Free Republic
Browse · Search
News/Activism
Topics · Post Article

Skip to comments.

17 year old fingered as author of malware used in Target attack
American Thinker ^

Posted on 01/18/2014 9:03:36 AM PST by Sub-Driver

January 18, 2014 17 year old fingered as author of malware used in Target attack Rick Moran

A 17 year old Russian hacker who goes by the online handle of "ree4" has been identified as the author of the malware that was used to attack Target and Neiman Marcus.

The teenager, Sergey Taraspov, is well known in cyber crime circles having developed other malicious codes to hack commercial systems. He apparently sold about 40 copies of his program to criminals who then modified it slightly and used it to sweep up at least 80 million debit and credit card numbers from Target alone.

Now, the firm that first revealed the Target attack, is saying that 6 other companies suffered a similar fate.

PC World:

Clements said IntelCrawler is "90 percent" sure of its finding, based on the forum postings and sources it communicated with.

The forum posts indicate the teenager sold the malware for $2000 or for a share of the profits that came from monetizing stolen payment card details, Clements said.

BlackPOS was also sold to "carding" websites such as .rescator, Track2.name and Privateservices.biz that trade in stolen card details, according to IntelCrawler.

BlackPOS was originally called Kaptoxa, which is Russian slang for potato. Clements said the Russian teenager eventually renamed the malware BlackPOS during a fresh marketing push.

Dallas-based security company iSight Partners wrote in a report earlier this week on the Target hack, which it called the "Kaptoxa operation." It says the hackers used a high level of skill to gain stealthy access to the retailer's network.

International Business Times is reporting that the 6 other companies targeted in the hack have not informed their customers yet:

(Excerpt) Read more at americanthinker.com ...


TOPICS: Crime/Corruption; Foreign Affairs; News/Current Events
KEYWORDS: blackpos; kaptoxa; potato; ree4; taraspov; target; targetmalware
Navigation: use the links below to view more comments.
first 1-2021-4041-6061-8081-93 next last

1 posted on 01/18/2014 9:03:36 AM PST by Sub-Driver
[ Post Reply | Private Reply | View Replies]

To: Sub-Driver

Sounds like some computer security company needs to hire this kid...fast.


2 posted on 01/18/2014 9:06:21 AM PST by bigbob (The best way to get a bad law repealed is to enforce it strictly. Abraham Lincoln)
[ Post Reply | Private Reply | To 1 | View Replies]

To: Sub-Driver

Burn him on a bonfire of credit cards!

OK, let’s get serious. Why do private hackers seem to have more of a clue than our spies and our crime investigators and crime prevention counselors. Maybe because the reward structure is more straight forward, if unethical.


3 posted on 01/18/2014 9:06:28 AM PST by HiTech RedNeck (The Lion of Judah will roar for you if you give him a big hug and a cheer and mean it. See my page.)
[ Post Reply | Private Reply | To 1 | View Replies]

To: Sub-Driver
Strange ... I've been hearing about all this hacking for a month or more ... but no reports of anyone actually getting robbed.

Am I in a daze or what ?

4 posted on 01/18/2014 9:06:38 AM PST by knarf (I say things that are true .. I have no proof .. but they're true.)
[ Post Reply | Private Reply | To 1 | View Replies]

To: bigbob

That’s what I thought too... he should give back, rather than stealing.


5 posted on 01/18/2014 9:07:43 AM PST by HiTech RedNeck (The Lion of Judah will roar for you if you give him a big hug and a cheer and mean it. See my page.)
[ Post Reply | Private Reply | To 2 | View Replies]

To: HiTech RedNeck

... and they’re all kids ... ain’t even STARTED life yet !


6 posted on 01/18/2014 9:07:46 AM PST by knarf (I say things that are true .. I have no proof .. but they're true.)
[ Post Reply | Private Reply | To 3 | View Replies]

To: Sub-Driver

Looks like he has a big future with some software outfit designing protection software to keep hackers and malware attacks out.


7 posted on 01/18/2014 9:07:48 AM PST by rktman (Under my plan(scheme), the price of EVERYTHING will necessarily skyrocket! Period.)
[ Post Reply | Private Reply | To 1 | View Replies]

To: knarf

Maybe your friends aren’t Target shoppers, or did not shop Targets that were affected by the crimes? I don’t know a lot about the Target crimes.

All I can say is wow these hackers know a lot, if using the knowledge for evil reasons.

Someone like Kaspersky should hire him (to be sure, with folks looking over his work discreetly to be sure he does stay honest).


8 posted on 01/18/2014 9:10:26 AM PST by HiTech RedNeck (The Lion of Judah will roar for you if you give him a big hug and a cheer and mean it. See my page.)
[ Post Reply | Private Reply | To 4 | View Replies]

To: Sub-Driver
He'll probably end up like this guy.


9 posted on 01/18/2014 9:11:14 AM PST by McGruff (I stand with Phil.)
[ Post Reply | Private Reply | To 1 | View Replies]

To: rktman

What would really be great is if MICROSOFT would hire him, and take some of his advice.


10 posted on 01/18/2014 9:11:52 AM PST by HiTech RedNeck (The Lion of Judah will roar for you if you give him a big hug and a cheer and mean it. See my page.)
[ Post Reply | Private Reply | To 7 | View Replies]

To: HiTech RedNeck
Do YOU know of accounts hacked ?

All I'm saying is ... (because I don't subscibe to sat or cable), the three channels I DO get, when I feel like listening, has only reported how many of millions were, and possibly more than, hacked .... and how terrible ... and now we go to Jonnelline for suggestions to protect yourself ... Jonelline ?

11 posted on 01/18/2014 9:15:22 AM PST by knarf (I say things that are true .. I have no proof .. but they're true.)
[ Post Reply | Private Reply | To 8 | View Replies]

To: knarf

we were victims of this… fraudulent charges made to our card…alerted by company and needed to get new cards...


12 posted on 01/18/2014 9:18:56 AM PST by longfellowsmuse (last of the living nomads)
[ Post Reply | Private Reply | To 4 | View Replies]

To: knarf

I think the card companies are now pretty savvy at disabling cards quickly. Obviously they had a complete list of compromised accounts.


13 posted on 01/18/2014 9:18:56 AM PST by ImJustAnotherOkie (zerogottago)
[ Post Reply | Private Reply | To 4 | View Replies]

To: Sub-Driver

Whack ‘em. Find ‘em and whack ‘em.


14 posted on 01/18/2014 9:20:06 AM PST by NormsRevenge (Semper Fi)
[ Post Reply | Private Reply | To 1 | View Replies]

To: HiTech RedNeck

Someone like Kaspersky should hire him

who says they haven’t already hired him to do just this kind of stuff?

Busienss is business in Russshia..


15 posted on 01/18/2014 9:21:25 AM PST by NormsRevenge (Semper Fi)
[ Post Reply | Private Reply | To 8 | View Replies]

To: Sub-Driver
Wont need such sophisticated malware to crack commiecare, sign up and get hosed
16 posted on 01/18/2014 9:22:45 AM PST by ronnie raygun
[ Post Reply | Private Reply | To 1 | View Replies]

To: Sub-Driver

They’ll like his sweet little back side in prison.


17 posted on 01/18/2014 9:24:26 AM PST by SandRat (Duty - Honor - Country! What else needs said?)
[ Post Reply | Private Reply | To 1 | View Replies]

To: NormsRevenge

That would be sad, but not impossible.

But drumming up more virus business is kind of like bringing more snow to Alaska.


18 posted on 01/18/2014 9:24:46 AM PST by HiTech RedNeck (The Lion of Judah will roar for you if you give him a big hug and a cheer and mean it. See my page.)
[ Post Reply | Private Reply | To 15 | View Replies]

To: knarf
For the way it was used at Target, it appears the information stolen was all Triple-DES encrypted. This includes both the PIN numbers and the credit card information.

If true, there may never be a compromised card, but frequency analysis might eventually let the attackers do something.

Triple-DES is considered unbreakable today.

19 posted on 01/18/2014 9:25:19 AM PST by ConservativeMind ("Humane" = "Don't pen up pets or eat meat, but allow infanticide, abortion, and euthanasia.")
[ Post Reply | Private Reply | To 4 | View Replies]

To: SandRat

They’ll force him to show them how to hack the prison commissary!


20 posted on 01/18/2014 9:25:20 AM PST by HiTech RedNeck (The Lion of Judah will roar for you if you give him a big hug and a cheer and mean it. See my page.)
[ Post Reply | Private Reply | To 17 | View Replies]


Navigation: use the links below to view more comments.
first 1-2021-4041-6061-8081-93 next last

Disclaimer: Opinions posted on Free Republic are those of the individual posters and do not necessarily represent the opinion of Free Republic or its management. All materials posted herein are protected by copyright law and the exemption for fair use of copyrighted works.

Free Republic
Browse · Search
News/Activism
Topics · Post Article

FreeRepublic, LLC, PO BOX 9771, FRESNO, CA 93794
FreeRepublic.com is powered by software copyright 2000-2008 John Robinson