How the Secret Service Busted ShadowCrew

plover writes "In the story Hacker Hunters, BusinessWeek Online documents how the Secret Service turned a member of the ShadowCrew and was able to arrest dozens of the members of the phishing ring. From the article: 'Law enforcement officials are often loath to reveal details of their operations, but the Secret Service and Justice Dept. wanted to publicize a still-rare victory. So they agreed to reveal the inner dynamics of their cat-and-mouse chase to BusinessWeek. The case provides a window into the arcane culture of cybercriminals and the methods of their pursuers. ' "

Comments

At what cost?

[xorowo]

I'm all for catching these guys, but I wonder about publicizing the details at this time. Is this supposed to make us feel better about the Patriot Act -- "look here! See how we can bust the bad guys with the 'right' tools!" -- or are we just supposed to be happy that something was done about this gang of thieves? I don't expect everything to be about freedom and democracy, but it is too easy anymore to question why authorities give us this information, rather than look at the information for information sake...if that makes any sense.

Re:At what cost?

[RodgerDodger]

These things need to be published for their deterrent value. One big problem with cybercrime is that the criminals feel that they'll never be caught, and if they ever are, then the punishment will be a slap on the wrist.

As long as this perception (which is very valid!) exists, the risk-reward ratio makes cybercrime attractive. Busting the crooks isn't enough to change the perception - you need to let the other crooks know that they could be busted next.

Organised crime, in particular, is a business. If they start to feel that their criminal ventures are too risky, they'll go elsewhere (quite possibly into legit business, where their complete lack of ethics will help them fit in with the rest of the corporate sharks)

Shadowcrew Forum

[Andorion]

For a short time after Shadowcrew was busted, their private forums were accessible to the public. I archived about 12 threads, one of which was a 10 page long "shadowcrew being investigated" thread.

Here are some excerpts:

10 full info cc's for sale

Hello

info details:
NAME ON CARD: CARD NUMBER: DATE: CVV: PIN: ROUTING: CHECKING: ADRESS: CITY: STATE: ZIP: COUNTRY: PHONE: SSN: MMN: DOB:
price is 100$ for 10 infos
I accept e-gold
icq xxxxxxxx

for buyers: we can use escrow if you like

CALIFORNIA Lic
if you are willing to sale a real cali lic. with a clean record. iam looking for one, with these details.
hispanic or indian, male, 5'9 to 5'11, brown eyes, black or brown hair. 160lbs to 180lbs, DOB: 1964 TO 1974..
drop me a PM with the info & price.
thanks for your time & be safe.

Offering DDOS Service
Hi,

Firstly I can understand if the owners, and
moderators of SC do not want this kind of service offered here, and I'll apologize in advance. However I couldn't find anything against it, other than SC being the victim of such attack.
I'd like to be reviewed for this service, if
possible. Thanks.
PayPal accounts - many
All kinds of PP ACCZ...

Verified/No Verified, Active/No Active, Mail
access/without, Any balance/0, USA, UK, Europe...

icq: xxxxxxxxx

2Admins: i can give you some for review -
knock, knock

people for instore... will provide dumps and matching plastic

I am looking for people out there who would be willing to do instore for me if I provide dumps (high quality) and matching plastic. Please PM me for more info. I dont want to discuss too much here in the open.

Scary stuff. Please use fewer junk characters. Please use fewer junk characters. Please use fewer junk characters. Please use fewer junk characters. Please use fewer junk characters. Please use fewer junk characters. Please use fewer junk characters. Please use fewer junk characters.

Re:Shadowcrew Forum

[PseudoThink]

Interesting...but what I'd REALLY love to see is the chat-log of the group meeting mentioned in the article. I'm guessing that around 9pm, it starts getting rather entertaining.

From the article:

To ensure the suspects were at home, a gang member-turned-informant had pressed his pals to go online for a group meeting.

At 9 p.m., Nagel, the Secret Service's assistant director for investigations, issued the "go" order. Agents armed with Sig-Sauer 229 pistols and MP5 semi-automatic machine guns swooped in, aided by local cops and international police. The adrenaline was pumping, in part, because several ShadowCrew members were known to own weapons. Twenty-eight members were arrested, most still at their computers. The alleged ringleaders went quietly, but one suspect jumped out a second-story window. Agents nabbed him on the ground. Later, they found a loaded assault rifle in his apartment. The operation was swift and bloodless.

Re:Why doesn't this make sense?

[KiloByte]

"Hacker culture" or "bottom-sucking cracker thieves culture"?

We have enough media confusing "hacker" and "cracker" already.

Nice to see actual criminals for a change....

[Vellmont]

It used to be the Secret Service wasted their time going after people publishing electronic magazines like Craig Neidorf (Phrack), people making a board game with "Hacker" as the name like Steve Jackson Games, or people looking to just break into computers for fun and understanding.

Now they're going after actual criminals that the above people warned us about. I've got to say that's a real improvement. Of course it took actual electronic criminals to make them realize who the real enemy is.

shadowcrew.com

[Anonymous Coward]

I received an unusual spam message advertising warez, cardz, etc. and took the time to trace the message back to the shadowcrew website. The forums on this site were amazing. Basically it was a hub for people to advertise very highly illegal services, or sell lists of credit cards, passwords, etc... a hub for Identitity theives, and fraudsters.

I reported this site to the FBI, and received the following response from them (back in October of last year).

"Thank you for your submission to the FBI Internet
Tip Line. Inasmuch as the FBI has recently
received numerous reports concerning the
"www.shadowcrew.com" Web site, there is no need to
forward any such additional emails to us. Our
Cyber Division is aware of this Web site, and is
addressing the matter."

It was only a matter of time until these idiots were caught. You can't be this open about such illegal activity and not expect a response from the feds.

Re:Sloppy editing regarding firearms

[sootman]

Last time I looked at a catalog (a while ago) you could mix-n-match the modes of operation, as evidenced by the selector: safe (one white bullet), semi (one red bullet), two-round burst (two red bullets), three-round burst (three red bullets), and full-auto (seven red bullets). You could order one with any trigger group you want--like safe, semi, two-round, and full; or safe, semi, and three-round burst only. (But if you call up and ask for 'full auto only and no safe, please' they'd probably hang up on you. :-) )