Turn Off Ads?
Results 1 to 5 of 5

Thread: Massive ID Theft Ring uncovered

  1. #1
    Smells Like Teen Spirit jmcclain19's Avatar
    Join Date
    Apr 2004
    Location
    Phoenix
    Posts
    6,490

    Massive ID Theft Ring uncovered

    Sun Belt, the security company that found this ring, also has a blog on it where the writers have stated that they've never seen anything like it in size or scope.

    http://sunbeltblog.blogspot.com/

    Make sure you check out your computer to make sure you haven't been netted

    http://news.com.com/ID+theft+ring+hi...3-5823591.html

    ID theft ring hits 50 banks, security firm says
    Published: August 8, 2005, 12:06 PM PDT
    By Ingrid Marson
    Special to CNET News.com
    TrackBack Print E-mail TalkBack

    A major identity theft ring has been discovered that affects up to 50 banks, according to Sunbelt Software, the security company that says it uncovered the operation.

    The operation, which is being investigated by the FBI, is gathering personal data from "thousands of machines" using keystroke-logging software, Sunbelt said Monday. The data collected includes credit card details, Social Security numbers, usernames, passwords, instant-messaging chat sessions and search terms. Some of that data is then saved in a file hosted on a U.S.-based server that has an offshore-registered domain, according to Sunbelt.

    In the two days that Sunbelt has been monitoring the file, the company has seen confidential financial details of customers of up to 50 international banks, said Eric Sites, vice president of research and development at the Clearwater, Fla.-based security software maker.

    "For almost every bank that is listed (in the file), it's possible to get into the person's account," Sites said.

    Along with passwords for online banking sites, information on credit cards also has been gathered. Sites said that Sunbelt had found one customer's credit card number, expiration date and security code, in addition to name and address. That information would allow anyone to use the credit card, he said.

    "The types of data in this file are pretty sickening to watch," Sunbelt President Alex Eckelberry wrote in a blog posting dated Saturday. "In a number of cases, we were so disturbed by what we saw that we contacted individuals who were in direct jeopardy of losing a considerable amount of money."

    Sunbelt said that the people behind the scheme have obtained access to a considerable amount of bank information, including details about one company account containing more than $380,000 and another account that has "readily accessible" funds of more than $11,000.

    An FBI representative was unable to confirm whether or not an investigation was taking place.

    The data theft is carried out by a Trojan horse downloaded at the same time as CoolWebSearch and a mail zombie, Sunbelt said. Patrick Jordan, a Sunbelt employee, discovered the identity theft ring while researching a variant of CWS, which is a malicious program that hijacks Web searches and disables security settings in Microsoft's Internet Explorer Web browser.

    "During the course of infecting a machine, he (Jordan) discovered that a) the machine he was testing became a spam zombie and b) he noticed a call back to a remote server. He traced back the remote server and found an incredibly sophisticated criminal identity theft ring," Eckelberry wrote in the blog posting. "We are still trying to ascertain whether or not this is directly related to CWS."

    The malicious code is hosted on a Web site that mainly hosts pornography, which Sites was unwilling to name. Users of Windows XP who have not installed Service Pack 2 are particularly vulnerable, as the code could be automatically downloaded without the user's knowledge, Sites said. Sunbelt is currently investigating whether users of earlier Windows versions, such as Windows 2000 and Windows ME, are also vulnerable.

    "If you have an unpatched Windows machine, when you go to the URL it will automatically download everything from the Web site, including the Trojan. All you have to do is type in the URL and you're hosed," Sites said.

    The Trojan is a new variant, so antivirus and anti-spyware vendors do not yet block it, Sites said. Sunbelt plans to send information on the Trojan to security companies as soon as possible.

    The activity could be the latest attempt by a criminal gang to use spyware for financial gain. In March of this year, Britain's National Hi-Tech Crime Unit foiled an attempt to steal about $390 million from the Japanese bank Sumitomo Mitsui. In that case, keyloggers were used to relay passwords and access information to the criminals who intended to transfer the funds electronically. A man in Israel was arrested after allegedly trying to transfer $25 million of the funds.

  2. Turn Off Ads?
  3. #2
    For a Level Playing Field RedFanAlways1966's Avatar
    Join Date
    Apr 2001
    Location
    Oakwood, OH
    Posts
    11,724

    Re: Massive ID Theft Ring uncovered

    TWO WORDS... mandatory sentencing.

    You steal someone's identity, you are found guilty of this crime... you sit in jail for 20 years for each identity you stole.

    Druggies can be rehabilitated (some anyway). Theives are a different story. They are the scum of the earth. They should be locked up.

    Drop the mandatory sentences for drug users (not dealers or growers). Stick it to these identity thieves. Stick it to 'em good.
    Small market fan... always hoping, but never expecting.

  4. #3
    Maple SERP savafan's Avatar
    Join Date
    Jun 2000
    Location
    Cincinnati, Ohio
    Posts
    17,564

    Re: Massive ID Theft Ring uncovered

    Wow, sounds like that's what happened to me. It was Cool Web Search that annihlated my last computer.
    My dad got to enjoy 3 Reds World Championships by the time he was my age. So far, I've only gotten to enjoy one. Step it up Redlegs!

  5. #4
    Dunnilicious creek14's Avatar
    Join Date
    Jun 2000
    Location
    Beavercreek
    Posts
    11,774

    Re: Massive ID Theft Ring uncovered

    We have a real mess on our hands right now. Before our vacation I thought mr creek was stopping the mail and he thought I was stopping it. And neither of us did.

    Two weeks of mail - stolen. We talked to all the neighbors, my family, the letter carrier, no one has it. And the letter carrier said if he has seen it piling up, he would have held it.

    So someone took our mail every day.

    The postal service is investigating - it's a federal offense.

    We're changing accounts - all accounts. Real PITA.
    Will trade this space for a #1 starter.

  6. #5
    Maple SERP savafan's Avatar
    Join Date
    Jun 2000
    Location
    Cincinnati, Ohio
    Posts
    17,564

    Re: Massive ID Theft Ring uncovered

    Quote Originally Posted by creek14
    We're changing accounts - all accounts. Real PITA.
    I just had to go through all of that a few months ago, I feel your pain.
    My dad got to enjoy 3 Reds World Championships by the time he was my age. So far, I've only gotten to enjoy one. Step it up Redlegs!


Turn Off Ads?

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

Board Moderators may, at their discretion and judgment, delete and/or edit any messages that violate any of the following guidelines: 1. Explicit references to alleged illegal or unlawful acts. 2. Graphic sexual descriptions. 3. Racial or ethnic slurs. 4. Use of edgy language (including masked profanity). 5. Direct personal attacks, flames, fights, trolling, baiting, name-calling, general nuisance, excessive player criticism or anything along those lines. 6. Posting spam. 7. Each person may have only one user account. It is fine to be critical here - that's what this board is for. But let's not beat a subject or a player to death, please.

Thank you, and most importantly, enjoy yourselves!


RedsZone.com is a privately owned website and is not affiliated with the Cincinnati Reds or Major League Baseball


Contact us: Boss | GIK | BCubb2003 | dabvu2498 | Gallen5862 | LexRedsFan | Plus Plus | RedlegJake | redsfan1995 | The Operator | Tommyjohn25