Slashdot Mirror

← Back to Stories (view on slashdot.org)

US Indicts Ukrainian Hackers Who Stole Millions of Credit and Debit Card Numbers (reuters.com)

Posted by msmash on from the tussle-continiues dept.

Three Ukrainians associated with the hacking group FIN7 have been arrested in Europe in connection with hacks of more than 100 U.S. companies that led to tens of millions of dollars in losses, Reuters reported Wednesday, citing U.S. officials and court documents. From the report: Fin7 has been linked to breaches affecting hotels bearing the name of U.S. President Donald Trump, Whole Foods, Chipotle, Saks Fifth Avenue and Lord & Taylor, according to cyber security firm Trend Micro. The suspects, Fedir Hladyr, Dmytro Fedorov and Andrii Kolpakov, were arrested in Europe between January and June of this year, the Justice Department said on Wednesday. Hladyr is in U.S. custody and U.S. authorities are seeking extradition of the other two, the department said. The three were arrested in connection with computer hacks to steal customer payment card data and other information from more than 100 U.S. companies, the department said.

22 comments

  1. So, why is it *not* the Ukrainian government? by bogaboga · · Score: 1, Interesting

    Three Ukrainians associated with the hacking group FIN7 have been arrested in Europe in connection with hacks of more than 100 U.S. companies that led to tens of millions of dollars in losses...

    I wonder how the USA was able to infer that these Ukrainians weren't government backed.

    In other words, question is: If these were Russians would the USA have gone for them [directly] or directly accused the Russian government like it has done in the no-so-distant past?

    On a side note, doesn't this show that our systems are inherently weak ?

    1. Re:So, why is it *not* the Ukrainian government? by cascadingstylesheet · · Score: 0

      I wonder how the USA was able to infer that these Ukrainians weren't government backed.

      In other words, question is: If these were Russians would the USA have gone for them [directly] or directly accused the Russian government like it has done in the no-so-distant past?

      Well, go easy on them - at least they found a Trump connection! After all, if they hacked a hotel with his name on it, that proves he was "colluding" with them.

    2. Re:So, why is it *not* the Ukrainian government? by Anonymous Coward · · Score: 0

      typically pattern recognition and analysis methodologies classify the tools and the ones with access to them.
      they systems are designed to be weak

    3. Re:So, why is it *not* the Ukrainian government? by Anonymous Coward · · Score: 0

      Not colluding. Trump licks Putin's ass is not colluding. It's...what the American office of the president has sunk to. It used to be dignified and distinguished, almost revered. Now it's got all the class of a back alley blowjob.

    4. Re:So, why is it *not* the Ukrainian government? by zlives · · Score: 1

      please don't demean back alley consensual blowjobs.

    5. Re:So, why is it *not* the Ukrainian government? by Anonymous Coward · · Score: 0

      ... Well, go easy on them - at least they found a Trump connection ...

      Relatively easy. At least sharpen the chainsaw beforehand.


      Oh, look at that. "before hand". I made a funny.

    6. Re:So, why is it *not* the Ukrainian government? by ShanghaiBill · · Score: 1

      On a side note, doesn't this show that our systems are inherently weak ?

      Duh. Any system based on the same information being both secret and widely shared is inherently weak.

      The solution is to implement the fixes that the rest of the world has already done.

      Note that the Ukrainians only stole American CC #s.

    7. Re:So, why is it *not* the Ukrainian government? by Anonymous Coward · · Score: 0

      Trump is too old, he doesn't have the flexibility to lick Putin's bungger. Now Obama however:

      "This is my last election. After my election I have more flexibility." He can get down there and separate the corn from the peanuts with just the tip of his tounge!

    8. Re:So, why is it *not* the Ukrainian government? by Anonymous Coward · · Score: 0

      "I wonder how the USA was able to infer that these Ukrainians weren't government backed."
      Maybe they investigated and monitored their activity and followed the money prior to arrest?
      "If these were Russians would the USA have gone for them [directly] or directly accused the Russian government like it has done in the no-so-distant past?"
      The USA can only indict Russians in absentia because the US and Russia do not have an extradition agreement? Russia won't even extradite a US citizen who has unequivocally declared he broke some pretty serious US laws.

      The Russians and Chinese only permit state sponsored hackers. Any non-state sponsored hacker faces imprisonment and death. Anyone trying to hide or run and their families are held hostage until they hand themselves in. The US could not threaten Snowden's family to force him to return to the US. That's pretty much SOP for the Russians and Chinese and nobody complains, protest, or challenges these two governments from within.

      "doesn't this show that our systems are inherently weak"
      No it shows that every system in world is weak and can be compromised with enough effort. And it doesn't matter how weak the system is if you get caught in the act trying to hack it. I am pretty sure Iran thought their off the grid centrifuge systems were un-hackable. We might as well kick off the global cyber war and see whose systems are better protected. And even if some nation state is able to inflict damage to the US it will be a pyrrhic victory if they don't eliminate the 10 or so nuclear armed subs sailing off the coast line of the offending state.

    9. Re:So, why is it *not* the Ukrainian government? by piers_downunder · · Score: 1

      Stealing money anonymously is hard, because you have to have a real-world end point for that money. In the case of stolen credit cards, it can be easy to trace where and when these transactions occurred. If they were selling the CC information itself, then it might be the buyer who was compromised.

      IOW, hacking to steal money is a lot harder to keep anonymous, than hacking to steal information. Once you know the individuals involved, it's much easier to spy on them and see whether they are working in a criminal gang from their basement, or clocking on at a government owned building in Moscow.

    10. Re: So, why is it *not* the Ukrainian government? by houghi · · Score: 1

      In Belgium we had a white hat hacker we got some publicity. Some people said he was not a real hacker as he just used Psswrd and got in.

      He stated that that made it even worse.

      --
      Don't fight for your country, if your country does not fight for you.
  2. Re:big deal by PopeRatzo · · Score: 1

    Aziz was initially non-verbal and combative when police arrived at the scene, reports the PostBulletin.

    He was later quoted as saying, "I gouged out my granpappy's eyes to own the libs."

    --
    You are welcome on my lawn.
  3. See, three 600lb kids from teh ukraine by Anonymous Coward · · Score: 0

    not a russian in sight. Trump is right. This proofs undeniabley.

  4. uncrane is weak! by Anonymous Coward · · Score: 0

    uncrane is weak!

  5. What about the rigged U.S. markets by Anonymous Coward · · Score: 0

    and microsecond trading, and all the illicit actions of the large financial institutes that rig the markets and act as giant pumps that suck up foreign capital and embed into the U.S.? Why are we not indicting those people?

    1. Re:What about the rigged U.S. markets by Anonymous Coward · · Score: 0

      Because they elect them President.

    2. Re:What about the rigged U.S. markets by Impy+the+Impiuos+Imp · · Score: 1

      and microsecond trading, and all the illicit actions of the large financial institutes that rig the markets and act as giant pumps that suck up foreign capital and embed into the U.S.? Why are we not indicting those people?

      Dear Rooskie troll,

      Rich people, especially the powerful elites in many corrupt places around the world, invest in the US because it's a safe, stable place. Unlike their own countries, with unstable money nobody but the captured citizens want, and is at risk of being stolen by the inevitable new corrupt elite. So keep it in a stable currency in a stable nation.

      Why do you think US sanctions on Putin's pals hurts so much? It's just on their money...over here.

      --
      (-1: Post disagrees with my already-settled worldview) is not a valid mod option.
  6. Font by Anonymous Coward · · Score: 0

    Someone has been fin7ed...

  7. Evil Ukranians. Thanks Obama! by Anonymous Coward · · Score: 0

    We can only imagine how much more evil Ukraine had planned before Obama sicced his dog, Putin, on the Ukrainians for downing that airplane. I'm glad he had more flexibility after the election. Go Olympics!

  8. Americans by Anonymous Coward · · Score: 0

    Why don't they publish stories when they catch Americans doing this?

  9. Re:big deal by Anonymous Coward · · Score: 0

    quoted where? the only google result for this quote is your comment