Rescator

Rescator is the name of a Ukrainian hacker specialising in the sale of credit card details. According to Russian cyber-security consultancy Group-IB, "Rescator" (AKA Helkern and ikaikki) runs his own marketplace at octavian.su and uploaded over 5 million card details onto the SWIPED carder marketplace.[1]

Credit card details have been stolen from places like Minnesota and the United Kingdom,[2] the website allows searches by zip code so that stolen card numbers can be cashed out more locally to their victim to avoid alerting banks.[3] Unlike the now defunct Tor Carding Forums, the site is free to use, payments requiring direct Bitcoin payments to sellers without escrow features more common on darknet markets.[4] Many of the stolen details from the Target,[5] Home Depot[6] and Sally Beauty[6] data breaches ended up at the site.

In March 2014 the site was briefly defaced by a rival hacker.[7] The site is protected from DDoS attacks by CloudFlare.[8][9]

References

  1. Leyden, John (16 October 2014). "Hacker-hunters finger 'Keyser Soze' of Russian underground card sales". Retrieved 2 August 2015.
  2. White, Geoff (6 November 2014). "Thousands at risk from credit card fraud website". Retrieved 2 August 2015.
  3. Montemayor, Stephen (2 August 2015). "Out-of-state criminals bring cloned credit card schemes to Twin Cities". Retrieved 2 August 2015.
  4. KIELL (11 December 2014). "A Carder's First Experience". Retrieved 2 August 2015.
  5. Schwartz, Mathew J. (5 September 2015). "Banks Reacting Faster to Card Breaches". Retrieved 2 August 2015.
  6. 1 2 Krebs, Brian (May 2015). "Deconstructing the 2014 Sally Beauty Breach". Retrieved 2 August 2015.
  7. "Underground Payment Card Store Rescator Hacked and Defaced". Retrieved 2 August 2015.
  8. Yadron, Danny (29 September 2014). "CloudFlare Pushes More Encrypted Web". Retrieved 10 August 2015.
  9. Kovacs, Eduard (17 March 2014). "Underground Payment Card Store Rescator Hacked and Defaced". Retrieved 10 August 2015.
This article is issued from Wikipedia - version of the 10/6/2016. The text is available under the Creative Commons Attribution/Share Alike but additional terms may apply for the media files.