follow-up: Suspect in $9 Million RBS WorldPay Hack Extradited to U.S.

[security curmudgeon <jericho () attrition org>]

---------- Forwarded message ----------
From: InfoSec News <alerts () infosecnews org>

http://www.wired.com/threatlevel/2010/08/tsurikov-extradition/

By Kim Zetter
Threat Level
Wired.com
August 9, 2010

One of the alleged ringleaders behind the 2008 hack of RBS WorldPay has 
been extradited to the U.S., where he was arraigned Friday in the Northern 
District of Georgia on charges that he helped coordinate the global $9.5 
million bank card heist.

Sergei Tsurikov, 26, of Tallinn, Estonia, has been charged in Atlanta with 
wire fraud, computer fraud, aggravated identity theft and two conspiracy 
charges involving wire and computer fraud.

Tsurikov was indicted in the U.S. last November with Viktor Pleshchuk, 28, 
of St. Petersburg; Oleg Covelin, 28, of Chisinau, Moldova; and a fourth 
person identified only as ?Hacker 3? for what the government has called 
?perhaps the most sophisticated and organized computer fraud attack ever 
conducted.? Igor Grudijev, 32, Ronald Tsoi, 32, Evelin Tsoi, 21, and 
Mihhail Jevgenov, 34, all of Tallinn, Estonia, were also indicted on 
access device fraud charges related to the hack.

Tsurikov, Grudijev, Jevgenov and both Ronald and Evelin Tsoi were 
convicted in Estonia of fraud. Pleshchuk was arrested by the Russian 
Federal Security Service, or FSB, earlier this year, but because the U.S. 
lacks an extradition treaty with Russia, it?s unlikely Pleshchuk will 
follow Tsurikov?s footsteps to the U.S. Covelin was still a fugitive 
earlier this year; his current status is unknown. The U.S. Attorney?s 
office in Georgia has not yet responded to a call from Threat Level.

The hack of RBS involved cracking the PINs for payroll debit cards -- the 
holy grail of bank card hacking.

[...]

_______________________________________________
Dataloss Mailing List (dataloss () datalossdb org)
Archived at http://seclists.org/dataloss/

Get business, compliance, IT and security staff on the same page with
CREDANT Technologies: The Shortcut Guide to Understanding Data Protection
from Four Critical Perspectives. The eBook begins with considerations
important to executives and business leaders.
http://www.credant.com/campaigns/ebook-chpt-one-web.php