Slashdot Mirror


Massive Hacking Ring Stole Data From 100 Million Bank Customers (bloomberg.com)

An anonymous reader writes: Court documents unsealed yesterday tie together cybersecurity breaches at several different banks and financial institutions as being caused by the same group of criminals. "Hackers and conspirators in more than a dozen countries generated hundreds of millions of dollars in illicit proceeds on pump-and-dump stock schemes and particularly lucrative online gambling, prosecutors said. From 2012 to mid-2015, the suspects and their co-conspirators successfully manipulated dozens of publicly traded stocks, sent misleading pitches to clients of banks and brokerages whose e-mail addresses they'd stolen, and profited by using trading accounts set up under fake names, prosecutors said." The attacks were spread across 75 different companies in nations across the globe, and included collusion with corrupt government officials who ignored the problem. U.S. Attorney Preet Bharara said, "By any measure, the data breaches at these firms were breathtaking in scope and in size."

38 comments

  1. Mobile phones by fluffernutter · · Score: 1

    Maybe all these hacks weren't related to mobile devices, but I'm really surprised anyone would use their mobile phone for banking until there are none of these kinds of issues.

    --
    Laws are rules for the court, but merely a bottom bar to hit for life. Think beyond laws in your actions always.
    1. Re:Mobile phones by Ol+Olsoc · · Score: 1

      Maybe all these hacks weren't related to mobile devices, but I'm really surprised anyone would use their mobile phone for banking until there are none of these kinds of issues.

      Why, People use their mobile devices while they have sex.

      We have to face it, humanity is welded to those little gaddamned things.

      --
      The shepherds did so well protecting the flock that the sheep no longer believed that wolves existed.
    2. Re:Mobile phones by Mashiki · · Score: 1

      People were saying this about banking apps back in the 1990's, especially the ones where the bank provided you with their own dial-in service, and password information was communicated non-encrypted or stored in plain text on the users PC.

      --
      Om, nomnomnom...
    3. Re: Mobile phones by Anonymous Coward · · Score: 0

      Correct, part of another article on this back, limited the size of the break-in, an extended the date of the intrusion back to 2007. For the article go to Krebs website, and has a link to the indictment. But, it makes me wonder who gave them up? Seems, as if, they could stay hidden that long, what did they do wrong, to bring them out? Get too greedy, or forgot to pay someone?

    4. Re:Mobile phones by Anonymous Coward · · Score: 0

      I think it's more like people are having sex while using their mobile devices.

    5. Re:Mobile phones by CaptainDork · · Score: 2

      I tried phone sex one time, but my phone just wants to be friends.

      --
      It little behooves the best of us to comment on the rest of us.
    6. Re:Mobile phones by davester666 · · Score: 1

      No. It's just really into backdooring you, and you won't let it.

      --
      Sleep your way to a whiter smile...date a dentist!
  2. Bitcoin? by U2xhc2hkb3QgU3Vja3M · · Score: 1, Interesting

    Hackers and conspirators in more than a dozen countries generated hundreds of millions of dollars in illicit proceeds on pump-and-dump stock schemes and particularly lucrative online gambling, prosecutors said.

    Are they also responsible for the sudden surge and fall of the Bitcoin value in the last week or so? It went up to USD$475 before falling down to USD$325.

    Fight for your bitcoins!

    1. Re:Bitcoin? by U2xhc2hkb3QgU3Vja3M · · Score: 1

      Of course, with Bitcoins anyone can follow the price and buy/sell at the right times. You can even bypass the exchange to fiat currency and exchange your gains for a more stable coin, like EarthCoin.

      Fight for your bitcoins!

  3. Well its a good thing by Anonymous Coward · · Score: 0

    Its a good thing we have regulations in place to keep banks from getting too big.

    Otherwise you could hack hundreds of millions of accounts all at once.

    1. Re:Well its a good thing by Ol+Olsoc · · Score: 1

      Its a good thing we have regulations in place to keep banks from getting too big.

      Otherwise you could hack hundreds of millions of accounts all at once.

      Rather its a good thing we have banking and stock trading on the internet. What could ever go wrong? P Oh... wait.

      --
      The shepherds did so well protecting the flock that the sheep no longer believed that wolves existed.
    2. Re:Well its a good thing by LifesABeach · · Score: 1

      Given stated facts, "hackers got contact information of clients from such 'honest little school girl firms like Goldman Sacks', and then contacted these clients to tell them to buy certain stocks; knowing that these stocks would have a high probability of tanking." When to prices went up, the Bad Guys sold their stocks. This is like a tired Twilight Zone episode. OK boys and girls, Real Estate market?, prices tanking?, 'to big to fail?', it all sounds so familiar. Only no one went to jail then. Why? My heart has no pity for the likes of Goldman Sacks, and those that would call them Friend, or Client. If one defecates with dogs, you're going to get your ass sniffed.

    3. Re:Well its a good thing by Ol+Olsoc · · Score: 1

      You know you can apply that stupid 'what could ever go wrong' meme to absolutely everything, right? People with actual brains know there are risks and benefits to everything, and it just becomes a matter of risk vs reward. And if you don't think there is any reward to banking and stock trading on the internet, clearly you have not thought about it at all.

      Do you have a point?

      Of course there are rewards. You can do things really really quickly and with software game the system very well indeed. When the software calls, you dump it all make a few cents or millions and move on. Or buy, whatever the software tells you

      And you can use your smartphone to do your banking, and leave you more time to read facebook. That's priceless.

      Of course, the bad guys might end up bringing the banks down that way, or you might get taxed on mysterious gains and transactions you never knew you had, but hey, Facebook!

      --
      The shepherds did so well protecting the flock that the sheep no longer believed that wolves existed.
  4. Wait... by Anonymous Coward · · Score: 0

    ...Aren't these people just "Researchers" looking to expose vulnerabilities?

  5. Same group? by Crowd+Computing · · Score: 1

    It's probably in the prosecutors' interest to portray the suspects as a "ring" or "criminal enterprise", but how sure are we that this isn't just the hardcore criminal equivalent of Anonymous? Do a bunch guys chatting online and exchanging info about security weaknesses already constitute a conspiracy?

    1. Re:Same group? by bws111 · · Score: 1

      This isn't about 'a bunch of guys chatting', it is about actual crimes. And if there is more than one person involved then, by definition, it is a conspiracy.

    2. Re:Same group? by Crowd+Computing · · Score: 1

      This isn't about 'a bunch of guys chatting', it is about actual crimes. And if there is more than one person involved then, by definition, it is a conspiracy.

      I'm not implying the suspects shouldn't be prosecuted. All I'm saying is that prosecuting the case the wrong way, even if it leads to the correct result, might have serious implications for us all. Not all crimes are felonies, and not all felonies are punishable by jail time that exceeds the election cycle. Conspiracies are prosecuted as felonies and also lead to longer jail times than when a crime is committed by an individual.

      A more concrete example, the TPP has vague provisions for "commercial scale" infringement. Clearly one individual pirating a single movie isn't commercial scale, but what about 10,000 individuals? Now suppose a clever law enforcement official manages to link these 10,000 John Does together as a conspiracy, then their individual acts of piracy become commercial scale.

  6. âoeItâ(TM)s like drinking freaking vodka by Nutria · · Score: 1, Insightful

    Greed gets you every time.

    I'm a Chase customer, but haven't lost any money. Why? I don't speculate, nor gamble, nor invest in schemes with guaranteed high rates of investment.

    --
    "I don't know, therefore Aliens" Wafflebox1
  7. Sounds like someone was non-union... by Anonymous Coward · · Score: 1

    Sounds like they didn't pay their criminal financier union dues. Otherwise it reads like any other bank exec resume.

    1. Re:Sounds like someone was non-union... by Anonymous Coward · · Score: 3, Insightful

      Came here to say the same thing.

      successfully manipulated dozens of publicly traded stocks

      No different from normal bankers.

      sent misleading pitches to clients of banks and brokerages

      Hahahahaha. Misleading pitches?! WTF. This is how Capitalism is run.

      profited by using trading accounts set up under fake names

      Again, how is this different from Wall Street?

  8. The fact that this went on for so long... by geekmux · · Score: 1

    ...within the stock markets tends to explain why we should perhaps not give a shit about crooks stealing from crooks.

    Sadly, the criminals we put in charge of the banking system make this kind of corrupt activity look like amateur night at the local karaoke bar.

    1. Re:The fact that this went on for so long... by rmdingler · · Score: 1

      There were actually some crooked bankers involved in the scheme, who will undoubtedly turn State's evidence and avoid the prison these others are head3d to.

      --
      Happiness in intelligent people is the rarest thing I know.

      Ernest Hemingway

  9. Re:âoeItâ(TM)s like drinking freaking vo by rmdingler · · Score: 1
    They seem guilty of running the same scam for too long.

    A bit of stupidity combined with that greed.

    --
    Happiness in intelligent people is the rarest thing I know.

    Ernest Hemingway

  10. Hacking Ring, is that like a Smart Watch? by GinRummy33 · · Score: 1

    Only reading the headline: They make "Hacking Rings" now? Are they like Smart Watches? "Don't bring that ring anywhere near my computer, Bob, I hear it steals bank data."

  11. group of criminals... by fustakrakich · · Score: 1

    This is quite a cover up for all the Wall Street swindling and price and interest rate (See Libor) manipulation that's going on. It should keep the prosecutors away from the real criminals, the banks themselves.

    --
    “He’s not deformed, he’s just drunk!”
  12. Give them Death by Anonymous Coward · · Score: 0

    At what point do we apply the death penalty to crimes of this magnitude?

  13. So... Business as usual! by Cornwallis · · Score: 1

    "They colluded with corrupt international bank officials who willfully ignored its criminal nature..."

  14. Hacking ring stole data from bank computers .. by nickweller · · Score: 1

    Title corrected for accuracy ..

  15. Double Standard by ThatsNotPudding · · Score: 1

    If these thieves worked for JP Morgan, Deutche Bank, Lloyds. etc, and done the exact same thing, they would not have even been investigated nor would the public had ever known.

    You just have to be the right kind of thief (one with an MBA).

    "Because any man with a brief case can steal more money than any man with a gun." -- Don Henley

    1. Re:Double Standard by Anonymous Coward · · Score: 0

      Because the banks pay politicians via lobbying, whereas a common thief, whether they're at gun/knife point or ID theft, don't. Banks are owned by the world's wealthy elite, how many criminal organisations are billionaires (outside of Russia and the middle-east).

  16. Re:âoeItâ(TM)s like drinking freaking vo by AndyCanfield · · Score: 1

    I have no credit card, ne Paypal. I live in a small town and pay cash for everything. "Where you keep your money determines who can steal from you."

  17. Re:âoeItâ(TM)s like drinking freaking vo by Nutria · · Score: 1

    No one has (yet) successfully stolen from my CC nor PayPal account.

    Chase is really on the ball with fraud detection, with a tiny rate of false positives (which only happened when we traveled out of state w/o telling them). A quick phone call cleared it right up.

    --
    "I don't know, therefore Aliens" Wafflebox1
  18. Re:âoeItâ(TM)s like drinking freaking vo by AndyCanfield · · Score: 1

    Chase sounds good. Most critical, I suppose, is this: if hackers steal your money, does Chase reimburse you? I live in rural Thailand. I don't even trust the Internet cables here. - www.andycanfield.com

  19. How massive? by Anonymous Coward · · Score: 0

    So massive there have been just 33 comments in 6 hours.

  20. Re:âoeItâ(TM)s like drinking freaking vo by Nutria · · Score: 1

    if hackers steal your money, does Chase reimburse you?

    They've never (tried to AFAICT) gotten into my bank accounts, and CC fraud has (so far) always been caught early enough that I've not lost anything. Vendors might have taken a hit, though.

    I live in rural Thailand. I don't even trust the Internet cables here.

    Can't help you with that part...

    --
    "I don't know, therefore Aliens" Wafflebox1
  21. Re:âoeItâ(TM)s like drinking freaking vo by ShaunC · · Score: 1

    Chase is good in my experience. They let you set up your own alerts, for example they'll send you a text message anytime a purchase is made over a certain dollar amount. You can set it to $1 and receive a text every single time the card is used, which is nice both for fraud detection and for remembering how much money you're spending on recurring subscriptions. I think other card issuers offer this feature now but Chase was the first of my cards to implement that. They were also the first to send me a chip-style card, almost a year before the requirement became effective.

    All credit card issuers in the US are required to reimburse you for unauthorized charges. The law states you're liable for up to $50 but in practice I've never heard of a card issuer sticking the customer with any charge at all, if you dispute a (legitimately) fraudulent charge, they just remove it from your statement. Not sure how things work in Thailand. Anecdotally, I've never seen a bogus charge on my Chase Freedom card, but I don't know whether that's because they've prevented things from going through or whether nobody's tried.

    --
    Thanks to the War on Drugs, it's easier to buy meth than it is to buy cold medicine!
  22. In Homers voice by Anonymous Coward · · Score: 0

    Suck kers.