Forest Global Training Partners

Cyber Risks · Krebs on Security

Feds Charge Carding Kingpin in Retail Hacks

Summary: The U.S. Justice Department announced the arrest of Roman Seleznev, a 30-year-old Russian citizen known online as "nCux" and "Bulba," accused of running carding shops that sold credit and debit card data stolen from U.S. restaurants and retailers. A 2011 indictment made public this week alleges he and accomplices hacked restaurants between 2009 and 2011, planting malware on point-of-sale devices to steal card data, which was then sold on bulba[dot]cc and track2[dot]name for virtual currencies including WebMoney and Bitcoin.

What you should know: The operation ran for two years on malware planted directly on point-of-sale devices, and the indictment ties Seleznev to a carder[dot]su conspiracy charged under RICO, which holds every member responsible for the group's actions. Bulk stolen cards moved at $8 apiece in 1,000-card lots, a reminder that the data lifted from a single compromised terminal becomes inventory for an entire resale market.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related