Tuesday, May 20, 2008

Phishing in International Waters: The New Phace of Organized Crime


The U.S. Justice Department and Romanian authorities announced two federal indictments (C.D. Cal. and D. Conn.) against 38 people who allegedly participated in two international phishing operations with ties to organized crime. The charges include conspiracy to violate the Racketeer Influenced and Corrupt Organizations (RICO) Act, and a host of hacker crimes such as conspiracy in connection with account access devices (credit or debit cards), unauthorized access to a protected computer, bank fraud and aggravated identity theft. U.S. Attorney for C.D. Cal., Thomas O'Brien said experts estimate losses at more than $3 million.

Romanian based "suppliers" phished for and obtained credit and debit card account data and personal information from cardholders by baiting more than 1.3 million e-mails. The "suppliers" sent the data to U.S. based "cashiers" who did the tech work, encoding the account data onto magnetic strips on access devices (including hotel key cards that work nicely for this purpose). "Runners" tested the cards and used the ones that worked to draw cash. U.S. participants took a cut and transferred the balance to the Romanian suppliers.

International organized crime is deep into the world payment system and just about everything else. Last month, U.S. Attorney General Michal Mukasey announced the Justice Department's Law Enforcement Strategy to Combat International Organized Crime . He said that mafia-style organized crime as Attorney General Robert Kennedy saw it in 1961 is a thing of the past. Organized crime is international, but that's not all. "They are more sophisticated, they are richer, they have greater influence over government and political institutions worldwide, and they are savvier about using the latest technology, first to perpetrate and then to cover up their crimes. . . . They touch all sectors of our economy, dealing in everything from cigarettes to oil; clothing to pharmaceuticals. These criminals invest some of the millions they make from illegal activities in the same publicly traded companies as we hold in our pension plans and 401(k)s. They exploit the internet and peddle their scams on eBay, and they're responsible for a significant chunk of the spam email we get."

Leave the gun. Take the cannoli. (Clemenza to Rocco)

No comments: