Cyber Risks · Krebs on Security

Feds Indict Three in 2011 Epsilon Hack

Summary: U.S. federal prosecutors in Atlanta unsealed indictments against Viet Quoc Nguyen and Giang Hoang Vu, both Vietnamese citizens who lived for a time in the Netherlands, and Canadian citizen David-Manuel Santos Da Silva, in connection with the 2011 breach of email service providers that the government says netted more than $2 million in spam proceeds from over one billion stolen email addresses. Prosecutors allege Nguyen used targeted phishing to install malware and steal ESP employee credentials, then used the hijacked ESP systems to send spam promoting knockoff Adobe software, while Da Silva allegedly laundered proceeds through his affiliate marketing firm Marketbay.com; Vu has pleaded guilty and awaits April 2015 sentencing, Da Silva was arrested in Fort Lauderdale on Feb. 12, and Nguyen remains a fugitive.

What's compelling: The intruders did not stop at stealing data - they turned the victim companies' own distribution platforms into the attack infrastructure, reaching over a billion addresses and generating more than $2 million, and one of the three indicted men is still at large.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related