Ochko123 - How the Feds Caught Russian Mega-Carder Roman Seleznev

Black Hat
Black Hat
623,487
318
Publicado 2017-08-25
Best of Black Hat USA 2017 Briefings Winner

How did the Feds catch the notorious Russian computer hacker Roman Seleznev - the person responsible for over 400 point of sale hacks and at least $169 million in credit card fraud? What challenges did the government face piecing together the international trail of electronic evidence that he left? How was Seleznev located and ultimately arrested? This presentation will begin with a review of the investigation that will include a summary of the electronic evidence that was collected and the methods used to collect that evidence.

by Harold Chun & Norman Barbosa

Read More: www.blackhat.com/us-17/briefings/schedule/index.ht…
Todos los comentarios (21)
  • @patrickcameron2950
    Him surviving a terrorist attack and spending two months in a coma halfway through the story was a hell of a twist.
  • @baruchben-david4196
    The thing is, he more ir less handed himself over to the authorities by being so sloppy. It's less credit to the Feds, and more blame to him.
  • @frostbolt4359
    Learned a lot. I still find it amazing that these massive online empires tend to fall due to massive opsec failures. Silk Road, Alphabay, etc.
  • @ilaser4064
    Would have laughed if he was successfully sued for infringing on 2Pac's IP before being arrested for fraud.
  • @MrRigdensChannel
    Great video. I was really surprised when I saw the old Broadway Grill. I walk past that shuttered restaurant almost every day.
  • @MadameMinty
    tl;dr he basically handed himself to them on a plate.
  • @RyanKearney0
    Anyone else notice the workgroup name of the machine was VAIO? This guy never reformatted the machine after he bought it? Damn...
  • @BvousBrainSystems
    "Was there any encryption that you had to deal with?" "In this case no, there was none" audible laughter across the room This hacker is getting roasted by the guys who cuffed him lol
  • @dreftymac9916
    Dude, this is awesome and needs to be made into a screenplay.
  • @keystarr
    A legendary talk! Thank you so much for putting this out
  • @danpowell806
    1.7M instances of theft, 38 counts of fraud. That's one count for every 45k card numbers he was caught with.
  • @enlightendbel
    "Would it have been harder to convict if you didn't have his password?" He wasn't protected in any way on that Vaio, no security measures, hardware or software based, as these guys explained, there was no encryption or anything even remotely security related on that laptop. There's 10000 ways to get into a windows system if you have physical access to the system. There's 100000 ways to get to the data on a system if you have physical access to the system. It was cute they guessed the password, but that wasn't even needed. His shitty password, combined with his bad security measures and all the other ways he was blazee about security, the dude was bound to get caught and bound to get convicted if caught. His security measures were to travel to and through places that didn't extradite to the US. Including the place he was arrested. Little did he know or understand that diplomacy used to be a thing and you can get any country to agree to anything if its worth their while.
  • @Ye4rZero
    24:40 you can tell he's used to waiting for applause at this point, but wrong crowd lol
  • @MilesBellas
    Nov 2017 "The prolific Russian hacker Roman Seleznev was sentenced to 14 years in prison Thursday for his role in a $50 million cyberfraud ring. This latest sentence follows a 27-year-prison sentence Seleznev received in April on charges of hacking point-of-sale computers that he then sold to the criminal underground. That scheme generated nearly $170 million in fraudulent charges, prosecutors said. Both sentences will run concurrently."
  • @edt11x
    With all the IRS scammers, credit card scammers, spammers and other scams, its really good to hear a story where one was tracked down and arrested. Really great presentation!
  • @macnutz4206
    He got 27 yrs. He also got 14 yrs from a bank fraud charge in Atlanta. Concurrent sentences, of course. I expect he will be back in Russia long before twenty seven years is up.
  • @percyblakeney3743
    As an audience member I'd say "thank you for the insight as to how your team did it." As a gov supervisor I'd ask "why the sh*t are you showing your cards!"