Feeds

Adult payment firm denies customer records breach

Mystery over iBill spam scam

High performance access to file storage

An online payments firm that specialises in processing payments to porn sites has denied that a supposed haul of consumer data originated from its databases.

iBill says "records" of the email addresses of 17m plus net voyeurs recovered by two security companies do not match its own records. It claims only three entries from files separately obtained by Secure Science and SunBelt Software correspond to email addresses on its database, Wired reports.

The recovered files, which were independently discovered by Sunbelt and Secure Science while carrying out security research online, had file names that linked them to iBill. Secure Science found its haul of 17m "customer records" on a website linked to phishing fraudsters. Sunbelt unearthed a similar cache of 1m entries (labeled Ibill_1m.txt) from a separate spamming site.

The files purported to contain the names, phone numbers, snail mail and email addresses of at least 17m porn site subscribers. Credit card numbers did not feature among the haul but payment amounts and credit card types did, Wired reports. Among the supposed records were details of credit card purchases by Diners Club, a form of payment that iBill contends its has never accepted.

Secure Science concedes that its list might be fake. Lance James, of Secure Science, told Wired that a database of supposed customers of pornographic websites might carry a premium when sold on the black market to spam merchants and other cyber crooks. Scammers might have deliberately mislabeled a bogus database that they either invented themselves or obtained from a less attractive source in order to wring more money out of their fellow crooks.

Wired matched a small batch of records from the Sunbelt-recovered database to a set of mortgage prospects found on an underground spam website called specialham.com. This, along with spammer complaints about the sale of a fake iBill list, supports the theory that the lists, which are been offered online for $300, are bogus. Other offers refer to supposed records of customers of another porn payment firm, CCBill. CCBill, like iBill, denies any security breach. ®

High performance access to file storage

More from The Register

next story
Audio fans, prepare yourself for the Second Coming ... of Blu-ray
High Fidelity Pure Audio – is this what your ears have been waiting for?
Dropbox defends fantastically badly timed Condoleezza Rice appointment
'Nothing is going to change with Dr. Rice's appointment,' file sharer promises
MtGox chief Karpelès refuses to come to US for g-men's grilling
Bitcoin baron says he needs another lawyer for FinCEN chat
Zucker punched: Google gobbles Facebook-wooed Titan Aerospace
Up, up and away in my beautiful balloon flying broadband-bot
Nokia offers 'voluntary retirement' to 6,000+ Indian employees
India's 'predictability and stability' cited as mobe-maker's tax payment deadline nears
Apple DOMINATES the Valley, rakes in more profit than Google, HP, Intel, Cisco COMBINED
Cook & Co. also pay more taxes than those four worthies PLUS eBay and Oracle
It may be ILLEGAL to run Heartbleed health checks – IT lawyer
Do the right thing, earn up to 10 years in clink
France bans managers from contacting workers outside business hours
«Email? Mais non ... il est plus tard que six heures du soir!»
Adrian Mole author Sue Townsend dies at 68
RIP Blighty's best-selling author of the 1980s
prev story

Whitepapers

Mainstay ROI - Does application security pay?
In this whitepaper learn how you and your enterprise might benefit from better software security.
Five 3D headsets to be won!
We were so impressed by the Durovis Dive headset we’ve asked the company to give some away to Reg readers.
3 Big data security analytics techniques
Applying these Big Data security analytics techniques can help you make your business safer by detecting attacks early, before significant damage is done.
The benefits of software based PBX
Why you should break free from your proprietary PBX and how to leverage your existing server hardware.
Mobile application security study
Download this report to see the alarming realities regarding the sheer number of applications vulnerable to attack, as well as the most common and easily addressable vulnerability errors.