Sep 18, 2014
Sep 4, 2014
Aug 28, 2014
Aug 21, 2014
Romanian national sentenced in credit-card hacking scheme
CONCORD - A Romanian national was sentenced Monday to 21 months in prison for his role in an international, multimillion-dollar hacking scheme to steal payment card data from hundreds of merchants' computers across the United States.
Cezar Butu, 27, of Ploiesti, Romania, was sentenced by Judge Steven J. McAuliffe in U.S. District Court for the District of New Hampshire. He pleaded guilty on Sept. 17 to one count of conspiracy to commit access device fraud.
Butu admitted that from 2009 to 2011 he took part in a Romanian-based conspiracy to hack into hundreds of U.S.-based computers to steal credit, debit and payment account numbers and payment card data that belongs to American cardholders.
According to court documents, Butu and his co-conspirators hacked into more than 150 Subway restaurant computers across the U.S., including one in Plaistow, as well as more than 50 other retail merchants. The conspirators compromised credit cards of more than 80,000 customers and racked up millions of dollars in unauthorized purchases.
The conspirators stole payment card information to make unauthorized charges on, and/or transfers of funds from cardholders' accounts (or alternatively to transfer the stolen payment card data to other co-conspirators who would do the same). Court records indicate the conspiracy began as early as April 2008 and continued to at least March 1, 2011.
The group remotely scanned the Internet to identify vulnerable point of service systems with remote desktop software applications (RDAs) installed on them. The conspirators then remotely logged onto the targeted systems either by guessing the passwords or using password-cracking software programs.
Prosecutors said in court documents the conspirators then remotely and surreptitiously installed software programs called "keystroke loggers" or "sniffers" onto the POS systems, which would record and store data keyed into or swiped through the merchants' POS systems, including customers' credit card data.
Members often installed a "back door Trojan" into the POS systems so they could later install or re-install additional software programs - "hacker tools" - designed to evade detection.
Once they had the credit and debit card information, prosecutors said the group uploaded the information to several computer servers they set up to store the data known as "dump sites." Some of those sites were labeled "ftp.tushtime.info," "ftp.cindarella.info," and "ftp.just(expletive deleted)it.info."
The group also allegedly created phony plastic credit cards using hardware and software devices, including magnetic strip readers/writers, to encode blank plastic cards with the stolen credit card information. Those fake credit cards were mainly used for purchases in Europe.
Butu admitted he repeatedly asked an alleged co-conspirator to provide him with stolen payment card data, and the alleged co-conspirator provided him with instructions for how to access a website where a portion of the stolen payment card data was stored. Butu later attempted to use a stolen payment card data to make unauthorized charges on, or transfers of funds from, the accounts.
According to Butu's plea agreement, he also attempted to sell, or otherwise transfer, the stolen payment card data to other co-conspirators for them to use in a similar manner. Butu admitted to acquiring stolen payment card data belonging to about 140 cardholders during the course of the scheme.
Co-conspirator Iulian Dolan pleaded guilty to one count of conspiracy to commit computer fraud and two counts of conspiracy to commit access device fraud. His plea agreement calls for him to serve seven years in prison. His sentencing is set for April 4.
A third man, Adrian-Tiberiu Oprea, is scheduled for trial on Feb. 20.
The case was investigated by the U.S. Secret Service, with assistance from New Hampshire State Police and the Romanian Directorate of Investigation of Organized Crime and Terrorism.
Trial attorney Mona Sedky in the Criminal Division's Computer Crime and Intellectual Property Section in Washington, D.C., and assistant U.S. Attorney Arnold H. Huftalen in Concord are prosecuting the cases.
READER COMMENTS: 0
- Man accused of stabbing man in Concord's White Park - 0
- Friends, co-workers mourn loss of Amherst mother and son - 1
- Vermont father, two sons facing charges for Canobie Lake Park scuffle - 0
- Son used AK-47 to kill mother, then himself in Amherst home - 34
- Police arrest two following Portsmouth fight with hammer and knife - 0
- Mass. resident arrested on warrant tied to Pelham donation jar theft - 1
- Manchester SWAT team swoops in on South Mammoth Road home - 0
- Pot plants worth $25,000 seized in Wilmot - 1
- Lawyers for Manchester man challenge competency of suspect in 2001 Auburn murder - 0
READER COMMENTS: 3
- Girl, grandmother escape fire in home with no detectors - 0
- Motorcyclist in serious condition after crash in Rochester - 0
- Dow, S&P 500 at records as rally continues - 0
- Ayotte pushes bill to combat 'spice' - 0
- Senate gives final passage to President Obama's plan for arming Syrian rebels - 0
- Manchester police officers to be honored for work in unresolved West Side stabbing death - 3
- Kuster, Shea-Porter split on vote to arm Syrian rebels - 0
- Dean Kamen is a genius inventor, and he's pretty good at oratory, too - 6
- Tom Herzig's Trackside: Modified tour is shortened - 0
Another View -- Bill Duncan: What did the NH Supreme Court really say about private school funding?
Casino gambles: Hopes dashed all over
Mark Hayward's City Matters: Dean Kamen is a genius inventor, and he's pretty good at oratory, too
Every vote counts: Here is the proof
- Mass. Supreme Judicial Court has found upskirt photos taken on a subway aren't illegal. Should such voyeurism be a crime?
- Total Votes: 917