40:57)
Oh yes,  long time no talk, and the first thing you want is the card?
Are you still in the states?

Joe says: (PM 04:42:11)
Yes, so when are you going back to Taiwan?

€va says: (PM 04:44:12)
Taiwan? I'm a Singaporean leh

Joe says: (PM 04:45:12)
Oh, forgot, haha

€va says: (PM 04:46:07)
duh...

Joe says: (PM 04:52:13)
http://www.*******.com
^^please visit my blog and help me push up the hits^^

€va says: (PM 04:52:57)
It's not a spam isn't it?
(I became suspicious and went to google but nothing shows up. So I checked whois and found out that the domain was registered under a China address)

Joe says: (PM 04:53:17)
No, it's my blog

€va says: (PM 04:55:51)
The url sure looks suspicious XD
(At this moment, I start to suspect that the person who is talking to me is not the Joe I know, so I also didn't visit the suspicious URL)

Joe says: (PM 04:56:23)
Why so?

€va says: (PM 04:57:09)
Why don't you choose your name?
Didn't you have your own website already?
Is your website still around?

(no response)

You're not Joe right?
Are you a China hacker?

(Then "Joe" went offline immediately)

I believe that the hacker had asked me about whether I did online shopping so that after I visit the malicious website, some trojan or virus would be downloaded to hack into my accounts and steal my credit card info. The moral of the story is... Be careful of any url that your friend gives you. Always make sure that the other party is really your friend! Hackers nowadays can even try to impersonate them!

Here goes the original Chinese version:

Joe says: (PM 04:28:01)
現在方便幫我個忙嗎
幫我買幾張MyCard點數卡方便嗎

€va says: (PM 04:28:38)
myCard？那是什麼？

Joe says: (PM 04:29:44)
便利商店都有賣啊
我拿來集點換東西用
方便幫我買幾張嗎

€va says: (PM 04:31:27)
有網站說明嗎？
沒有什麼人解釋長什麼樣子？多少錢之類的嗎？

Joe says: (PM 04:33:28)
沒耶
你有淘寶帳戶嗎

€va says: (PM 04:34:08)
沒有...我只有paypal

Joe says: (PM 04:34:38)
喔喔
那你又在網上買東西嗎

€va says: (PM 04:36:45)
有啊，樂天

Joe says: (PM 04:37:22)
那可以幫我網上買嗎

€va says: (PM 04:38:35)
這個，要幫忙買東西最好有網址，有照片，有價錢
比較好買
什麼都沒有的話，萬一買錯了不好

Joe says: (PM 04:40:04)
嗯嗯
我找一下喔

€va says: (PM 04:40:57)
對了，幹嘛那麼久沒聯絡，就要買卡？
你還在美國嗎

Joe says: (PM 04:42:11)
對呀
你什麼時候回台灣呢

€va says: (PM 04:44:12)
回台灣？我是新加坡人leh

Joe says: (PM 04:45:12)
嗯
忘了
哈哈

€va says: (PM 04:46:07)
靠...

Joe says: (PM 04:52:13)
http://www.*******.com
^^來看我的部落格幫我衝衝人氣喔^^

€va says: (PM 04:52:57)
這不是什麼spam 吧？
（我這時開始起疑心，去google和檢察whois，發現申請那網址的是中國地址）

Joe says: (PM 04:53:17)
不是喔
是我的部落格

€va says: (PM 04:55:51)
可疑的url的樣子XD
(我開始懷疑講話的不是我認識的Joe，因為口氣不像我認識的本人，所以我也沒去可疑的網站）

Joe says: (PM 04:56:23)
為啥

€va says: (PM 04:57:09)
為什麼不要選名字？
你之前不是有個人網頁了嗎？
個人網站還在嗎？

（沒有反應）

你不是joe吧
是中國hacker吧

（"Joe"立刻下線了）

我懷疑對方問我有沒有網購的原因，可能因為等我去黑客網站時，會被木馬侵入，盜取我的戶頭和信用卡號碼。現在的黑客原來是那麼狡猾的，所以要大家要小心！不要隨便點入朋友給你的網址。一定要確認對方真的是你的朋友！因為現在黑客竟然會冒充身份的！