Four hackers indicted in RBS WorldPay breach

By SearchFinancialSecurity.com Staff 10 Nov 2009 | SearchFinancialSecurity.com

Digg This!     StumbleUpon     Del.icio.us

Four people who allegedly hacked into payment processor RBS WorldPay and helped steal more than $9 million from ATMs in a highly coordinated attack last year were indicted, authorities announced Tuesday.

Sergei Tsurikov, 25, of Tallinn, Estonia, Viktor Pleshchuk, 28, of St. Petersburg, Russia, Oleg Covelin, 28, of Chisinau, Moldova, and a person known only as "Hacker 3" were indicted by a federal grand jury in Atlanta, Ga., the U.S. Department of Justice said.

The 16-page indictment alleges the group used sophisticated hacking techniques to compromise the data encryption used by Atlanta-based RBS WorldPay to secure payroll debit cards, which some companies use to pay their employees.

The group then allegedly raised the account limits on compromised accounts and gave 44 counterfeit payroll debit cards to a network of "cashers," who used the cards to drain more than $9 million from more than 2,100 ATMs in 280 cities around the world in less than 12 hours, according to prosecutors.

Four others, all from Estonia, were indicted for access device fraud in the case.

"Last November, in just one day, an American credit card processor was hacked in perhaps the most sophisticated and organized computer fraud attack ever conducted. Today, almost exactly one year later, the leaders of this attack have been charged," Acting U.S. Attorney Sally Quillian Yates of the Northern District of Georgia said in a prepared statement. "This investigation has broken the back of one of the most sophisticated computer hacking rings in the world."

RBS WorldPay, the U.S. payment processing arm of the Royal Bank of Scotland, reported last December that personal information of about 1.5 million pre-paid cardholders and other individuals was compromised when its computer system was hacked.

Prosecutors credited RBS WorldPay and cooperation with multiple law enforcement agencies worldwide in the investigation.

Tags: Debit and credit card fraud prevention,  Emerging security threats and attacks,  VIEW ALL TAGS

Digg This!     StumbleUpon     Del.icio.us

RELATED CONTENT Debit and credit card fraud prevention Bank Trojan used against German accounts evades antifraud systems California man sentenced in online brokerage scam Identity Theft Assistance Center marks five years of helping victims Fighting fraud: Understanding technology and threats Defendants in banking fraud scheme accused of exploiting regulation Credit union launches online banking suite with strong authentication Winning the war: Personal information protection ATM malware used in Russia lets attackers control machines Banks, e-commerce sites use device identification to stop fraud When security outweighs common sense Emerging security threats and attacks UK police arrest two in connection with Zeus Trojan Fraudulent emails pretend to be from NACHA ACH fraud scams total $100 million, FBI says FDIC warns of rise in "money mule" schemes FDIC warns of bogus emails Bank Trojan used against German accounts evades antifraud systems Wyoming bank sues Google after bank employee email mishap California man sentenced in online brokerage scam Zeus Trojan hitting banking customers hard FDIC: Educate business customers about the need for security

RELATED GLOSSARY TERMS Terms from Whatis.com − the technology online dictionary card verification value  (SearchFinancialSecurity.com) PAN truncation  (SearchFinancialSecurity.com)

RELATED RESOURCES 2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems Search Bitpipe.com for the latest white papers and business webcasts Whatis.com, the online computer dictionary