Threat Level: Cops Pull Plug on [CallService.biz]

Any information or research into this very serious criminal activity.

Threat Level: Cops Pull Plug on [CallService.biz]

Postby spamislame » Tue Apr 20, 2010 10:41 am

Actual headline:

Cops Pull Plug on Rent-a-Fraudster Service for Bank Thieves
[Subject line won't allow a long title.]

http://www.wired.com/threatlevel/2010/0 ... ervicebiz/

Two Belarusian nationals suspected of operating a rent-a-fraudster service for bank and identity thieves have been arrested overseas, according to New York authorities, who unsealed an indictment for one of the suspects on Monday.

Dmitry Naskovets, 25, and Sergey Semashko, 25, are suspected of creating and operating CallService.biz, a Russian-language site for identity criminals who trafficked in stolen bank-account data and other information. The website displayed an FBI logo Monday and the message, “This domain has been seized by the Federal Bureau of Investigation.”

...
The thieves obtained the information through various means, such as phishing attacks and malware placed on victims’ computers to log their keystrokes.

CallService.biz would then have someone who matched the legitimate account holder’s gender and was proficient in the needed language, pose as the account holder and call the financial institution to authorize the fraudulent transaction.

One client, for example, requested assistance in July 2007 with illegally siphoning $35,000 from a checking account owned by someone in Westchester County, New York. The wire transfer occurred July 17.

This is great news, and may finally slow down some of the activity Brian Krebs has been documenting for some time now.

SiL
User avatar
spamislame
Site Admin
 
Posts: 5056
Joined: Tue May 09, 2006 9:18 am

Re: Threat Level: Cops Pull Plug on [CallService.biz]

Postby meep » Tue Apr 20, 2010 5:49 pm

This is progress for sure. Kudos to the DoJ, FBI, Belarusian Ministry, Czech Police, Lithuanian Criminal Police and other law enforcement / others involved in this takedown.

http://newyork.fbi.gov/dojpressrel/pres ... 41910b.htm


Manhattan U.S. Attorney Charges Belarusian Creator of International Identity Theft Website Dmitry Naskovets Allegedly Ran Online Business That Targeted U.S. and European Financial Institutions and Committed Over 5,000 Frauds. At Request of U.S. Authorities, Naskovets was Arrested in the Czech Republic on April 15, 2010. ...

(towards the end, credits)
Mr. BHARARA praised the FBI for its exceptional work on the investigation, and thanked the Department of Justice's Office of International Affairs; the Belarusian Ministry of Internal Affairs, High Tech Crime Department; the Police Presidium of the Czech Republic; and the Lithuanian Criminal Police Bureau Cybercrime Board for their assistance.


:silthumb:
User avatar
meep
Spammers' Nightmare
 
Posts: 2777
Joined: Thu Apr 05, 2007 4:10 pm

Re: Threat Level: Cops Pull Plug on [CallService.biz]

Postby AlphaCentauri » Tue Apr 20, 2010 6:48 pm

Digging a little - it appears the domain was registered with Directi using a real address in Chicago until last summer. It's an unlisted number, but may have been a stolen identity. In any case, it would have been easy to establish whether it was a legitimate contact for the domain owner. In July 2009, it moved to a registrar called DomainContext, Inc. and used PrivacyProtect.org, a service linked to Directi. (I never was sure of the exact relationship -- Directi claims it will remove privacy protection within 48 hours if there are complaints, but I don't see that happening with domains registered with other registrars that use PrivacyProtect.org.)

DomainContext is listed as being in Delaware. Its phone number is an unlisted land line with XO Communications. XO offers VOIP, with the following enticement: "Ensure a professional image for your company no matter where your employees are working from." (And even if they end their sentences with prepositions. ;)) Domaincontext.com reports they don't accept Visa or Mastercard, but do accept WebMoney, PayPal, and YandexMoney. Their "About Us" doesn't sound like they had any native English speakers proofread it for them:
About Us

DomainContext is the ICANN accredited registrar.

We can provide affordable prices for domain registration and appropriate technical support as we run our own platform and implemented effective business processes.

Benefits of our customers are the most vital part of our business since their achievements bring us success.

Our main policy is to provide clear pricing schemes.

Reselling program is one of our competetive advantages. This is not only most profitable offer with least prices for registering and renewing domain names but also very powerful tool to launch new business. We provide ready-to-use solution that will help you start up domain name reselling without prior investments.


Their street address, 501 Silverside Rd, Suite 105, Wilmington, DE, 19809 is shared by a variety of businesses, some of them fairly shady (fake term papers, get rich quick schemes) . It's a a service that provides a "US presence" to companies whose employees have never set foot in the US:
http://valisinternational.com/us-busine ... e-packages
US Office & Mail Forwarding Service details
Your US Office (Real Office, not a PO Box):

Your Company Name
501 Silverside Rd Ste 105
Wilmington, DE 19809
USA

* Registration: Company Registration: 1 company and 2 officers of the company can be registered to receive mail. Personal registration: You and your spouse can be registered to receive mail.
* Frequency: Once a week your mail will be repackaged and forwarded to the address you supply us.


If the address looks familiar, it's because we've encountered it before:
viewtopic.php?p=21580#p21580
Other small registrars are using the same address. (It must make it convenient for ICANN -- they can send notices for all those registrars bundled together I suppose. :roll: )
User avatar
AlphaCentauri
You are kiillllling-a my bizinisss!
 
Posts: 5989
Joined: Thu Mar 01, 2007 3:01 am

Re: Threat Level: Cops Pull Plug on [CallService.biz]

Postby meep » Tue Apr 20, 2010 10:09 pm

Of course, Gary Warner has some scoop to add to this story. I just happened to notice his post. :)
User avatar
meep
Spammers' Nightmare
 
Posts: 2777
Joined: Thu Apr 05, 2007 4:10 pm

Re: Threat Level: Cops Pull Plug on [CallService.biz]

Postby AlphaCentauri » Tue Apr 20, 2010 11:23 pm

meep wrote:Of course, Gary Warner has some scoop to add to this story. I just happened to notice his post. :)


Nice! Good to know the folks on the other carder forums are going to have to call their plumbers to repair some damage done by bricks.
User avatar
AlphaCentauri
You are kiillllling-a my bizinisss!
 
Posts: 5989
Joined: Thu Mar 01, 2007 3:01 am


Return to Identity Theft and Carding

Who is online

Users browsing this forum: No registered users and 1 guest

cron