I got tagged on Instagram by a scammer on a post telling people to go to the link in their bio. The link is http://nastylist-top50.me/1.php (link is now dead). It basically imitates Instagram’s login page and is used to steal people’s usernames and passwords.
So then I thought of the best thing to do that would work. Since the scammers are trying to collect people's login information, what if I give them fake logins? So I created a spambot with Python to enter a bunch of random fake login information so that the scammers won't spend the time to check all of them, which would also be a good thing for people who fell for it. This will also work for other fake login scam websites, such as fake PayPal, Craigslist, Facebook, etc. out there.
I got the idea from this and the code was based on it, but heavily modified https://www.youtube.com/watch?v=UtNYzv8gLbs
Here's the download link https://drive.google.com/drive/folders/14SXoTdkWv2Q41g6Rud-MuVQJ2pRpzAMe?usp=sharing
You will first need to install Python and the module Requests.
First install Python if you haven't already https://www.python.org/downloads/
Then you will need to install the requests module. You can do this by opening CMD and enter:
py -m pip install requests
If you haven't already, download the program and unzip it https://drive.google.com/drive/folders/14SXoTdkWv2Q41g6Rud-MuVQJ2pRpzAMe?usp=sharing
Lastly, run the program through IDLE, or you can also run it with CMD by entering:
py C:\FilePath\smasher.py
To use the program:
1. Run it
2. Enter the URL of the website as prompted. Include the http:// and do not add any extra characters or spaces.
3. You will need to find the input variables from the website.
Use Inspect Element on Chrome. Select "Preserve log" and click on "All".
Now enter something into the website's username and password input.
On inspect element, click on "Headers" and look through all the files under "Name". Look through all until you find your inputted data.
Once you have found it, take note of the variable name (it is in bold and ends with a colon).
4. Enter the variable name of the username input as prompted. Don't include the colon.
5. Enter the variable name of the password input as prompted. Don't include the colon.
6. Enter how many fake logins you would like to enter.
7. Sit back wait as it sends a bunch of fake logins to the scammers!
I recommend using a VPN and also changing the VPN server and re-run the program, in case the scammer is also collecting IP addresses.
Also, please leave me any comments about this program. Feel free to modify it to improve it and share your modified verion!