The Register® — Biting the hand that feeds IT

Feeds

Russia arrests three over $9m RBS WorldPay scam

Alleged looters face lots of questions

Cloud based data management

Three men suspected of orchestrating a massive $9m cyber-raid on RBS WorldPay involving cloned payroll cards and hacking have been arrested by Russian's FSB internal security service.

Viktor Pleshchuk, the alleged ringleader, and two accomplices, Sergei Tsurikov and Oleg Covelin, were arrested on suspicion of masterminding the $9m hacking and subsequent looting of payment systems run by RBS WorldPay in November 2008, the Financial Times reports.

The high profile cyberblag involved the use of cloned payroll cards to take out money from an estimated 2,100 cash machines in 280 cities worldwide during an audacious 12 hour overnight cash-out operation. It involved breaking into RBS WorldPay systems and extracting data needed to create forged cards after ""reverse engineered personal identification numbers (PINs) from the encrypted data", according to a November 2009 indictment on the case, as previously reported in more detail here.

A payroll card is a pre-paid card that's topped up by an employer and given to workers. They can then use it at shops or to withdraw cash at ATMs.

Sergei Tsurikov, then 25, of Tallinn, Estonia; Viktor Pleshchuk, 25, of St Petersburg, Russia; Oleg Covelin, 28, of Chisinau, Moldova were each named in this indictment. Authorities allege Covelin identified a flaw in RBS WorldPay systems that allowed him to carry out the hack in conjunction with Tsurikov, Pleshchuk and another as-yet-unidentified hacker.

The RBS WorldPay arrests are being welcomed in the West as signs of increased Russian involvement in the fight against cybercrime. The only previous case on record that led to the arrest of Russian hackers involved DDoS attacks on online gambling firms and banks that eventually led to the conviction and imprisonment of three hackers - Ivan Maksakov, Alexander Petrov and Denis Stepanov - for eight years in 2007.

The Russian Constitution prohibits the extradition of its nationals, so any prosecution of Pleshchuk in the RBS WorldPay hack will have to take place in Russia. US authorities requested the extradition of Tsurikov, who was arrested by Estonian authorities last year before been turned over to the FSB for further questioning earlier this week. ®

Regcast training : Hyper-V 3.0, VM high availability and disaster recovery

Didn't pay someone off

Russia being basically a collection of criminal gangs, with the largest criminal gang (the former KGB) being the biggest dog, this sounds like they failed to pay off the right person.

1
0

Big mistake

not paying off ' law enforcement'. Good article in this weeks Economist. If you think Russia bears any resemblance to law enforcement in the west then you are very very deluded. And there's bugger all prospect of it changing.

0
0

Hardly a Club Med fact finding tour is it?

They don't intend to give those bank robbers golden handshakes, massive pensions and time in the House of Frauds for good behaviour and jobs for the boys.

But I can't help thinking it is good news for some. {R}

0
0

More from The Register

 breaking news
Number of cops abusing Police National Computer access on the rise
Only a telegram from the Queen can get you off it
 breaking news
NSA PRISM snoop-gate: Won't someone think of the children, wails Apple
10,000 things probed, mostly about missing kids, Alzheimer patients, we're told
Flash flaw potentially makes every webcam or laptop a PEEPHOLE
But it's a Google problem - Chrome only, insists Adobe
Internet fraud still stings suckers
Australians twice as gullible as Americans
 breaking news
NSA PRISM-gate: Relax, GCHQ spooks 'keep us safe', says Cameron
Whatever they are up to, it's all above board, we're told
 breaking news
Yahoo! joins! rivals! in! PRISM! data! request! admission!
Keep calm and carry on using American tech firms, folks
PRISM snitch claims NSA hacked Chinese targets since 2009
Snowden suddenly looks safer in Hong Kong after revelations
 breaking news
US chief spook: Look, we only want to spy on 6.66 BEELLLION of you
Americans assured they are not in the NSA's sights
Speech-to-text drives motorists to distraction
Will talking to you mean I crash into that car up ahead, Siri?
DHS warns of vulns in hospital medical equipment
Has your doctor's anasthesia machine been hacked?