Cyber Risks · Krebs on Security

Turning Hot Credit Cards into Hot Stuff

Summary: Profsoyuz.biz, a criminal reshipping program running since 2006 under a slightly different domain, is marketed on invite-only forums to help credit card thieves cash out stolen accounts by buying and reselling merchandise. The service hires Americans as "drops" to receive goods bought with stolen cards and reship them to Russia and Eastern Europe, where most Western businesses will not ship; one drop, Oscar Padilla of Los Angeles, was sent a $189 Star Wars Lego set bought on Laura Kowaleski's card on Oct. 11, 2011, while believing he worked for a legitimate shipper impersonated via transitac.com and a gmail address.

What you should know: Reshipping mules are almost universally cut loose without pay after their first month, so the person receiving your stolen merchandise is often a duped job applicant - and the legitimate company whose identity was borrowed, Transit Air Cargo, only learned of the impersonation when an unpaid drop called its CEO.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related