BreachExchange mailing list archives

fringe: Identity theft continues to keep Metro's Electronic Crimes Unit busy


From: security curmudgeon <jericho () attrition org>
Date: Wed, 17 Feb 2010 07:21:33 +0000 (UTC)



---------- Forwarded message ----------
From: InfoSec News <alerts () infosecnews org>

http://www.lasvegassun.com/news/2010/feb/15/identify-theft-continues-keep-metros-electronic-cr/

By Abigail Goldman
Las Vegas Sun
Feb. 15, 2010

The fraud took 48 hours from start to finish - a credit card that was 
swiped at a high-end fashion retailer in Las Vegas one day was 
counterfeited and being used two days later, often in Greece, Turkey, 
Morocco, Germany or Spain.

This is because when the salespeople weren't ringing up customers on the 
store computer, they were using it to check e-mail and kill time online. 
One quick click, and an employee downloaded a virus that logged keystrokes 
and captured credit-card information.

Detectives from Metro's Electronic Crimes Unit eventually traced the 
security breach to Romania. Romanian coffee shops, actually, where free 
wireless networks meant anonymous hacking. The Metro detectives found the 
same ring had cracked into 78 stores across the United States.

Of course, by that time, it was a Secret Service case, so detective Paul 
Ehlers doesn't know if the Romanian ring was ever taken down. Or if he 
does know, he won't say.

What he will say, however, is this: "It goes on every day."

Metro's Electronic Crimes Unit is seven detectives strong . two work on 
child-porn and exploitation cases, the other five work on everything else.

That everything else ranges from the local and palpable (credit-card 
skimmers hidden in gas-station pay pumps) to the murky Internet intangible 
(international hackers who are time zones away, hidden behind strings of 
1s and 0s.)

And all of it is on the rise.

[...]
_______________________________________________
Dataloss-discuss Mailing List (dataloss-discuss () datalossdb org)
Archived at http://seclists.org/dataloss/

Get business, compliance, IT and security staff on the same page with
CREDANT Technologies: The Shortcut Guide to Understanding Data Protection
from Four Critical Perspectives. The eBook begins with considerations
important to executives and business leaders.
http://www.credant.com/campaigns/ebook-chpt-one-web.php


Current thread: