Careers & People

10/30/2017
10:35 AM
Dark Reading
Dark Reading
Products and Releases
50%
50%

Romanian Men Convicted for Role in ATM Skimming Crew

HOUSTON – Two Romanian men have pleaded guilty for traveling to Houston to place card skimmers on ATMs and stealing money from bank accounts, announced Acting U.S. Attorney Abe Martinez.

Crisian Viorel Ciobanu, 30, of Romania, was part of a group that traveled to Pennsylvania, Virginia and Texas to steal money from victims’ bank accounts. In each state, Ciobanu and his co-conspirators used card skimmers to steal ATM card numbers as customers inserted their cards into the machines. They also used hidden cameras to record customers as they entered their PINs.

Armed with this stolen data, they then made their own fake ATM cards. They then used those fake cards and stolen PINs to withdraw at least $390,495.84 from customer accounts. Bogdan Mirel Constantin, 40, of Romania, joined the group in Houston.

Ciobanu pleaded guilty to conspiracy to commit access device fraud and aggravated identity theft. He faces up to 7.5 years for the conspiracy as well as a mandatory two years for the identity theft which must be served consecutively to any other sentence imposed. Constantin pleaded guilty to theft aggravated identity theft and faces the same two mandatory years in federal prison. The charges also carry a possible $250,000 maximum fine. They have agreed to pay full restitution. 

Ciobanu’s sentencing has been set for Jan. 8, 2018, before U.S. District Judge Ewing Werlein, while Constantin is set for Jan. 26, 2018. They will both remain in custody pending that hearing.

The FBI conducted the investigation. Assistant U.S. Attorney Michael Chu is prosecuting the case.

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
6 Security Trends for 2018/2019
Curtis Franklin Jr., Senior Editor at Dark Reading,  10/15/2018
WSJ Report: Facebook Breach the Work of Spammers, Not Nation-State Actors
Curtis Franklin Jr., Senior Editor at Dark Reading,  10/19/2018
4 Ways to Fight the Email Security Threat
Asaf Cidon, Vice President, Content Security Services, at Barracuda Networks,  10/15/2018
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Latest Comment: Too funny!
Current Issue
Flash Poll
Surviving the IT Security Skills Shortage
Surviving the IT Security Skills Shortage
Cybersecurity professionals are in high demand -- and short supply. Find out what Dark Reading discovered during their 2017 Security Staffing Survey and get some strategies for getting through the drought. Download the report today!
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2018-10839
PUBLISHED: 2018-10-16
Qemu emulator <= 3.0.0 built with the NE2000 NIC emulation support is vulnerable to an integer overflow, which could lead to buffer overflow issue. It could occur when receiving packets over the network. A user inside guest could use this flaw to crash the Qemu process resulting in DoS.
CVE-2018-13399
PUBLISHED: 2018-10-16
The Microsoft Windows Installer for Atlassian Fisheye and Crucible before version 4.6.1 allows local attackers to escalate privileges because of weak permissions on the installation directory.
CVE-2018-18381
PUBLISHED: 2018-10-16
Z-BlogPHP 1.5.2.1935 (Zero) has a stored XSS Vulnerability in zb_system/function/c_system_admin.php via the Content-Type header during the uploading of image attachments.
CVE-2018-18382
PUBLISHED: 2018-10-16
Advanced HRM 1.6 allows Remote Code Execution via PHP code in a .php file to the user/update-user-avatar URI, which can be accessed through an "Update Profile" "Change Picture" (aka user/edit-profile) action.
CVE-2018-18374
PUBLISHED: 2018-10-16
XSS exists in the MetInfo 6.1.2 admin/index.php page via the anyid parameter.