Thirty-eight people in the US and Romania have been charged in two indictments alleging they used complicated Internet phishing schemes to steal thousands of credit and debit card numbers, US and Romanian authorities announced Monday.
The indictments, in US District Court for the Central District of California and the District of Connecticut, focus on two related phishing schemes with ties to organized crime, the US Department of Justice said. Phishing involves sending e-mail messages that look like official correspondents from banks or credit card vendors in an attempt to get recipients to go to a fake Web site and enter their account numbers.
A grand jury in Los Angeles charged 33 people for their alleged participation in a scheme that targeted thousands of individual victims and hundreds of financial institutions. The 65-count indictment was unsealed Monday. Seven people were charged in a Connecticut indictment for their roles in an Internet phishing scheme, including two who were charged in the Los Angeles case.
US authorities were acting on nine arrest warrants in the Los Angeles area and Romanian authorities acting on search warrants there Monday in connection with the racketeering indictments.
Among the charges in the Los Angeles indictments are conspiracy to violate the Racketeer Influenced and Corrupt Organizations (RICO) Act; conspiracy in connection with access devices; unauthorized access to a protected computer; bank fraud; and aggravated identity theft.
The RICO conspiracy charge carries a maximum prison sentence of 20 years, bank fraud has a maximum sentence of 30 years, and device fraud conspiracy has a maximum sentence of seven and a half years. The unauthorized access count carries a maximum prison sentence of five years, and aggravated identify theft carries a mandatory two-year prison sentence.
The Romanian members of the organization obtained thousands of credit and debit card accounts and other personal information through phishing, according to the indictment. The group sent more than 1.3 million spam e-mail messages in one phishing attack, the DOJ said.
The Romanians collected the victims' information and sent the data to cashiers in the US through Internet chat messages, the DOJ said. The US cashiers used hardware called encoders to record the fraudulently obtained information onto the magnetic strips on the back of credit and debit cards. Cashiers then directed other criminals called runners to test the fraudulent cards by checking balances or withdrawing small amounts of money at ATMs.
The cards that were successfully tested were used to withdraw money from ATMs or point-of-sale terminals with the highest withdrawal limits, the DOJ said. Part of the money was then wire transferred to the supplier in Romania.
Seuong Wook Lee, a cashier in the scheme, pleaded guilty on May 15 in US District Court in Los Angeles to racketeering conspiracy, bank fraud, access device fraud and unauthorized access of a protected computer, the DOJ said.
In the related Connecticut case, seven Romanian resident were charged in an indictment returned by a grand jury in New Haven on Jan. 18 and unsealed Friday. The indictment alleges the defendants used a phishing scheme to commit fraud in connection with access devices, conspiracy to commit bank fraud and aggravated identity theft.
The Connecticut investigation came from a state resident's complaint about a fraudulent e-mail message made to appear as if it originated from Connecticut-based People's Bank. The e-mail message directed victims to a computer in Minnesota that had been compromised and used to host a counterfeit People's Bank Internet site.
Investigators found that the defendants had targeted several banks and other companies, including Citibank, Capital One and PayPal.
On April 23, US Attorney General Michael Mukasey announced a strategy to combat international organized crime.
"Criminals who exploit the power and convenience of the Internet do not recognize national borders; therefore our efforts to prevent their attacks cannot end at our borders either," Deputy Attorney General Mark Filip said in a statement. "Through cooperation with our international partners, we can disrupt and dismantle these enterprises, just as we have done today with these indictments and arrests."
Read up on the latest ideas and technologies from companies that sell hardware, software and services. Achieving the impossible: Unlimited application scalability
Mimosa™ NearPoint™ for Microsoft® Exchange Server: Email Archiving 101
Wireless LANs: Is my enterprise at risk?
Solve Exchange Mailbox Storage Issues Once and for All
Refresh your AUP: Top tips to ensure your acceptable use policy is fit for purpose
Best Practice in Building an Integrated Information Management Strategy
Email Archiving 101—Customer Case Study
CRM your salespeople will love
Zones provide focussed content from Computerworld and leading technology partners.Discover how SOA can create smarter outcomes for your business.
Attend and learn:
- How SOA is helping leading companies to become more agile
- Where you should be applying SOA processes in your company
- The top SOA implementation mistakes to avoid
Click here for more information.
- +
Computerworld Live Podcast #97: The Future of Enterprise Networking 25/07/2008 09:45:36
This week CW Live chats with Mark Thompson, global sales and marketing manager for HP ProCurve, on the future of the enterprise networking. Mark discusses the trends we can expect to see in the near future and how the right infrastructure can ensure your enterprise network is secure. - +
Computerworld Live Podcast #96: Security at the Edge 11/06/2008 09:22:22
CW Live speaks with Amol Mitra, HP ProCurve Director of Marketing for Asia Pacific and Japan. Today's topic: how enterprises are starting to shift away from simply controlling security via server logins, firewalls and moving to more adaptive security frameworks. - +
Data Management Edition #10: Multi-Petascale Systems 02/05/2008 09:12:33
This week we look at sustainability and the development of multicore technologies to build multi-petascale systems. - +
IT Security Edition #11: How to poison the Storm botnet 01/05/2008 08:51:55
This week CW Live presents a case study on how to poison the notorious Storm botnet . Plus we take a look at Cisco's plans for Ironport. - +
IT Security Edition #10: Cyber-battles fought and won 24/04/2008 11:09:47
Vendors bow to end user pressure to improve product security, and we take a look at the latest concepts shaping the cyber-battlefield of the future.
Vignette Announces 2008 Excellence Awards 2008-11-21 10:50:00+11
PGP and Ponemon Institute Unveil Inaugural Australian Data Breach Study 2008 2008-11-20 17:34:00+11
Symantec Cloud Services Transform Data Centre Operations Through Proactive Management 2008-11-20 12:06:00+11
Verizon Business Offers Tips to Building a Successful Unified Communications and Collaboration Plan 2008-11-20 12:04:00+11
AARNet Brings 4K Digital Cinema to Australia: First 4K HD Video Signal delivered into Australia by AARNet 2008-11-20 12:02:00+11
Best Practice in Building an Integrated Information Management Strategy
Discover the business value that creating an integrated information platform can bring. Learn how to provide consistent, accurate information to all stakeholders within your business network. Integrate vital data from disparate sources and deliver a trusted information foundation. Read on to uncover the stepping-stones to your new information management strategy.









