Sat, May 11, 2013 page1

• Cybercrime ring nets millions from ATMs

  • Reuters, NEW YORK and BOSTON
  • • 
    • 
    • 

  In one of the biggest ever bank heists, a global cybercrime ring stole US$45 million from two Middle Eastern banks by hacking into credit card processing firms and withdrawing money from ATMs in 27 countries, US prosecutors said on Thursday.

  The US Department of Justice accused eight men of allegedly forming the New York-based cell of the organization, and said seven of them have been arrested. The eighth, allegedly a leader of the cell, was reported to have been murdered in the Dominican Republic on April 27.

  The ringleaders are believed to be outside the US, but prosecutors declined to give details, citing the ongoing investigation.

  What is clear is the sheer scope and speed of the crimes: in one of the attacks, in just over 10 hours, US$40 million was raided from ATMs in 24 countries involving 36,000 transactions.

  “In the place of guns and masks, this cybercrime organization used laptops and the Internet,” US Attorney for the Eastern District of New York Loretta Lynch said at a news conference. “Moving as swiftly as data over the Internet, the organization worked its way from the computer systems of international corporations to the streets of New York City.”

  The case demonstrates the major threat that cybercrime poses to banks around the world. It also shows how increasingly international and sophisticated criminal gangs have become, particularly those using the Internet.

  Prosecutors highlighted the “surgical precision” of these hackers, the global nature of their organization, and the speed and coordination with which they executed operations in 27 countries.

  According to the complaint, the gang broke into the computers of two credit card processors, one in India in December last year and the other in the US this February. The companies were not identified.

  The hackers increased the available balance and withdrawal limits on prepaid MasterCard debit cards issued by Bank of Muscat of Oman, and National Bank of Ras Al Khaimah PSC (RAKBANK) of the United Arab Emirates, according to the complaint. They then distributed counterfeit debit cards to “cashers” around the world, enabling them to siphon millions of dollars from ATMs in a matter of hours.

  For example, in New York, members of the cell fanned out into the city on the afternoon of Feb. 19, armed with cards bearing a single Bank of Muscat account number. Ten hours later, they had completed 2,904 withdrawals for US$2.4 million in all, the final transaction coming about 1:26am, prosecutors said.

  Casher crews in other countries were busy doing the same, pulling some US$40 million from Bank of Muscat to add to the US$5 million they stole from RAKBANK in December last year, according to the indictment.

  In total, cashers made some 40,500 withdrawals in 27 countries during the two coordinated incidents. Prosecutors said the method of attack was known as “Unlimited Operations” in the cyberunderworld.

  Representatives for the two banks could not be reached for comment outside of regular business hours.

  In a statement, Mastercard said it had cooperated with law enforcement in the investigation and stressed that its systems were not involved or compromised in the attacks.
• Most Popular

  • 1

    China reserves offshore airspace for 40 days without explanation: WSJ

  • 2

    Danish envoys’ privileges revoked over naming controversy

  • 3

    Eight million barrels of oil to set sail for Taiwan this month

  • 4

    Foreign exchange reserves fall below US$600 billion

  • 5

    First bluefin tuna of season sells for record NT$10,600 per kg in Pingtung