Russian e-Payment Giant Chrono Pay Hacked
Summary: Attackers hijacked ChronoPay.com, Russia's largest online payment processor, redirecting visitors to a fake payment page that collected roughly 800 credit card numbers over several hours spanning December 25 and 26, 2010. The domain was transferred to Network Solutions with its DNS servers changed to anotherbeast.com, and the hackers also stole and posted online at least nine secret cryptographic keys ChronoPay uses to sign SSL certificates for customer transactions.
What's compelling: The compromise started at the registrar and DNS layer, not the payment application, and roughly 800 card numbers were captured before anyone stopped it. The stolen SSL signing keys mean the trust customers place in a padlock on chronopay.com was itself in an attacker's hands.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026