Register

To become a member of ITProPortal Register here.

Already a member? Login here

Please register below. All we need is a valid email address and a password.

Please use a real email address as we need to email you to confirm your account.
Must be at least 6 characters long.

Benefits of joining ITProPortal:

  • Unlimited Access to Special Reports and White Papers
  • Exclusive offers and discounts
  • Free entry to all competitions
  • Access to beta sections of ITProPortal.com

Login to your account

Forgot your password?


Submit Register Cancel

Packet sniffers used to lift payment card data

Author: Steve Gold| Date: 16 May 2008| Tags:  Card Transactions, Hacking
Packet sniffers used to lift payment card data
  • IconText size Icon Icon

Interesting to read that high-tech fraudsters used packet sniffing technology to lift payment card data from eleven Dave & Buster's restaurant locations across the US over the last year.

According to the Ars Technica newswire, two of men - Maksym "Maksik" Yastremskiy and Aleksandr "JonnyHell" Suvorov - are being held on 27 counts including aggravated identity theft, unauthorised computer access involving an interstate communication, and interception of electronic communications.

The two men are said to have used fake IDs to get them into the IT rooms of the restaurants and installed packet sniffers between April and September of last year.

The volume of card data they managed to swipe (if you'll pardon the pun) remains unknown, but police have revealed that the men managed to lift at least 5,000 sets of card data from the New York restaurant alone.

The third man, Albert Gonzalez, wrote the packet sniffing software the other two used.

His software was buggy, apparently requiring a restart whenever a server was rebooted and, this, say the newswire reports, is almost certainly the reason why his two colleagues got caught revisiting the stores concerned.

Doh! that's almost worthy of Homer Simpson in terms of complete stupidity 

 

advertisement

Web Threat Level
brought to you by Trend Micro.