Feeds

Guns, drugs, stolen identities - portrait of a phisher

The demise of 'cashout5050'

Protecting against web application threats using SSL

A California man has admitted he was part of an international phishing ring and stole tens of thousands of identities so he could support his methamphetamine habit.

Tien Truong Nguyen, 30, of Sacramento, pleaded guilty on Tuesday to five felonies, including conspiracy, access-device fraud and possession, aggravated identity theft, and being a felon in possession of a firearm. His confession came the same day his case was scheduled to go to trial in federal court in Sacramento.

Over a 15-month period beginning in October 2005, Nguyen and two cohorts used identities stolen from users of PayPal and other financial services to fraudulently obtain merchandise worth about $200,000 from Wal-Mart stores located in Northern California, according to court documents. The man, who sometimes went by the online moniker "cashout5050," told one detective investigating the crime his meth habit "gave him the drive to do identity theft."

When he was arrested at his home, his computer contained tens of thousands of stolen identities, templates for constructing phishing sites, and chat logs in which he discussed ways to convert stolen identities into store merchandise. He also had more than 40 fraudulently obtained prepaid gift cards, more than 40 counterfeit credit cards, and a counterfeit California driver's license with his picture on it.

Investigators also found a Remington 870 Magnum Express shotgun that stood up vertically behind Nguyen's computer stand, some near-by ammunition, and a feed from a complex surveillance system.

The scheme began to unravel when a Wal-Mart fraud investigator got an anonymous tip that two of Nguyen's alleged co-conspirators, Stefani Ruland and Ryan Price, had a garage full of items taken from the one of the retailer's outlets. The pair later confessed they obtained the goods using stolen personal identifying information they got from Nguyen.

Ruland and Price were able to obtain fraudulent credit cards by using "instant credit kiosks" located inside Wal-Mart stories, according to court documents. They would input names and other details from the stolen identities into the machines and often receive a temporary document with credit limits as high as $2,000. The kiosks were provided by GE Capital.

Ruland is serving "a long prison sentence" as a result of the investigation, according to court documents. The documents didn't specify the status of Price.

Nguyen told authorities he worked with other phishers located in Romania. Phishing templates found on his computer were designed to make it easy to set up websites that spoofed online services offered by eBay, Fairwinds Credit Union of Florida, Heritage Bank of Olympia, Washington, and the Honolulu City and County Employees Credit Union in Hawaii, among others.

Nguyen was previously convicted of three felonies, including writing fraudulent checks. He has been detained since he was arrested in January 2007.

Nguyen faces a maximum sentence of 10 years in prison for each credit card offense, 10 years for the firearms possession, and seven years for the other charges. He may also be required to pay fines and restitution. Sentencing is scheduled for November 19. ®

Reducing the cost and complexity of web vulnerability management

More from The Register

next story
Early result from Scots indyref vote? NAW, Jimmy - it's a SCAM
Anyone claiming to know before tomorrow is telling porkies
TOR users become FBI's No.1 hacking target after legal power grab
Be afeared, me hearties, these scoundrels be spying our signals
Jihadi terrorists DIDN'T encrypt their comms 'cos of Snowden leaks
Intel bods' analysis concludes 'no significant change' after whistle was blown
Home Depot: 56 million bank cards pwned by malware in our tills
That's about 50 per cent bigger than the Target tills mega-hack
Hackers pop Brazil newspaper to root home routers
Step One: try default passwords. Step Two: Repeat Step One until success
NORKS ban Wi-Fi and satellite internet at embassies
Crackdown on tardy diplomatic sysadmins providing accidental unfiltered internet access
UK.gov lobs another fistful of change at SME infosec nightmares
Senior Lib Dem in 'trying to be relevant' shocker. It's only taxpayers' money, after all
Critical Adobe Reader and Acrobat patches FINALLY make it out
Eight vulns healed, including XSS and DoS paths
Spies would need SUPER POWERS to tap undersea cables
Why mess with armoured 10kV cables when land-based, and legal, snoop tools are easier?
prev story

Whitepapers

Secure remote control for conventional and virtual desktops
Balancing user privacy and privileged access, in accordance with compliance frameworks and legislation. Evaluating any potential remote control choice.
WIN a very cool portable ZX Spectrum
Win a one-off portable Spectrum built by legendary hardware hacker Ben Heck
Intelligent flash storage arrays
Tegile Intelligent Storage Arrays with IntelliFlash helps IT boost storage utilization and effciency while delivering unmatched storage savings and performance.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?
Beginner's guide to SSL certificates
De-mystify the technology involved and give you the information you need to make the best decision when considering your online security options.