Police Bust $200 Million Data Theft Ring

U.S., British and Vietnamese authorities accuse men of selling 1.1 million stolen credit cards via Gmail and Facebook accounts.

(click image for larger view)
The Syrian Electronic Army: 9 Things We Know
One of the worlds largest underground carder forums for reselling stolen credit card data has been shut down.
That announcement was made Wednesday by the FBI, together with police in Britain and Vietnam, who have been conducting a joint investigation into the Mattfeuter website. Authorities have accused the site of selling harvested personal information, including 1.1 million stolen credit cards, which were used to make at least $200 million in fraudulent credit card charges.
In the past week, Vietnamese police have
arrested eight men
as part of the investigation, which is ongoing. Five were charged with being part of the gang that ran Mattfeuter, while three were charged with using information theyd obtained on the forum for ongoing gambling. A local news report named one of the arrested men, Van Tien Tu, as being the boss of the operation.
[ Its getting harder for cybercriminals to launder money without leaving a trail. Read
Liberty Reserve Fallout: How Will Cybercrime Move Money?
]
Although we havent yet heard of many cases with Vietnamese cyber crime yet, the improvements in Vietnamese law passed in 2009 made it a criminal offense to fraudulently obtain card data from overseas targets, as well as from victims in Vietnam, said Gary Warner, director of research in computer forensics at the University of Alabama at Birmingham, in a
blog post
.
In the United States, a related investigation has focused on Vietnam resident Duy Hai Truong, 23, who was arrested last week by Vietnamese police on related charges filed by British authorities. The Department of Justice, in a
criminal complaint
filed Wednesday in federal court, charged Truong with being one of the leaders of the massive conspiracy to commit bank fraud, which began in 2007 and specialized in stealing the data from online retailers. If convicted, Truong faces up to 30 years in jail and a fine of $1 million, or two times the gain derived from the crimes or loss suffered by victims, whichever is greater.
Britains Serious Organized Crime Agency (SOCA) announced Wednesday that theyd arrested three men in London who they accused of being significant forum users. Related arrests reportedly also took place in Germany and Italy.
One of the worlds major facilitation networks for online card fraud has been dismantled by this operation, said SOCAs Andy Archibald, whos the interim deputy director of Britains national cyber crime unit, in a statement. Those engaged in this type of crime should know that that they are neither anonymous nor beyond the reach of law enforcement agencies.
SOCA is continuing to target more Mattfeuter.ru forum members and share related intelligence with international law enforcement agencies and said further arrests of forum members are likely to occur.
How did the forum operate? According to the U.S. criminal complaint, which was sworn by FBI Special Agent Russell Ficara, the forum sold data relating to an individuals personal identifying information (PII), which was known as a dump. Each dump would fetch between $1 and $300, depending on the victims country and the completeness of the data, which might include name, address, credit card details and social security number. Payments for dumps were made via wire-transfer services such as Western Union, as well as via
Liberty Reserve
. Buyers either used dumps to make fraudulent credit card charges, or else resold the dumps to other carders.
Forum users could email their requests to the hackers who ran Mattfeuter and would need to use a wire-transfer service to send payment, then provide the related money transfer control number (MTCN) as proof of purchase before receiving the requested data.
But approximately 16,000 users instead registered with the www.mattfeuter.biz or www.mattfeuter.com websites -- which required creating a username and password -- and could then browse available credit card numbers and search based on regions and different credit card issuers. The site offered discounts for bulk purchases. After selecting their desired dumps, users headed to a checkout screen, where they entered their Liberty Reserve number to finalize the transaction, according to the criminal complaint.
Ficara said that he reviewed more than 1,100 bank accounts during the course of the investigation, and that Truong controlled email accounts that received many of the MTCNs used to pay for dumps. He said that the vast majority of these MTCNs were cashed in at a single Western Union location in Ho Chi Minh City, Vietnam, and that they exceeded $1.9 million.
According to the complaint, in a related case, an unnamed individual plead guilty to credit card fraud and began working with an unnamed law enforcement agency. As part of that cooperation, the person met with others who claimed to have access to stolen credit card numbers offered for sale via Mattfeuter, and communicated with the site using a Gmail account that was controlled by Truong. According to Ficara, Truong also used a Facebook account -- in his own name, and with a photograph of himself -- to post messages to dump purchasers.

Last News
▸ Travel agency fined £150,000 for breaking Data Protection Act. ◂ Discovered: 23/12/2024 Category: security	▸ 7 arrested, 3 more charged in StubHub cyber fraud ring. ◂ Discovered: 23/12/2024 Category: security	▸ Nigerian scammers now turning into mediocre malware pushers. ◂ Discovered: 23/12/2024 Category: security

**Cyber Security Categories**
Google Dorks Database	Exploits Vulnerability	Exploit Shellcodes

CVE List

Tools/Apps

News/Aarticles

Phishing Database

Deepfake Detection

Trends/Statistics & Live Infos

Tags:
Police Bust $200 Million Data Theft Ring