Why...
...is there no effort on the part of law enforcement to eradicate this crap? Here's the idea: Get a few credit cards (or one-time card numbers issued on a case-by-case basis through an automated system similar to that in use in the USA for one-time prepaid cards) specially issued in collaboration with the CC companies which flag up a merchant's account as soon as they're used, "honeypot cards" if you like. Issue these to a few good, trusted researchers and let them reply to these scams. Result: The scammer's financial resources flagged and monitored (and money frozen - one use of a honeypot card freezes the merchant's account without further ado) until a case can be brought or a mistaken use of the honeypot card rectified (there will be a couple, I have no doubt). You could probably do the same with PayPal, a honeypot account that immediately removes the scammer's ability to withdraw funds and freezes the account, although PP seem to give less than a rat's posterior about fraud these days.
Sod technical countermeasures, hit 'em where it hurts. Once they can no longer make money in this manner, they'll lose interest in the malware. It's so simple I can't believe it hasn't been suggested. It's also sneaky, underhanded, almost undetectable until it's too late and so much fun to imagine the scammer suddenly without access to funds after rubbing his greasy hands at the thought of yet another sucker, so it appeals to my darker nature and my finely tuned "fight fire with fire" sense of justice.
Yes, it verges on vigilantism, which is why I said trusted researchers. Anyone legit has recourse to the courts. Anyone scamming would be stupid to complain as it would immediately give away their identity, something no 'net scammer wants. Then, once the case is proven, simply get the transaction records, reverse the transactions and the 'net becomes a more trustworthy place, the CC companies aren't covering losses to scams and everyone is happy. Except the scammer, of course. If he fights it, he's identified. If he doesn't, he's gained nothing. Win-win.
Biting the hand that feeds IT
