Hackers Watch

Discussion in 'Security & Defenses' started by reedak, May 28, 2013.

  1. reedak

    reedak Well-Known Member

    Joined:
    Jul 7, 2009
    Messages:
    3,229
    Likes Received:
    195
    Trophy Points:
    63
    There are increasing allegations by Western countries, particularly the US, of websites hacked by servers traced to China, presumably owned by the Chinese military. However, we can see that a lot of hacking into state websites or major commercial websites around the world has been done by a few individuals or even a single individual. It shows that a state does not need a huge army of hackers to hack into any website. In fact, this is the most stupid way to engage in espionage hacking. The most sensible and logical way is to send a few hackers or, best of all, a single expert hacker, to hide in another country to do the hacking.

    I provide a few examples below to show that a few individuals or even a computer whiz kid are more than enough to create havoc in the global cyberspace. Other netizens are welcome to contribute more examples from recent or past events.

    1. "A worldwide gang of criminals stole a total of US$45 million [NZ$53.5m] in a matter of hours by hacking their way into a database of prepaid debit cards and then draining cash machines around the globe, federal prosecutors said Thursday [local time] - and outmoded US card technology may be partly to blame.

    Seven people are under arrest in the US in connection with the case, which prosecutors said involved thousands of thefts from ATMs using bogus magnetic swipe cards carrying information from Middle Eastern banks. The fraudsters moved with astounding speed to loot financial institutions around the world, working in cells including one in New York, Brooklyn US Attorney Loretta Lynch said...."

    (10 May 2013)
    US hackers stole $45m
    http://www.3news.co.nz/US-hackers-stole-45m/tabid/417/articleID/297260/Default.aspx

    2. "The US Federal Bureau of Investigation (FBI) has arrested a 24-year-old computer science graduate, Hamza Bendelladj, for allegedly hacking into banks, after trailing him for three years.

    Bendelladj who is from Algeria, is reported to have begun hacking into banks at the age of 20....

    US authorities accused him of hacking into private accounts in more than 217 banks and financial companies worldwide, causing millions of dollars in losses...."

    (10 Jan 2013)
    FBI Arrests Algerian Bank Hacker in Thailand
    http://www.thisdaylive.com/articles/fbi-arrests-algerian-bank-hacker-in-thailand/135898/

    3. "U.S. law enforcement officials said 24 suspected hackers had been arrested in a sting operation spanning four continents that targeted online financial fraud of stolen credit card and bank information.

    In a two-year investigation, FBI agents posed as hackers on Internet forums, watching as other hackers swapped methods for breaching data security walls and creating fake credit cards that would work for Internet and in-person purchases...."

    (27 Jun 2012)
    US Charges 24 People in Massive Bank-Hacking Sting
    http://www.newsmax.com/StreetTalk/Bank-Hacking-Sting-arrests/2012/06/27/id/443646

    4. "The US Justice Department has arrested a Dutch hacker for coordinating the theft of roughly 44,000 credit card numbers. Although they have not released many details, it appears that he may have run a large, recently-shuttered forum dedicated to cyber fraud. He hacked into stolen card data taken from other fraud forums...."

    (14 June 2012)
    US arrests Dutch hacker
    http://www.fudzilla.com/home/item/27524-us-arrests-dutch-hacker

    5. "An Iranian who wanted to expose bank security flaws fled the country and proved his point, exposing 3 million bank accounts. An Iranian newspaper claims he was arrested.

    The young hacker, identified as Khosrow Zarefarid, posted details of 3 million Iranian bank cards on his blog after Iranian bank executives ignored his personal letter warning of the security flaw...."

    (22 April 2012)
    Iran Arrests Hacker of 3 Million Bank Accounts
    http://www.israelnationalnews.com/News/News.aspx/154984

    6. "35-year-old Christopher Chaney of Jacksonville, Florida was arrested earlier today for hacking into the e-mail account of Scarlett Johansson and distributing nude photos that the actress had taken of herself over the Internet..."

    (13 October 2011)
    FBI Arrests Scarlett Johansson Hacker
    http://www.technology24.org/516.fbi-arrests-scarlett-johansson-hacker.html

    7. "Up to 32 members of the hacking collective anonymous are currently either being detained by European law enforcement agencies or set to stand trial, some of whom are minors...."

    (15 June 2011)
    Cyber security: Search for Anonymous members escalates 11 minors in 41 arrests
    http://www.ibtimes.co.uk/articles/1...hack-cyber-attack-cyberattack-32-arrested.htm

    8. "India police's cyber crime wing detained a man for allegedly hacking into the online bank accounts of a number of customers after committing a theft of their sensitive data from PCs they worked at in different cyber cafes, and then stealing hundreds of thousands of rupees from those accounts...."

    ( 02 Jan 2008 )
    Karnataka Cyber Crime Police Arrests Bank Account Hacker
    http://www.spamfighter.com/News-9591-Karnataka-Cyber-Crime-Police-Arrests-Bank-Account-Hacker.htm
     
    waltky and (deleted member) like this.
  2. waltky

    waltky Well-Known Member

    Joined:
    Jan 26, 2009
    Messages:
    30,071
    Likes Received:
    1,204
    Trophy Points:
    113
    Gender:
    Male
    Granny says, "Dem Chinamens is hackin' ever'body...
    :grandma:
    Australian lawmaker confirms China hacked spy base
    May 28,`13 - A lawmaker has confirmed the accuracy of a media report that Chinese hackers stole the blueprints of a new Australian spy agency headquarters.
     
  3. reedak

    reedak Well-Known Member

    Joined:
    Jul 7, 2009
    Messages:
    3,229
    Likes Received:
    195
    Trophy Points:
    63
    Grandpa says, "Dem Amerigos are hackin' the whole world, including their allies. Can you tolerate all the monkey business done by your so-called best friends behind you? Do you still have faith in such people?"
    :oldman:

    Cyber-snooping backlash builds in Berlin before Obama's JFK trip
    http://news.yahoo.com/cyber-snooping-backlash-builds-berlin-obamas-jfk-trip-120309572.html

    U.S. Internet Spying Draws Anger, and Envy
    http://www.nytimes.com/2013/06/08/b...draws-anger-and-envy.html?pagewanted=all&_r=0

    U.S. PRISM spying programme rattles EU lawmakers
    http://www.reuters.com/article/2013/06/11/usa-security-eu-idUSL5N0EN1D420130611

    U.S. snooping revelations cause trouble for allies
    http://www.reuters.com/article/2013/06/09/us-usa-security-allies-idUSBRE9580CG20130609

    U.S. online snooping: What Canadians need to know
    http://www.thestar.com/news/world/2...eillance_canadian_cyber_expert_weighs_in.html

    Why NSA spying scares the world
    http://edition.cnn.com/2013/06/12/opinion/deibert-nsa-surveillance

    US allies nervous about NSA spying
    http://www.globespanradio.com/?p=12348
     
  4. waltky

    waltky Well-Known Member

    Joined:
    Jan 26, 2009
    Messages:
    30,071
    Likes Received:
    1,204
    Trophy Points:
    113
    Gender:
    Male
    Hackers are going to kill the use of credit and debit cards...
    :omg:
    Target steps up breach investigation with Justice
    23 Dec.`13 — Target Corp. said the Department of Justice is investigating the security breach at the retailer that's being called the second largest such incident in U.S. history.
     
  5. submarinepainter

    submarinepainter Well-Known Member Past Donor

    Joined:
    Apr 12, 2008
    Messages:
    21,596
    Likes Received:
    1,528
    Trophy Points:
    113
    Gender:
    Male
    I don't think they can kill the use , We may need to look into this
    Experts also question why — with breaches recurring regularly and credit card fraud rampant — American credit card issuers have not embraced smart-chip technology. The United States accounts for more than 47 percent of global credit card fraud, while generating only 24 percent of card spending, according to the Nilson Report, a card industry newsletter. More than 80 countries around the world use chip technology, but less than 1 percent of credit cards in the United States have chips

    http://www.nytimes.com/2013/12/20/technology/target-stolen-shopper-data.html?_r=0
     
  6. waltky

    waltky Well-Known Member

    Joined:
    Jan 26, 2009
    Messages:
    30,071
    Likes Received:
    1,204
    Trophy Points:
    113
    Gender:
    Male
    Countering the Target security breach...
    :confusion:
    Target Breach: Scammers Target Consumers in Aftermath of Credit Card Hack
    December 24, 2013 — Since the massive Target payment processing breach, Americans have been told to keep a vigilant eye on their credit and debit card accounts, as well as their credit report. But a recent Google Consumer Survey conducted by TransUnion revealed that one-third (32.7%) of Americans surveyed said they have never checked their credit report or credit score.
    See also:

    Exclusive: Target hackers stole encrypted bank PINs - source
    25 Dec.`13 - The hackers who attacked Target Corp and compromised up to 40 million credit cards and debit cards also managed to steal encrypted personal identification numbers (PINs), according to a senior payments executive familiar with the situation.
     
  7. smevins

    smevins New Member

    Joined:
    Jun 7, 2013
    Messages:
    6,539
    Likes Received:
    34
    Trophy Points:
    0
    It is a cost-benefit analysis. I spoke with the manager of my bank a few days ago about this. She was calling all their customers whose accounts were open at that branch whose cards had been reported potentially compromised in the Target hack. First I called her a Grinch for scaring the hell out of people before Christmas by leaving them messages they would get when the bank would be closed just to rib her, which ironically, caused her to stop leaving messages if she couldn't get them. These were people whose information was stolen but the accounts had no obvious questionable activity as of yet.

    She said it was because the cost of enhancing the security would make it unprofitable to even have the debit cards. As long as they were still making profit from the debit cards (they get a cut of the merchant fee) in excess from their losses due to fraud, then they would just eat the losses and reap the profits. For instance, if losses are 5% but profits are 10% and the cost of the security enhancements would be 30%, there is no justification to undertake the increased expense of fixing the system (illustrative numbers. she wouldn't cough up any information on how much they actually lose or make as they are not publicly traded and do not have to disclose such info to the public)
     
  8. Mushroom

    Mushroom Well-Known Member

    Joined:
    Jul 13, 2009
    Messages:
    12,551
    Likes Received:
    2,453
    Trophy Points:
    113
    Gender:
    Male
    The problem is that chips are so easy to clone.

    With a magnetic strip, you have to physically swipe your card oriented in the right direction, or you get nothing. With a chip, then you simply have RFID which can be read as long as it is within range.

    All of our military ID cards (as well as the "Eagle Cash" card we use on deployment) works with RFID. And we are given special metal shielded sleeves to keep them in to prevent this kind of identity theft. Literally I could build an RFID reader into a counter top or even a bus seat, and read the cards in your wallet without you doing anything.

    In fact, one worry is that "digital pickpockets" can literally just walk through crowds and harvest scores of credit cards, and the people would never even know it happened.

    I myself will not use one of those "smart chip" cards. And they are still not proof of standard CC fraud, since they still have an account number associated with them, and most attacks are actually cardless through the Internet. Get a card and the associated information, buy a big ticket item and have it delivered to a drop site, pick up and sell the item for cash.
     
  9. submarinepainter

    submarinepainter Well-Known Member Past Donor

    Joined:
    Apr 12, 2008
    Messages:
    21,596
    Likes Received:
    1,528
    Trophy Points:
    113
    Gender:
    Male
    There has to be a way come on all you techies !!
     
  10. Doc Dred

    Doc Dred Banned

    Joined:
    Dec 6, 2009
    Messages:
    5,599
    Likes Received:
    13
    Trophy Points:
    0
    it is impossible to thwart the criminal.

    they always come up with ways to make huge amounts of money in every theatre of monetary venture.

    canada produced this plastic bill…something that is imposable to counterfeit..its about a year old…


    http://www.huffingtonpost.ca/2013/05/16/fake-new-100-bills_n_3289000.html

    Credit card fraud ..no problem…anyone paying higher that 7% interest on their credit cards are paying the rest in taking care of the fraud.

    i want to post 5%, my usual credit card interest…but i do have some that are 7%….
    so i figure my other family members that mostly pay 18% and some 21%…are paying for the fraudsters….these are Canadian rates by the way…whats the usual in the USofA?
     
  11. submarinepainter

    submarinepainter Well-Known Member Past Donor

    Joined:
    Apr 12, 2008
    Messages:
    21,596
    Likes Received:
    1,528
    Trophy Points:
    113
    Gender:
    Male
    I have 2 cards one visa at 11 and my homedepot at 24, I think it needs to go lol
     
  12. Mushroom

    Mushroom Well-Known Member

    Joined:
    Jul 13, 2009
    Messages:
    12,551
    Likes Received:
    2,453
    Trophy Points:
    113
    Gender:
    Male
    I actually do not own any credit cards at all. None.

    If I can't save for it, I don't need it that badly.

    And it is not that my credit is bad, I own 2 trucks (Silverado, Dodge Ram), a Goldwing (with tent trailer), and a Winnebago. My wife and I simply made the decision years ago to not spend our lives living upon credit. We get our things the "old fashioned way", we save for them then pay cash when we are ready to purchase.
     
  13. waltky

    waltky Well-Known Member

    Joined:
    Jan 26, 2009
    Messages:
    30,071
    Likes Received:
    1,204
    Trophy Points:
    113
    Gender:
    Male
    But then again, mebbe not...
    :confusion:
    Doubts raised over ID of Target malware author
    January 19, 2014 ~ Blogger who broke the Target breach story disputes cybersecurity firm's report on Russian teen.
    See also:

    Analysis: After Target hack, Verifone smart card readers could shine
    19 Jan.`14 - A data breach at Target Corp that exposed the credit card information of tens of millions of holiday shoppers was a major black eye for the retailer. In its wake, investors and analysts are circling companies that could benefit from a major upgrade in credit card technology.
     
  14. Riot

    Riot New Member

    Joined:
    May 12, 2013
    Messages:
    7,637
    Likes Received:
    41
    Trophy Points:
    0
  15. waltky

    waltky Well-Known Member

    Joined:
    Jan 26, 2009
    Messages:
    30,071
    Likes Received:
    1,204
    Trophy Points:
    113
    Gender:
    Male
    Dey snuck in through the back door at a heating an' air company...
    :omg:
    Hackers may have used Pa. company to hit Target
    Feb 7,`14 -- The hackers who stole millions of customers' credit and debit card numbers from Target may have used a Pittsburgh-area heating and refrigeration business as the back door to get in.
     
  16. waltky

    waltky Well-Known Member

    Joined:
    Jan 26, 2009
    Messages:
    30,071
    Likes Received:
    1,204
    Trophy Points:
    113
    Gender:
    Male
    Pentagon takin' on all hackers...
    :wink:
    US Officials Invite Hackers to Attack Pentagon
    April 18, 2016 - Every year, the Pentagon spends hundreds of millions of dollars protecting its computer systems from hackers. But for the next few weeks, U.S. defense officials are changing their strategy: they're inviting hackers to attack the Pentagon.
    See also:

    Encrypting the Entire Web; Facebook’s New Plan to Connect the World
    April 14th, 2016
     

Share This Page