follow-up: Stakeouts, Lucky Breaks Snare Six More in Citibank ATM Heist

[security curmudgeon <jericho () attrition org>]

---------- Forwarded message ----------
From: InfoSec News <alerts () infosecnews org>

http://blog.wired.com/27bstroke6/2008/06/fbi-arrests-six.html

By Kevin Poulsen
Threat Level
Wired.com
June 24, 2008

Citibank officials monitoring their network for fraud on Thursday, May 8, 
noticed suspicious ATM transactions at 8:30 p.m., coming through the five 
cash machines in the vestibule of a Citibank branch at 65th Street and 
Madison Avenue in New York City's Upper East Side.

As luck would have it, a bank employee -- probably a corporate security 
official -- was already staking out the branch from across the street.

Three months had passed since Citibank notified the FBI that a hacker 
managed to steal customer-account numbers and PIN codes, in an attack on a 
server that processes transactions from Citi-branded ATMs at 7-Eleven 
convenience stores. In late February and early March, the FBI and the U.S. 
Secret Service arrested two Ukrainian immigrants and two alleged 
co-conspirators for allegedly using the stolen PINs to steal $2 million in 
cash from unsuspecting Citibank customers.

[..]
_______________________________________________
Dataloss Mailing List (dataloss () attrition org)
http://attrition.org/dataloss

Tenable Network Security offers data leakage and compliance monitoring
solutions for large and small networks. Scan your network and monitor your
traffic to find the data needing protection before it leaks out!
http://www.tenablesecurity.com/products/compliance.shtml