CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

Donation/Premium
spacer
block bottom
Security Central
spacer
· Home
· PIRT/Fried Phish
· MIRT
· SIRT
· Deutsch
· Wiki
· Newsletter
· O16/ActiveX
· CLSID List
· Contest2007
· Downloads
· Feedback (send)
· Forums
· HijackThis
· Hijacktrend
· LSPs
· My Downloads
· O18
· O20
· O21
· O22
· O23
· O9
· Premium
· Private Messages
· Proxomitron
· Reviews
· Search
· StartupList
· Stories Archive
· Submit News
· WsIRT
· Your Account
· Acceptable Use Policy
block bottom
spacer spacer

how do they steal

 
Post new topic   Reply to topic       All -> FavForums -> Phishing, Fraud and Dastardly Deeds [del.icio.us!] [digg it!] [reddit!]
View previous topic :: View next topic  
Author Message
d12

Cadet
Cadet


Joined: Sep 22, 2004
Posts: 3
Location: USA

PostPosted: Thu Sep 23, 2004 3:21 pm    Post subject: how do they steal
Reply with quote

I'm going to write a few articles. If you think the articles are interesting and useful for you in any way, please contribute a few dollors to me. You can send any donations t via PayPal. I'm in financial problems and even $10 will make a difference.
If you want me to write a specific article, please ask me and I'll see what I can do.
Thank you.

------------------------------------------------------------------------------------

How do they steal.

Your problems may start as soon as you submit your credit card information online.
A thief can hack into the server where your credit card information is stored. If you think that to hack into the merchant server is such a difficult task, it isn't? Most companies don't really care to protect your credit card information and many thiefs don't even have any programmer's skills. They can get access to the server very easy. Sometimes all you have to do is search in Google "inurl:admin" and it will find you links which in some cases will lead you to all directories in the server. Most merchants do not encrypt credit card information,not even CVV, 3 last numbers on the bank of the credit card. Visa and MasterCard strongly encourage merchants not to store the CVV, but it seems that most companies ignore it.
OK. Now a crook got your information: credit card number, exp. date, CVV, billing address, phone, email. You probably think that he'll go ahead and buy something online. Some of them will. But advanced ones do a little more work. They will want to see how much money you have on your account. That's where easy task too. All you have to do is to find the bank which issued a credit card. It is done through search by BIN ( first 5 numbers on the credit card). Now you go to the official website of the bank and try to enroll credit card online. The bank will probably ask you some additianal information like social security number and date of birth. No problem. There are some individuals who run searches on hacked databases containing credit reports and they will find any SSN and birth date for any US resident. OK. Now you have all information you need and can enroll credit card successfully. What do you need it for? First of all, you see how much money a cardholder has on his account, then
there are some other advantages like you can change billing information online. One can change this information to any address he wants and order merchandise online on all the available credit. How do they find somebody who would pick up the goods and ship them oversees. Usually the thiefs do it through job offers scams.
OK. Now you think the crook should leave you alone making enough damage to you. No. Greedy thief will use online bill payments feature and pay the balance on your credit card with fake checks for which you'll be responsable in the future. As soon as checks clear, he will order some other merchandise online. Most online retailers ship to the billing address without any verifications.
Some thiefs will stop on this. Others will go futher. They will order credit report on your name and see what other bank accounts you may have. A crook will find what bank account has the most assets. Remember that he still has your email address. So he will send you email which will look like from your bank and ask you to update your information. Many people will do it and give out everything like account number, ATM card number, PIN, all the information the thief needs to write it on plastic and withdraw all your cash balance from ATM.



Last edited by d12 on Mon Sep 27, 2004 4:01 pm, edited 1 time in total
Back to top
View users profile Send private message
P7755

Mozilla Host
Premium Member

Joined: Aug 02, 2004
Posts: 801

Premium

PostPosted: Sat Sep 25, 2004 4:20 pm    Post subject:
Reply with quote

why would we pay a total stranger? evreryone writes on this site, does that mean they should ask for money. I dont ask for $ also, if you are in financial problem, why do you pay for a computer and the internet? huh?

Back to top
View users profile Send private message Visit posters website AIM Address Yahoo Messenger
seafsee

General
General
Premium Member

Joined: Apr 02, 2004
Posts: 4920

Premium

PostPosted: Wed Sep 29, 2004 9:53 am    Post subject:
Reply with quote

OUCH!!

d12 while I'm sure your article is well researched and informative, this site is run by volunteers.
While many here can identify with your situation you are basically barking up the wrong tree!
There was a forum for joboffers and such here, but it generated very little activity and now appears to be gone.

*******EDIT********
Correction:
The forum can be found here.

God Speed to you.


_________________
image


Last edited by seafsee on Wed Sep 29, 2004 9:59 pm, edited 1 time in total
Back to top
View users profile Send private message Visit posters website AIM Address Yahoo Messenger MSN Messenger
d12

Cadet
Cadet


Joined: Sep 22, 2004
Posts: 3
Location: USA

PostPosted: Wed Sep 29, 2004 3:37 pm    Post subject:
Reply with quote

thank you, seafsee.

I just hoped someone could help me to use the knowledge I have. I'll write some other articles for you later guys whenever I find a job.
Thanks.

Back to top
View users profile Send private message
proxy8696

Cadet
Cadet


Joined: Jan 10, 2005
Posts: 1
Location: USA

PostPosted: Tue Jan 11, 2005 2:28 am    Post subject:
Reply with quote

What you say is almost true, with a difference. as far as I understand, on the magnetic stripe is also a cvv(card verification value) witch is a 3des encrypted value of cc#, exp, service code with a pair of keys(different from bank to bank).this is verified with the transaction so unless they have physical access to the card and get the cvv from it. I don't think they can create atm cards only from the online stolen data.

Back to top
View users profile Send private message
Display posts from previous:   
Post new topic   Reply to topic       All -> FavForums -> Phishing, Fraud and Dastardly Deeds All times are GMT
Page 1 of 1

 
Quick Reply:
Username: 

Quote the last message
Attach signature (signatures can be changed in profile)
 
You can post new topics in this forum
You can reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You can download files in this forum


Powered by phpBB © 2001 phpBB Group
spacer spacer