Attacks/Breaches
6/12/2012
01:10 PM
50%
50%

Feds Bust Credit Card Fraud Ring

A Dutch man, together with Maryland accomplice, is accused of running a site for buying and selling credit card data.

A Dutch man accused of running an underground website devoted to the buying and selling of debit and credit card data appeared in a Seattle federal courtroom Monday, where he plead not guilty to a 14-count indictment accusing him of crimes such as access device fraud, bank fraud, and aggravated identity theft.

The Department of Justice said that it had coordinated the arrest of David Benjamin Schrooten (a.k.a "Fortezza"), 21, in Romania this past March, before he was escorted back to the United States by agents from the U.S. Marshals Service, arriving Saturday in Seattle.

"This defendant has wrought havoc on victims and financial institutions around the world," said U.S. attorney Jenny A. Durkan, who chairs the Attorney General's advisory committee on cybercrime and intellectual property enforcement, at a news conference. "This indictment alleges that in just one transaction he trafficked in as many as 44,000 stolen credit card numbers resulting in millions of dollars in losses to financial institutions."

Authorities said the 44,000 credit card numbers stemmed from just one sale.

[ Is your database at risk? Read MySQL Database Flaw Leaves Passwords Vulnerable. ]

Authorities said they'd also arrested Maryland-based Christopher A. Schroebel, 21, on related charges--including bank fraud--in November 2011. In May, Schroebel plead guilty to the charges, and he's due to be sentenced in August.

Authorities have accused Schrooten and Schroebel of marketing stolen credit card numbers via Internet "carding" sites. They've also accused Schroebel of hacking into two Seattle-area businesses' networks, and stealing credit card data by installing malware that copied data from point-of-sale systems onto a server he controlled in Kansas.

According to court documents, "Schroebel stole at least 4,800 credit card numbers ... [and] conspired and worked with Schrooten to build 'carding websites,' in order to make the stolen credit card numbers available to criminals for fraud." Some of the stolen information relating to people's personal bank accounts was then used to commit bank fraud, authorities said.

The Seattle Police Department (SPD) said it began investigating the case after a business in Magnolia, Wash., reported that its customers had begun experiencing credit card fraud that seemed to have originated with the restaurant.

In a Monday news conference, the restaurant's owner, Corino Bonjrada, said some of his customers saw charges of $70 or $80, just minutes after using their credit card at his restaurant, reported CBS News.

"SPD detectives on loan to the Electronic Crimes Task Force quickly matched this case with other patterns and connected the dots to an international criminal enterprise," said assistant Seattle police chief Jim Pugel. "Solving this case would not have been possible without the assistance and cooperation of our partners in the Secret Service and the Romanian National Police."

Security information and event monitoring technology has been available for years, but the information can be hard to mine. In our SIEM Success report, we provide a step-by-step guide to make the most of your SIEM system. (Free registration required.)

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Write a Caption, Win a Starbucks Card! Click Here
Latest Comment: just wondering...Thanx
Current Issue
Security Operations and IT Operations: Finding the Path to Collaboration
A wide gulf has emerged between SOC and NOC teams that's keeping both of them from assuring the confidentiality, integrity, and availability of IT systems. Here's how experts think it should be bridged.
Flash Poll
New Best Practices for Secure App Development
New Best Practices for Secure App Development
The transition from DevOps to SecDevOps is combining with the move toward cloud computing to create new challenges - and new opportunities - for the information security team. Download this report, to learn about the new best practices for secure application development.
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2017-0290
Published: 2017-05-09
NScript in mpengine in Microsoft Malware Protection Engine with Engine Version before 1.1.13704.0, as used in Windows Defender and other products, allows remote attackers to execute arbitrary code or cause a denial of service (type confusion and application crash) via crafted JavaScript code within ...

CVE-2016-10369
Published: 2017-05-08
unixsocket.c in lxterminal through 0.3.0 insecurely uses /tmp for a socket file, allowing a local user to cause a denial of service (preventing terminal launch), or possibly have other impact (bypassing terminal access control).

CVE-2016-8202
Published: 2017-05-08
A privilege escalation vulnerability in Brocade Fibre Channel SAN products running Brocade Fabric OS (FOS) releases earlier than v7.4.1d and v8.0.1b could allow an authenticated attacker to elevate the privileges of user accounts accessing the system via command line interface. With affected version...

CVE-2016-8209
Published: 2017-05-08
Improper checks for unusual or exceptional conditions in Brocade NetIron 05.8.00 and later releases up to and including 06.1.00, when the Management Module is continuously scanned on port 22, may allow attackers to cause a denial of service (crash and reload) of the management module.

CVE-2017-0890
Published: 2017-05-08
Nextcloud Server before 11.0.3 is vulnerable to an inadequate escaping leading to a XSS vulnerability in the search module. To be exploitable a user has to write or paste malicious content into the search dialogue.

Dark Reading Radio
Archived Dark Reading Radio
In past years, security researchers have discovered ways to hack cars, medical devices, automated teller machines, and many other targets. Dark Reading Executive Editor Kelly Jackson Higgins hosts researcher Samy Kamkar and Levi Gundert, vice president of threat intelligence at Recorded Future, to discuss some of 2016's most unusual and creative hacks by white hats, and what these new vulnerabilities might mean for the coming year.