OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
[Dataloss] follow-up: Suspect in $9 Million RBS WorldPay Hack Extradited to U.S.

From: security curmudgeon (jerichoattrition.org)
Date: Tue Aug 10 2010 - 01:21:44 CDT


---------- Forwarded message ----------
From: InfoSec News <alertsinfosecnews.org>

http://www.wired.com/threatlevel/2010/08/tsurikov-extradition/

By Kim Zetter
Threat Level
Wired.com
August 9, 2010

One of the alleged ringleaders behind the 2008 hack of RBS WorldPay has
been extradited to the U.S., where he was arraigned Friday in the Northern
District of Georgia on charges that he helped coordinate the global $9.5
million bank card heist.

Sergei Tsurikov, 26, of Tallinn, Estonia, has been charged in Atlanta with
wire fraud, computer fraud, aggravated identity theft and two conspiracy
charges involving wire and computer fraud.

Tsurikov was indicted in the U.S. last November with Viktor Pleshchuk, 28,
of St. Petersburg; Oleg Covelin, 28, of Chisinau, Moldova; and a fourth
person identified only as ?Hacker 3? for what the government has called
?perhaps the most sophisticated and organized computer fraud attack ever
conducted.? Igor Grudijev, 32, Ronald Tsoi, 32, Evelin Tsoi, 21, and
Mihhail Jevgenov, 34, all of Tallinn, Estonia, were also indicted on
access device fraud charges related to the hack.

Tsurikov, Grudijev, Jevgenov and both Ronald and Evelin Tsoi were
convicted in Estonia of fraud. Pleshchuk was arrested by the Russian
Federal Security Service, or FSB, earlier this year, but because the U.S.
lacks an extradition treaty with Russia, it?s unlikely Pleshchuk will
follow Tsurikov?s footsteps to the U.S. Covelin was still a fugitive
earlier this year; his current status is unknown. The U.S. Attorney?s
office in Georgia has not yet responded to a call from Threat Level.

The hack of RBS involved cracking the PINs for payroll debit cards -- the
holy grail of bank card hacking.

[...]

_______________________________________________
Dataloss Mailing List (datalossdatalossdb.org)
Archived at http://seclists.org/dataloss/

Get business, compliance, IT and security staff on the same page with
CREDANT Technologies: The Shortcut Guide to Understanding Data Protection
from Four Critical Perspectives. The eBook begins with considerations
important to executives and business leaders.
http://www.credant.com/campaigns/ebook-chpt-one-web.php