An international cybercrime ring successfully compromised more than 1,000 customer accounts, stealing nearly $10 million in tickets from the popular e-ticket vendor StubHub. The stolen tickets were later distributed to be re-sold for profit.
In turn, law enforcement officials have made seven arrests of cyber thieves around the world connected with the crime. Security blogger Brian Krebs reported investigators with the Manhattan District Attorney’s office, in collaboration with the U.S. Secret Service, are expected to announce coordinated raids of at least 20 other suspects in the U.S., Canada and the U.K.
“Today’s law enforcement action reflects the increasingly global landscape in which financial and cyber criminals operate,” said Manhattan District attorney Cyrus Vance, Jr. “Fighting cybercrime today, as this demonstrates, requires international cooperation.”
StubHub spokesperson Glenn Lehram reported the company was alerted back in 2013 about a compromise on customer accounts and had since been working with law enforcement to remediate the issue. Lehram also noted that StubHub believes attackers did not surpass StubHub security, but rather used stolen login information from data breaches of other sites, keyloggers or other login-stealing malware.
StubHub’s parent company, eBay, was also attacked earlier this year affecting nearly 150 million accounts, including customer’s email address, home address, phone number and encrypted passwords.
Read More Here…