Feeds

Queen of WorldPay cash-machine scam sent down for 2.5 years

Hi-tech Fagin herded money mules

Top three mobile application threats

A Nigerian woman has been jailed for two-and-a-half years in the US after she was found responsible for playing a key role in the infamous $9m WorldPay payment card scam back in 2008.

Sonya Martin, 45, was convicted of managing a team of Chicago money mules who withdrew money from cash cards that had been loaded with looted funds. Cybercrooks had topped-up the payroll debit cards by breaking the encryption used to protect their sensitive financial data. Such cards are used by some firms to pay workers.

Hackers used compromised access to WorldPay's systems to raise the account balance and withdrawal limits on targeted accounts before forging 44 payment cards associated with these compromised accounts. Funds were then withdrawn from these accounts in an overnight cash-out operation involving 2,100 ATMs in at least 280 cities in the US, Russia, Estonia, Italy, Hong Kong, Japan, and Canada in a coordinated operation on 8 November 2008, the FBI said.

The gang monitored the progress of the cash-out operation in real-time using WorldPay's own computer systems before attempting (unsuccessfully) to erase their tracks. Infamous hacker Albert Gonzalez masterminded the whole scam as well as other credit card megabucks against TJ Maxx, Heartland Payments Systems and others. Gonzalez was jailed for 20 years in the spring of 2010.

The FBI said Martin managed a cash-out crew in Chicago that used counterfeit debit cards to fraudulently withdraw approximately $80,000 from various Chicago ATMs. She was arrested in March last year when she attempted to board a flight from New York to London. Martin will have to serve five years on probation after her release, as well as paying back $89,000 in restitution for her crimes.

An FBI statement on Martin's sentencing can be found here. ®

Combat fraud and increase customer satisfaction

More from The Register

next story
Obama allows NSA to exploit 0-days: report
If the spooks say they need it, they get it
Heartbleed exploit, inoculation, both released
File under 'this is going to hurt you more than it hurts me'
Canadian taxman says hundreds pierced by Heartbleed SSL skewer
900 social insurance numbers nicked, says revenue watchman
German space centre endures cyber attack
Chinese code retrieved but NSA hack not ruled out
Burnt out on patches this month? Oracle's got 104 MORE fixes for you
Mass patch for issues across its software catalog
Reddit users discover iOS malware threat
'Unflod Baby Panda' looks to snatch Apple IDs
Oracle working on at least 13 Heartbleed fixes
Big Red's cloud is safe and Oracle Linux 6 has been patched, but Java has some issues
prev story

Whitepapers

Mainstay ROI - Does application security pay?
In this whitepaper learn how you and your enterprise might benefit from better software security.
Combat fraud and increase customer satisfaction
Based on their experience using HP ArcSight Enterprise Security Manager for IT security operations, Finansbank moved to HP ArcSight ESM for fraud management.
The benefits of software based PBX
Why you should break free from your proprietary PBX and how to leverage your existing server hardware.
Top three mobile application threats
Learn about three of the top mobile application security threats facing businesses today and recommendations on how to mitigate the risk.
3 Big data security analytics techniques
Applying these Big Data security analytics techniques can help you make your business safer by detecting attacks early, before significant damage is done.