Feeds

US card scammers pull $2m petrol heist

Skimming operation nets big bucks and serious charges for gang

Protecting users from Firesheep and other Sidejacking attacks with SSL

US attorneys have charged thirteen people in connection with a massive fraud operation which netted some $2m in stolen funds.

The Manhattan District Attorney's office says that four defendants masterminded a plot to install card skimming devices at gas pumps throughout the southern US and then use a network of money mules to withdraw and transfer funds from the stolen cards in a money laundering operation.

According to District Attorney Cyrus Vance, the four defendants installed the skimmers inside pumps at Raceway and Racetrac chain gas stations in Texas, South Carolina and Georgia. The skimmers, which were rigged with Bluetooth connectivity and invisible from outside the pump, could then be remotely accessed by the group.

Having the stolen card data and PIN numbers from customers, the four were then said to have printed out forged bank cards and withdrew the cash from ATMs in amounts less than $10,000 and redeposit the funds in a series of bank accounts around Manhattan.

Using a collection of nine money mules located in California and Nevada, the funds were once again withdrawn in a series of small transactions at designed to avoid police detection and redistributed. In total, authorities believe that the operation employed the use of 70 different accounts controlled by various members of the group as part of the laundering attempt.

"Cybercriminals and identity thieves are not limited to any geographic region, working throughout the world behind computers," Vance said.

"In this case, the defendants are charged with stealing personal identifying information from victims in southern states, used forged bank cards on the East Coast, and withdrew stolen proceeds on the West Coast."

The attorney's office said that the four ringleaders in the operation will each face a catalog of 408 felony counts ranging from money laundering and grand larceny to possession of forged devices and forgery instruments.

Meanwhile, the nine people who acted as money mules in the operation will each be hit with two felony counts of third-degree money laundering. ®

The next step in data security

More from The Register

next story
Israeli spies rebel over mass-snooping on innocent Palestinians
'Disciplinary treatment will be sharp and clear' vow spy-chiefs
Infosec geniuses hack a Canon PRINTER and install DOOM
Internet of Stuff securo-cockups strike yet again
THREE QUARTERS of Android mobes open to web page spy bug
Metasploit module gobbles KitKat SOP slop
'Speargun' program is fantasy, says cable operator
We just might notice if you cut our cables
Apple Pay is a tidy payday for Apple with 0.15% cut, sources say
Cupertino slurps 15 cents from every $100 purchase
YouTube, Amazon and Yahoo! caught in malvertising mess
Cisco says 'Kyle and Stan' attack is spreading through compromised ad networks
Hackers pop Brazil newspaper to root home routers
Step One: try default passwords. Step Two: Repeat Step One until success
Greater dev access to iOS 8 will put us AT RISK from HACKERS
Knocking holes in Apple's walled garden could backfire, says securo-chap
prev story

Whitepapers

Providing a secure and efficient Helpdesk
A single remote control platform for user support is be key to providing an efficient helpdesk. Retain full control over the way in which screen and keystroke data is transmitted.
Saudi Petroleum chooses Tegile storage solution
A storage solution that addresses company growth and performance for business-critical applications of caseware archive and search along with other key operational systems.
Security and trust: The backbone of doing business over the internet
Explores the current state of website security and the contributions Symantec is making to help organizations protect critical data and build trust with customers.
Reg Reader Research: SaaS based Email and Office Productivity Tools
Read this Reg reader report which provides advice and guidance for SMBs towards the use of SaaS based email and Office productivity tools.
Security for virtualized datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.