Ochko123 - How the Feds Caught Russian Mega-Carder Roman Seleznev

แชร์
ฝัง
  • เผยแพร่เมื่อ 26 มิ.ย. 2024
  • Best of Black Hat USA 2017 Briefings Winner
    How did the Feds catch the notorious Russian computer hacker Roman Seleznev - the person responsible for over 400 point of sale hacks and at least $169 million in credit card fraud? What challenges did the government face piecing together the international trail of electronic evidence that he left? How was Seleznev located and ultimately arrested? This presentation will begin with a review of the investigation that will include a summary of the electronic evidence that was collected and the methods used to collect that evidence.
    by Harold Chun & Norman Barbosa
    Read More: www.blackhat.com/us-17/briefi...

ความคิดเห็น • 771

  • @baruchben-david4196
    @baruchben-david4196 4 ปีที่แล้ว +93

    The thing is, he more ir less handed himself over to the authorities by being so sloppy. It's less credit to the Feds, and more blame to him.

    • @borregoayudando1481
      @borregoayudando1481 ปีที่แล้ว +3

      so the lesson goes back to opsec 101

    • @xv0047
      @xv0047 ปีที่แล้ว +5

      Even with all that, if he just never left Russia there is nothing the feds could have done about it.

    • @x87-64
      @x87-64 9 หลายเดือนก่อน

      ​@@xv0047that's what most do. he is one guy who got caught. there are hundreds more like him

  • @patrickcameron2950
    @patrickcameron2950 3 ปีที่แล้ว +169

    Him surviving a terrorist attack and spending two months in a coma halfway through the story was a hell of a twist.

    • @grubybysior8635
      @grubybysior8635 2 ปีที่แล้ว +10

      Freaking spoilers >:(

    • @topdog5252
      @topdog5252 2 ปีที่แล้ว +2

      @@grubybysior8635 😞 oh no

  • @frostbolt4359
    @frostbolt4359 3 ปีที่แล้ว +27

    Learned a lot. I still find it amazing that these massive online empires tend to fall due to massive opsec failures. Silk Road, Alphabay, etc.

    • @electricz3045
      @electricz3045 2 ปีที่แล้ว +5

      Most marketplaces not even fall. Most are still alive or did a own exit scam but it's more interesting for jonalists to talk about the fallen ones.

  • @ilaser4064
    @ilaser4064 5 ปีที่แล้ว +77

    Would have laughed if he was successfully sued for infringing on 2Pac's IP before being arrested for fraud.

    • @ThePeacePlant
      @ThePeacePlant 3 ปีที่แล้ว +3

      The court and judge would have found anyway to make him lose that case. Unfortunately the US courts or not fair if they want to catch you or don't like you

  • @anuragkashyap8026
    @anuragkashyap8026 4 ปีที่แล้ว +243

    Lesson :
    1 Live in Russia & Never Leave Russia
    THATS ALL

    • @napalm3899
      @napalm3899 4 ปีที่แล้ว +45

      This. Vadym Iermolovych made that mistake by going to Mexico. The night he arrive in Mexico, Mexican cops approached him at his hotel and told him he was not welcome in Mexico. They said the government of Ukraine had agreed to fly him back to Ukraine. They confiscated his laptop, and put him on an airplane. They said he would have one stop in Dallas, Texas. When the plane touched down in Dallas he was in US territory. The first 4 rows of the plane stood up, announced themselves as US federal agents, and arrested him.
      The Mexicans cleverly handed him over to the US and got him to agree to it.

    • @anuragkashyap8026
      @anuragkashyap8026 4 ปีที่แล้ว +5

      @@napalm3899and that was his last mistake or the last bad decision.

    • @anuragkashyap8026
      @anuragkashyap8026 4 ปีที่แล้ว

      @EramSemperRecta oh ! 😲 Was that so ?

    • @ulfpe
      @ulfpe 4 ปีที่แล้ว +8

      Russia dosent have as nice beaches as the Maldives, human weakness

    • @elvinpineda1825
      @elvinpineda1825 4 ปีที่แล้ว +2

      word that was his mistake, plus using usa hop 1 instance.

  • @MadameMinty
    @MadameMinty 6 ปีที่แล้ว +722

    tl;dr he basically handed himself to them on a plate.

    • @RonJohn63
      @RonJohn63 6 ปีที่แล้ว +79

      Obviously, he thought that -- being the rich son of a member of the Duma -- he was above the law and so didn't need to employ OPSEC.

    • @TheOxywolf
      @TheOxywolf 6 ปีที่แล้ว

      RonJohn63 9

    • @blackneos940
      @blackneos940 5 ปีที่แล้ว

      @@TheOxywolf 8

    • @William.Shakespeare
      @William.Shakespeare 4 ปีที่แล้ว +2

      yeah but a venue like this for them to speak is pretty cool.

    • @daveslow84
      @daveslow84 4 ปีที่แล้ว

      @@blackneos940 7

  • @MrRigdensChannel
    @MrRigdensChannel 6 ปีที่แล้ว +15

    Great video. I was really surprised when I saw the old Broadway Grill. I walk past that shuttered restaurant almost every day.

    • @Harmonikdiskorde
      @Harmonikdiskorde 3 ปีที่แล้ว +2

      Same! I briefly felt second-hand famous.

  • @danpowell806
    @danpowell806 5 ปีที่แล้ว +84

    1.7M instances of theft, 38 counts of fraud. That's one count for every 45k card numbers he was caught with.

    • @johnfrancisdoe1563
      @johnfrancisdoe1563 4 ปีที่แล้ว +7

      Dan Powell Maybe he stole an average of 45k cards at each store he hacked. Or maybe he (provably) hacked/defrauded 38 stores to get to the cards, then purchased many more stolen cards from other criminals that got them through other (unspecified) crimes. After all, he had officially graduated from thief to fence long before his arrest.

    • @slappy8941
      @slappy8941 4 ปีที่แล้ว +11

      Well if someone breaks into your house and steals all your stuff, they won't be charged for each individual item stolen, but for the act of burglary itself.

  • @RyanKearney0
    @RyanKearney0 6 ปีที่แล้ว +287

    Anyone else notice the workgroup name of the machine was VAIO? This guy never reformatted the machine after he bought it? Damn...

    • @svampebob007
      @svampebob007 6 ปีที่แล้ว +13

      ikr

    • @ronaldckrausejr7762
      @ronaldckrausejr7762 6 ปีที่แล้ว +22

      Real hackers also purchase their computer hardware with cash, and then also have it shipped to a third party - completely untraceable

    • @JG-ye7ey
      @JG-ye7ey 6 ปีที่แล้ว +81

      He had 1.7million CC numbers on his computer. He is maybe THE definition of a 'real hacker'...sloppy though.

    • @rev.philthyphil6839
      @rev.philthyphil6839 6 ปีที่แล้ว +1

      Ryan Kearney lol

    • @moth.monster
      @moth.monster 5 ปีที่แล้ว +22

      Sometimes they bake that stuff into the BIOS. No reason to remove the manufacturer name and logo aside from bragging rights at that point. My computer still says it's from ZT Systems even though I just bought a used motherboard. I guess it was in a compuer made by them at some point. And i'm too lazy to fully reset every little thing in the BIOS just to make it say something else.

  • @VisualJoey
    @VisualJoey 4 ปีที่แล้ว +72

    The Roman empire has fallen.

  • @keystarr
    @keystarr ปีที่แล้ว +1

    A legendary talk! Thank you so much for putting this out

  • @BvousBrainSystems
    @BvousBrainSystems 4 ปีที่แล้ว +79

    "Was there any encryption that you had to deal with?"
    "In this case no, there was none"
    *audible laughter across the room*
    This hacker is getting roasted by the guys who cuffed him lol

  • @enlightendbel
    @enlightendbel 5 ปีที่แล้ว +98

    "Would it have been harder to convict if you didn't have his password?"
    He wasn't protected in any way on that Vaio, no security measures, hardware or software based, as these guys explained, there was no encryption or anything even remotely security related on that laptop.
    There's 10000 ways to get into a windows system if you have physical access to the system.
    There's 100000 ways to get to the data on a system if you have physical access to the system.
    It was cute they guessed the password, but that wasn't even needed. His shitty password, combined with his bad security measures and all the other ways he was blazee about security, the dude was bound to get caught and bound to get convicted if caught.
    His security measures were to travel to and through places that didn't extradite to the US. Including the place he was arrested.
    Little did he know or understand that diplomacy used to be a thing and you can get any country to agree to anything if its worth their while.

    • @enlightendbel
      @enlightendbel 5 ปีที่แล้ว +25

      He was an expert at obtaining credit card numbers through black market available malware. So far, there hasn't been much of any indication he did much of any actual hacking.

    • @kali6651
      @kali6651 5 ปีที่แล้ว

      @@enlightendbel There are many cases where LEO cannot access encrypted data from a hard drive. There are definitely ways to hide your data and keep it hidden.

    • @enlightendbel
      @enlightendbel 5 ปีที่แล้ว +4

      Adrian Yes? And?
      Did I say anything to the contrary?
      The subject is this guy, not general practices and problems.

    • @user-rc9jf8ng2k
      @user-rc9jf8ng2k 5 ปีที่แล้ว +1

      LOL @ Blazee.. I think you mean blase.

    • @Lizardboythelazy
      @Lizardboythelazy 4 ปีที่แล้ว +12

      He's not a hacker, he's a skiddie. He found one method that worked (RDP brute + malware) and abused it heavily. The reason he was so successful I think is because he was an expert at leveraging what he obtained to profit.

  • @dreftymac9916
    @dreftymac9916 4 ปีที่แล้ว +26

    Dude, this is awesome and needs to be made into a screenplay.

    • @pqsk
      @pqsk 2 ปีที่แล้ว +1

      yes. I would love to see a trilogy film. Part one is when he starts off. part two is the terrorist attack and the coma and recovery and part three when they nail him. depending on how good it is there would be a prequel trilogy on how he learned not to use encryption and how to be sloppy 😆

  • @Ye4rZero
    @Ye4rZero 5 ปีที่แล้ว +69

    24:40 you can tell he's used to waiting for applause at this point, but wrong crowd lol

  • @MilesBellas
    @MilesBellas 6 ปีที่แล้ว +6

    Nov 2017
    "The prolific Russian hacker Roman Seleznev was sentenced to 14 years in prison Thursday for his role in a $50 million cyberfraud ring.
    This latest sentence follows a 27-year-prison sentence Seleznev received in April on charges of hacking point-of-sale computers that he then sold to the criminal underground. That scheme generated nearly $170 million in fraudulent charges, prosecutors said. Both sentences will run concurrently."

  • @jamesparker6876
    @jamesparker6876 4 ปีที่แล้ว +5

    Excellent work gentlemen!! Keep it up.

    • @aniellodellacroce9848
      @aniellodellacroce9848 3 ปีที่แล้ว

      go f... yourself

    • @jamesparker6876
      @jamesparker6876 3 ปีที่แล้ว

      To: @@aniellodellacroce9848 They will get you too Aniello. You should have kept your head down. You are Guilty of "Having a brain and attempting to use it".

    • @aniellodellacroce9848
      @aniellodellacroce9848 3 ปีที่แล้ว

      @@jamesparker6876im not hiding at all. i welcome anyone who wants to give me a visit and get free involuntary led injection at very high velocity

  • @ke0kie
    @ke0kie 5 ปีที่แล้ว +24

    So the typical carelessness, ego, lavish behavior, and carelessness was Roman's demise.

  • @macnutz4206
    @macnutz4206 4 ปีที่แล้ว +8

    He got 27 yrs. He also got 14 yrs from a bank fraud charge in Atlanta. Concurrent sentences, of course.
    I expect he will be back in Russia long before twenty seven years is up.

  • @livefastdieold180
    @livefastdieold180 6 ปีที่แล้ว +5

    I was just at Mandalay Bay not to long ago, delivered a 350k granite saw to a counter top and tile expo.

  • @kabib0831
    @kabib0831 4 ปีที่แล้ว +2

    They should make a movie about this.

  • @larrywages5887
    @larrywages5887 5 ปีที่แล้ว +3

    Fascinating from Mrs Wages

  • @MarkH10
    @MarkH10 5 ปีที่แล้ว +19

    The major weakness in this and so many cases is Russia itself. Who wants to live IN Russia, or move TO Russia for 'the good life'. As soon as a Russian has money, he is gone. IF you ever think a Russian girl loves you, offer to marry her and move to Russia for the rest of our lives!!! See how long that relationship lasts after she thinks you are serious.

    • @n.k.63
      @n.k.63 4 ปีที่แล้ว +7

      Lived in Toronto for awhile, moved back to Russia, zero regrets. Yes, some things are annoying, but overall quality of life is better, finding good job with English and some skills is easy, most importantly - no SJWs, no speech police, no feminists to speak of.

    • @gophop
      @gophop 4 ปีที่แล้ว +2

      Nonsense. With millions of dollars you can build wtf you want, wherever you want, and import anything of interest. Tropical vacations are a status symbol in Russia.

    • @joshuaronquillo1673
      @joshuaronquillo1673 4 ปีที่แล้ว +3

      @@n.k.63 We don't want an authoritarian police state to protect our feelings from 30 college students and women who want respect from society.

    • @NickBailuc
      @NickBailuc 3 ปีที่แล้ว

      @@n.k.63 100% agree^^^^^^^ , also in the process of moving from toronto to moscow (originally from ukraine tho)

    • @qsam14
      @qsam14 3 ปีที่แล้ว

      Totally false. I had a Russian client when I drive Uber and she was very sweet, even offered me food and asked me to come over to her workplace. She was a teacher assistant.

  • @VenturiLife
    @VenturiLife 6 ปีที่แล้ว +25

    I found malware on some public hotel computers in Bali trying to intercept banking details... wonder who that could have been. Always try and use your own machine when travelling.

    • @ly-yx1rk
      @ly-yx1rk 6 ปีที่แล้ว +13

      shades2 when I travel I buy prepaid debit cards. If it's not my machine it doesn't get my numbers.
      And it's super easy to install a keylogger on any unattended machine.

    • @semtex2978
      @semtex2978 5 ปีที่แล้ว +3

      Lucas Gorski very true. 👍

  • @Sugrax
    @Sugrax 3 ปีที่แล้ว +3

    27 years for no physical harm done? US is fucking insane

    • @LiEnby
      @LiEnby 2 ปีที่แล้ว

      Meanwhile 5 years for murdering someone

    • @silentone6411
      @silentone6411 2 ปีที่แล้ว +2

      because he goes straight back to Russia and continues doing it probably , only way to actually stop him is keeping him in jail here.

    • @N99622
      @N99622 ปีที่แล้ว

      ​@@LiEnby And 3 months for raping a child 🤪
      Law enforcement only cares about protecting the banks here.

  • @percyblakeney3743
    @percyblakeney3743 5 ปีที่แล้ว +25

    As an audience member I'd say "thank you for the insight as to how your team did it." As a gov supervisor I'd ask "why the sh*t are you showing your cards!"

    • @kidoido
      @kidoido 3 ปีที่แล้ว +1

      Its all explained here why the feds started talking at defcon, black hat etc. : th-cam.com/video/h9wXq6oRBnI/w-d-xo.html

    • @toxic_narcissist
      @toxic_narcissist 2 ปีที่แล้ว +8

      Which cards? This guy basically surrendered by having zero opsec

    • @robgigabyte580
      @robgigabyte580 2 ปีที่แล้ว +4

      Obviously you are not involved in Computer security. He was sloppy in his hacking, left breadcrumbs leading directly to him... But nothing said here was opening up any "Tell Tales" of the investigation.... No REAL cards are being shown or disclosed if you know anything about vulnerabilities in networking or computer security

  • @edt11x
    @edt11x 5 ปีที่แล้ว +7

    With all the IRS scammers, credit card scammers, spammers and other scams, its really good to hear a story where one was tracked down and arrested. Really great presentation!

  • @Akus75038
    @Akus75038 3 ปีที่แล้ว

    When did this conference take place?

  • @ericsbuds
    @ericsbuds 6 ปีที่แล้ว +12

    excellent talk! glad to know there are some smart people on the right side of the law too!

    • @code4food
      @code4food 4 ปีที่แล้ว

      too? you're overestimating criminals

  • @marciomello4418
    @marciomello4418 3 ปีที่แล้ว

    Love this video

  • @bra24hnt52
    @bra24hnt52 3 ปีที่แล้ว +5

    Ok thats it - no more flowers for my wife

  • @sathyantinku9177
    @sathyantinku9177 2 ปีที่แล้ว +3

    That guy thought he would never ever be caught. How the hell a hacker uses Ochko123

    • @uis246
      @uis246 ปีที่แล้ว +1

      Btw this literally means Butthole123

  • @madtrade
    @madtrade 6 ปีที่แล้ว +180

    in conclusion it's better to be a bankster than a hacker

    • @TheXSairam
      @TheXSairam 6 ปีที่แล้ว +23

      or dont be lazy and stupid

    • @finalsolution3690
      @finalsolution3690 6 ปีที่แล้ว +44

      The bankers are the biggest criminals giving themselves millions in bonuses "some free money"

    • @mcgoldsmithstein7256
      @mcgoldsmithstein7256 6 ปีที่แล้ว +3

      Have you ever paid something with paypal? Something as common as the double currency exchange... let's say from euros to dollars to euros.

    • @MonMalthias
      @MonMalthias 6 ปีที่แล้ว +35

      The most profitable crimes are the legal ones.

    • @DxBlack
      @DxBlack 6 ปีที่แล้ว +7

      Time to grow up and stop equating immoral but rational activities to being illegal. If you can't pay the interest, don't take the loan. If the rates in your mortgage seem too good to be true they are. Etc etc, you have a brain...no one can force you to use it.

  • @andbiker81
    @andbiker81 6 ปีที่แล้ว +58

    Haha they actually thought they could bribe their way out of any trouble, very typical for a corrupt Russian official because this is exactly what they do at home. Thank you for bringing this criminal to justice, this was definitely not possible in Russia.

    • @theNISK
      @theNISK 6 ปีที่แล้ว

      he wasn't a government official.

    • @RonJohn63
      @RonJohn63 6 ปีที่แล้ว +23

      His father was (is?) a member of the Duma.

    • @theNISK
      @theNISK 6 ปีที่แล้ว +2

      So then you agree - his father is a state official, not him.

    • @RonJohn63
      @RonJohn63 6 ปีที่แล้ว +17

      IIRC, his father the state official was in full agreement with the idea.

    • @yc5117
      @yc5117 6 ปีที่แล้ว +3

      Lol the father, a state official, was the one that was going to be bribing the prosecutor, not the guy in prison........

  • @SAROSRUSSIAN
    @SAROSRUSSIAN 6 ปีที่แล้ว +123

    ОЧКО123

  • @edwardlouisbernays2469
    @edwardlouisbernays2469 4 ปีที่แล้ว +10

    Wow, just October 1, 2017, a month later, Mandalay Bay was a slaughter ground!

  • @legendwarrior85
    @legendwarrior85 6 ปีที่แล้ว +1

    Great catch !!!!

  • @marksmod
    @marksmod 4 ปีที่แล้ว

    very interesting

  • @craffte
    @craffte ปีที่แล้ว

    these are old but always entertaining.

  • @CGoody564
    @CGoody564 5 ปีที่แล้ว +3

    "we don't give attribution for that"
    I don't understand why not. The security vulnerability is just as attributable to the attack as the one exploring it.

  • @thekaiser4333
    @thekaiser4333 5 ปีที่แล้ว +1

    @Norman Barbosa
    Aren't the Maldives a little bit outside U.S. jurisdiction?

    • @jamegumb7298
      @jamegumb7298 5 ปีที่แล้ว +3

      Way outside.
      As are the Philippines, where they randomly stop and search people, and there is footage of raids they do over there on YT.
      As is Colombia, where the DEA does raids and wipes camps using drones and special forces. Not all are FARC encampments, maybe up to 40% are not going by if weapons are found.
      AS is Mexico, where the DEA operates over the border.
      As is Aruba, where the DEA arrested a bunch of people after their own incompetence got their car broken into and a bunch of people they were on a terrace with having cocktails refused to search with them.
      As is Italy, where they kidnap citizen for renditions and black site prisons.
      As is Kazakhstan, where they kidnap citizens for renditions.
      As is Pakistan, a supposed ally where find more people than just Bin Laden to kill.
      As is Japan, where an American criminal is taken out of Japan and will not see a Japanese court. See the Okinawa incident. The hash trafficker.
      Spoiler Alert: We can do it so we will. So fuck you.

  • @theteenengineer7589
    @theteenengineer7589 4 ปีที่แล้ว

    great

  • @tarkanya7906
    @tarkanya7906 3 ปีที่แล้ว

    love that video

  • @pilarcuarezpardo1167
    @pilarcuarezpardo1167 3 ปีที่แล้ว

    A natureza é maravilhosa

  • @Optable
    @Optable ปีที่แล้ว +1

    Chief really put those bad cop pants routine on during the questions at the end there huh. Actually solid questions with important feedback to much more pressing issues gone totally dismissed, and all he seemed to attempt to prove is that verbally "it was really just all so terribly hard" to retrieve all that unencrypted, unobfuscated, out in the open, slam dunk data! When really the only hard part wasn't so hard, sitting there biding time, waiting for a blip on a spinny class globe. Then all of the sudden, let's make sure black hat knows again how hard it was to jump those hoops! Around any sort of justice process, avoidance of contacting any actual authority at all costs, refusal to explain why (which could get secops/pentesters/law enforcers killed or imprisoned in many jurisdictions) while snerking at the valid argument that those actions could undermine or blow the cover of many much more difficult ongoing undercover ops or surveillance work, and sow even further distrust into these TA's regarding what it will take to self preserve their own lives. And for these sociopaths, every more reason to push anybody in front of the way to avoid the bars. Not textbook blokes like this one "sophisticated and large scale *network*" here. This crowd is in no shortage of extremely bright individuals. Nobody expected ya to debate the modalities and procedures of undercover tactics for federal government acronym agencies. We just wanted- something, at all?

  • @domonique546
    @domonique546 5 ปีที่แล้ว +1

    Listening as a ex laptop acer owner...

  • @nightwaves3203
    @nightwaves3203 6 ปีที่แล้ว +3

    A hack user not hacker appears to me.

  • @craffte
    @craffte ปีที่แล้ว

    That flowers receipt...

  • @PiiSmith
    @PiiSmith 4 ปีที่แล้ว +1

    And it is still credit card fraud, that is the running wild. Can we please get a more secure payment method, than credit cards.

  • @UkrPat
    @UkrPat 3 ปีที่แล้ว +1

    Roman’s ochko has played Tchaikovsky’s Swan Lake after all.... if you know what I mean 😏

  • @Shiyounin
    @Shiyounin 3 ปีที่แล้ว

    49min? Isn't there a short version of the story somewhere?

  • @jonslg240
    @jonslg240 4 ปีที่แล้ว +8

    He'll serve 21.6 years of that 27 year sentence, since he's in federal custody. They make you serve 80% I believe.. that is a long time.
    Maybe long enough where he won't do it when he comes out.
    If his dad's very prominent, he might be able to get a pardon after 10-15 years.

    • @MegaSmouke
      @MegaSmouke 4 ปีที่แล้ว +5

      Russian government is very corrupted. I'm pretty sure his dad knew about his son crimes and maybe even supported him in this. Looks like people in USA start to understand this, so guy will be in jail for full 21.6 years. And no way he will change his mind, I know russian people and can guarantee, that only suggenstion he and his father have that they do a poor job to protect him from a jail, that's it, no regret about crimes at all.

    • @aniellodellacroce9848
      @aniellodellacroce9848 3 ปีที่แล้ว +1

      @@MegaSmouke US government is much more corrupt than Russian. you just got no idea

    • @MegaSmouke
      @MegaSmouke 3 ปีที่แล้ว +4

      @@aniellodellacroce9848 no, US people has 20 times more money for they job than russians. Russian salary is 200$-500$ per month with constant everyday inflation. When Russian government is extremely rich people, everybody are billionaires. You very naive if you think that US government is much more corrupt than Russia. Because if it was true, american people would be much poor than russian people, but in reality american people has much higher salaries for their job, that's clearly show that US government spend much more money on their people, than russian government.

    • @artemiddle
      @artemiddle 3 ปีที่แล้ว +3

      @@aniellodellacroce9848 definitely not. I think you don't realize the scale of corruption in Russia. You can pay for absolutely anything here. Nothing unusual when someone pays a police officer to not get his driver's license cancelled for DUI or something like that. Just a regular day in Russia.

    • @aniellodellacroce9848
      @aniellodellacroce9848 3 ปีที่แล้ว +3

      @@artemiddle look there's more money in US that means there's a lot of corruption and i'm not talking about small police type of bribes but on higher level, in States if you have a lot of money you can pretty much legally bribe any Congressman, House representative and senators with that said i agree that the same thing applies to Russia BUT there is more money circulating in states (and more corporations-they bribe a lot) therefore there should be more corruption on higher level in US. obviously it's almost impossible to bribe the police in states, even if you have a lot of money you still can't bribe your way out of DUI or something. Police in Russia is more corrupt compared to US but oh higher level it's no contest due to the amount of money circulating. and let's not forget that US is the richest economy in the world so there must be more of corruption. if there's money there's corruption.

  • @voronacloud
    @voronacloud 11 หลายเดือนก่อน +1

    For those who are intrested. Ochko can mean a few things:
    - butthole (vulg)
    - name of the card game. russian version of BlackJack
    - point (i.e. measured metric earned in sports, games, competitions) Main meaning
    - toilet (vulg)

  • @StewartLucrative
    @StewartLucrative 3 ปีที่แล้ว

    I don't know anything about hacking, this conference, or US attorneys, but I'm surprised he's giving a talk here.

    • @yrebrac
      @yrebrac 2 ปีที่แล้ว

      It is a common thing for security agencies to talk at security conferences for some reason. In this case it's a win-win for them. Hacker was so stupid they don't have to reveal much, but they still get to advertise their success and capabilities to the BH community, thereby discouraging cybercrime.

  • @CatchTheBus
    @CatchTheBus 6 ปีที่แล้ว +28

    Люди из Владивостока никогда ничего не доби...

    • @machinerin151
      @machinerin151 4 ปีที่แล้ว

      С чего ты взял, что он из владивостока? Вдруг это москвич, который купил дом во владивостоке чтобы просто на море ездить.

    • @miloradowicz
      @miloradowicz 2 ปีที่แล้ว

      @@machinerin151 адрес в паспорте, алё? Острякова 26, кв 113, Владивосток?

  • @douro20
    @douro20 6 ปีที่แล้ว

    Why would he want to call himself 'potato'?

  • @Timm2003
    @Timm2003 ปีที่แล้ว

    "Did u track how many other russians stopped vacationing in maldives" xD

  • @domonique546
    @domonique546 5 ปีที่แล้ว

    What do they do with the enterprise accnts??.all must be orderly written someplace...

  • @naseweisz
    @naseweisz 6 ปีที่แล้ว +29

    Interesting screenshot at 20:28... iirc the red and yellow card next to a posting are only visible to moderators and thus the screenshot has been taken by a staff member.

    • @ug0ts3rvd
      @ug0ts3rvd 5 ปีที่แล้ว +3

      yep I noticed that too, admin perms to infract people

    • @nickdrozd
      @nickdrozd 5 ปีที่แล้ว +2

      I assume the pics were taken after the arrest? for evidence show or tis power point?

    • @Simonoswald1
      @Simonoswald1 5 ปีที่แล้ว +3

      @@nickdrozd May be or may not be, what he wanted to point out that theres a spy/snitch/whatever in the admin/mod staff of this carder forum^^

    • @danpowell806
      @danpowell806 5 ปีที่แล้ว +7

      More like they got a copy of the database of the carder forum, possibly by search warrant on the server, and then pwned the copy as god.

    • @yesterdaysguy
      @yesterdaysguy 4 ปีที่แล้ว

      Could also be parallel construction for sure - nice catch.

  • @thesorrow7499
    @thesorrow7499 5 ปีที่แล้ว

    This is the biggest load of bullshit I've ever heard ! SHAYE, Biboran, bratiya, Biboran

  • @AleksandarGrozdanoski
    @AleksandarGrozdanoski 5 ปีที่แล้ว +2

    Sounds exciting. I would love to have a job like theirs.

  • @tokyot3232
    @tokyot3232 4 ปีที่แล้ว +1

    he didnt switch servers once a month jesus

  • @NicholasLittlejohn
    @NicholasLittlejohn 5 ปีที่แล้ว +2

    Scholtzkys will do it every time.

  • @taitjones6310
    @taitjones6310 5 ปีที่แล้ว +8

    "Any questions?"
    Person asks question:
    " I can't answer that."

    • @ArkFinance1
      @ArkFinance1 4 หลายเดือนก่อน

      The art of Doublespeak 😜

  • @chilldudemanguy
    @chilldudemanguy 4 ปีที่แล้ว +5

    surprised at his sloppiness, he didnt make it very hard at all for law enforcement to find him out

  • @DustinRodriguez1_0
    @DustinRodriguez1_0 6 ปีที่แล้ว +22

    It's odd to me that they rely on file modified/accessed records. Those can be set to anything by anyone. They're really not reliable...

    • @fss1704
      @fss1704 6 ปีที่แล้ว +1

      yepp

    • @lydianlights
      @lydianlights 5 ปีที่แล้ว +9

      The point was that the defense brought that up as proof of him being framed. Therefore the prosecution had to prove that that was not the case. It was a stupid defense, but "the defense is stupid" is not a valid legal argument.

    • @rastavolt
      @rastavolt 5 ปีที่แล้ว +3

      @@lydianlights Ironically his stupid defense strategy could be a valid reason for appeal, under incompetent counsel rules. Although, I don't think it would make any difference in this case. His incompetence is what got him caught in the first place.

    • @lydianlights
      @lydianlights 5 ปีที่แล้ว

      lol... and that's why I'm not a lawyer

  • @chukchee
    @chukchee 4 ปีที่แล้ว

    How were the point of sale computers hijacked? Did Seleznev install software on those computers?

  • @tacosplease4906
    @tacosplease4906 ปีที่แล้ว

    What is a fsb?

  • @ScoopDogg
    @ScoopDogg 6 ปีที่แล้ว +13

    He should have done it the legal way and become a bank manager..... why didn't the government reimburse the mam n pop companys before they went under, or do they only do this for banks who do far more damage to society than this guy did... at least he put the money back in the system and had a good time instead of greedily hoarding it... hes gunna walk out in a few years and don't be fooled hes still got that money LOL.. wish they put this much effort in arresting Bush n Blair who on the grand scheme of things did far far worse than this guy...

    • @yc5117
      @yc5117 6 ปีที่แล้ว +3

      Why would the government reimburse the shops exactly...? It is their responsibility, by law, to protect any personal details on their systems. They did that inadequately and I'll be damned if they're paid for bad security out of my tax dollars. It's bad enough they did it to failures of banks.

    • @johndoe-gt4rx
      @johndoe-gt4rx 4 ปีที่แล้ว +1

      The businesses didn’t lose money from the credit cards being stolen directly. They went under because customers didn’t trust the business anymore and for good reason.

    • @theverdantwolf5402
      @theverdantwolf5402 4 ปีที่แล้ว

      @@yc5117 - that's why the US is tearing itself apart...the top can force the bottom to keep them from falling while putting all cost on the people...I'd rather my tax money go to help a local shop than a bank..... America became a socialist country by the order of Wall Street signed by Bush but they want a one way street.
      Socialism for the 1%, they deserve everything because they already have it...dog eat dog capitalism for the rest of us to fight each other or do tricks for their scraps.

    • @gophop
      @gophop 4 ปีที่แล้ว +1

      They didn't go out of business because of card fraud. It's bullshit to gain sympathy and praise for FBI's heroic work. *barf*

    • @theverdantwolf5402
      @theverdantwolf5402 4 ปีที่แล้ว

      @@gophop have you ever had card fraud as a business? It does hit you. Especially if you are swarmed with it, because your an easy cut out for carders, and a swarm can definitely put someone out of business while they wait for investigations to get the insurance reimbursement. Depends on standing capital, inventory, and credit lines to weather it.

  • @FinflyWeb
    @FinflyWeb 6 ปีที่แล้ว

    hi black hat ,plz can i upload to youtube 2 part from your video the part1 from 17:17 to 17:46 and the part2 from 19:09 to 20:23 and produce on them something that i will upload later ?

    • @b3twiise853
      @b3twiise853 2 หลายเดือนก่อน

      6 years later, no answer?

    • @FinflyWeb
      @FinflyWeb 2 หลายเดือนก่อน

      @@b3twiise853 i am still waiting bro

  • @VigneshSKannan
    @VigneshSKannan 6 ปีที่แล้ว +1

    Mind Blowing, The exploiter gets exploited! It's tom and jerry

  • @scottleft3672
    @scottleft3672 4 ปีที่แล้ว

    The Maldives is money lauder central, that's his nest egg stash right there.

  • @UNcommonSenseAUS
    @UNcommonSenseAUS 4 ปีที่แล้ว

    35:23 THEY SAY THIS WAS THE LAST USER ON THE COMPUTER.. *AFTER* THEY SAY THAT THEY HAD HIS PASSWORD *LOGICAL FACEPALM*

    • @coolbeachball
      @coolbeachball 4 ปีที่แล้ว +1

      They imaged the hard drive.

  • @akompsupport
    @akompsupport 5 ปีที่แล้ว +6

    Why weren't any bankers prosecuted after 2008???

    • @johnfrancisdoe1563
      @johnfrancisdoe1563 4 ปีที่แล้ว +3

      Emanuel Fernán Because they actually knew how to efficiently bribe US authorities?

  • @QuaQuoHD
    @QuaQuoHD 6 ปีที่แล้ว +25

    I am surprised this kind of info is released publicly.
    Carders/hackers now have a very useful manual on "how to not get caught due to own silly mistakes".

    • @starrychloe
      @starrychloe 6 ปีที่แล้ว +16

      QuaQuoHD - criminals are dumb. They don't watch this stuff.

    • @firefly618
      @firefly618 6 ปีที่แล้ว +14

      When you have a criminal empire you're too busy partying and whoring to give a f*** about these kind of details.

    • @QuaQuoHD
      @QuaQuoHD 6 ปีที่แล้ว +12

      Ah, I see. Now I am relieved.
      There's just one little thing keeps bothering me...
      How come these dumb criminals made a multi billion dollar industry? While catching just one guy out of thousands out there is apparently such a huge deal...

    • @Luftbubblan
      @Luftbubblan 6 ปีที่แล้ว +4

      @starrychloe
      Isn't that exactly the kind of people that watches this? :P Black hat talks... Why would a person with no black hat interest watch this?

    • @P1nkR
      @P1nkR 6 ปีที่แล้ว +20

      The hackers already have this kind of info. It's called common sense.

  • @theukadamyt
    @theukadamyt 6 ปีที่แล้ว +3

    Harold looks and sounds like Harold from Harold and Kumar lol

  • @info781
    @info781 4 ปีที่แล้ว

    So the Restaurant POS system was installed on a windows server that had a common login password for many servers? Why did people not patch their POS system? I wish they had commented on that more including the name of the system.

    • @gophop
      @gophop 4 ปีที่แล้ว +5

      Small businesses don't have active management in place. They don't have dedicated staff, nor do they bother to maintain a contract with an IT company. Only call for service when shit breaks.

  • @MrEndzo
    @MrEndzo ปีที่แล้ว

    Forensic 101: turn off the electronic you sized and use a faraday bag.

  • @andreyche193
    @andreyche193 5 ปีที่แล้ว

    So this guy's "political ties and his father's position" mentioned at 3:25 may explain a lot!

  • @UNOwen-ky5ib
    @UNOwen-ky5ib 7 หลายเดือนก่อน

    Easiest game of Spot The Fed ever…

  • @elliesagestar
    @elliesagestar 4 ปีที่แล้ว +13

    So the takeaway is, use Linux and disable logs :D

    • @glanoe
      @glanoe 4 ปีที่แล้ว +3

      and dont go on holiday with an unencrypted laptop stuffed chock full of incrimating evidence.....

    • @aniellodellacroce9848
      @aniellodellacroce9848 3 ปีที่แล้ว +1

      @@glanoe nailed it. but most importantly! never leave Russia lol

    • @glanoe
      @glanoe 3 ปีที่แล้ว

      Aniello Dellacroce Russia is a big place, why would you need to leave it's borders.

    • @rhards
      @rhards 3 ปีที่แล้ว +2

      @@glanoe to flex exotic places on instagram.. duh.

    • @lonnieo4676
      @lonnieo4676 3 ปีที่แล้ว

      and don't use yahoo email address...

  • @tthtlc
    @tthtlc 6 ปีที่แล้ว

    you either pay money to the pentesters, or to the hacker, depending on who charge less. and not sure if pentester will turn into hacker in future? Any relationship to cybersecurity earning good income?

  • @sendlocation8476
    @sendlocation8476 ปีที่แล้ว

    @ OPSEC NERDS
    If his whole system was encrypted would that mean the L.E would not be able to access or retrieve anything from that laptop? And would be useless to them?

    • @N99622
      @N99622 ปีที่แล้ว

      It depends. They had a lot of other evidence against him without the laptop. But encryption depends on the algorithm and the strength of your password (basically more entropy in the password, the better). There are also ways to create "hidden encrypted volumes" where you can keep an operating system, files, or whatever. This allows you to have plausible deniability-- you don't know about any hidden volumes!
      Best thing to do is always keep your online identities isolated from one another and encrypt everything. Get rid of logs. Ideally you would have a burner computer that has no identifying information associated with your real identity, fully encrypted. If you feel like the feds are sniffing your butt, just destroy the laptop and drop your activity for a while.

    • @visvge4934
      @visvge4934 7 หลายเดือนก่อน

      No, they would be able to access it. It would just be a little more hands on

    • @visvge4934
      @visvge4934 7 หลายเดือนก่อน

      Hardware based encryption can have the keys sniffed off the wire

  • @thygrrr
    @thygrrr 2 ปีที่แล้ว

    I spotted the feds!

  • @msnpassjan2004
    @msnpassjan2004 4 ปีที่แล้ว +15

    36:00 So there is no point to using a VPN because windows records everything in multiple ways?

    • @fluffigverbimmelt
      @fluffigverbimmelt 4 ปีที่แล้ว +2

      Those two things are hardly even linked

    • @msnpassjan2004
      @msnpassjan2004 4 ปีที่แล้ว +2

      @@fluffigverbimmelt They don't need to track you live. If there is a detailed log file, they can track you forever.

    • @totallynotlogic9849
      @totallynotlogic9849 4 ปีที่แล้ว +1

      @@msnpassjan2004 No that isnt what a VPN is, a VPN cloud your data being sent to servers from your ISP or even the servers themselves. This is local, and will not be sent to severs or your ISP

    • @VikisView
      @VikisView 4 ปีที่แล้ว

      Why not go with Virtual Networks ??? And Changing Mac Address Because , mac address is permanent number of your device which connecta details of u to APN , and Better to use socs For Firewall More Firewall more safety ...

    • @yyny0
      @yyny0 4 ปีที่แล้ว +1

      Install gentoo

  • @toddsk1961
    @toddsk1961 4 ปีที่แล้ว +1

    damn, i gotta change my password!

  • @moregirl4585
    @moregirl4585 6 ปีที่แล้ว

    To avoid randomly reading/writing why not just give it a executing segment without W/R permission?

  • @wouldntyouliketoknow9891
    @wouldntyouliketoknow9891 5 ปีที่แล้ว +1

    Why in the hell would they publicly detail all this? I mean, yeah he did say that a lot of it is public record due to the trial proceedings, but even at that digging through trial proceedings is nasty time consuming work and is a high bar that would keep a lot of people out. Here they have bundled up all kinds of "how to be a better criminal" information in a nice easy video. If I was going to turn to a life of crime I would start by watching a bunch of these videos...

    • @Wowthatsfail
      @Wowthatsfail 5 ปีที่แล้ว +5

      wouldnt you like to know problem is this guy is the dumbest of hackers. If you only try to do better than him you will still get arrest

    • @absurdengineering
      @absurdengineering 4 ปีที่แล้ว +1

      You should start by reading relevant court cases, and all of this is public record. Nothing they said here would be hidden for someone willing to shell out for a bit of Pacer subscription, or just walk in to the court in question and go to their file division. There you can inspect all unsealed records as you wish. There are lots of books that detail cases in the way it was done in this talk, and if the people with direct involvement with the case won’t say it, then someone else whose career it is to write about such things will do it anyway. You’re vastly overestimating the effort needed to collate all this information for someone whose job was to do it, or someone just serious about it. Sure, the first time round it will suck, but so it would if you sat for the first time in your life at a piano. You wouldn’t ask someone about how hard a piece of music is to play after their first lesson on the instrument. I wouldn’t ask anyone inexperienced with gathering such information about how hard it really is to gather it. I presume you haven’t done it much.

    • @uis246
      @uis246 ปีที่แล้ว

      Let's make laws secret, so criminals wouldn't know what they will be charged for

  • @willmcpherson2
    @willmcpherson2 3 ปีที่แล้ว

    Sort comments by newest to see carding ads

  • @lucah4613
    @lucah4613 5 ปีที่แล้ว +2

    wait so he just bruteforced rdp and installed some sort of keylogger on restaurant systems? were that many of those cash things using rdp?

    • @AA-gl1dr
      @AA-gl1dr 5 ปีที่แล้ว +2

      John Smith *cries in Java*

    • @gophop
      @gophop 4 ปีที่แล้ว +3

      It's because IT vendors who setup POS remotely use just that. Shit never gets turned off. And no keylogger needed, he pulled the CC numbers from the server. POS server probably stores shit in open text in a database. Which isn't all that insecure... if the fucking server doesn't have RDP open!

    • @johnfrancisdoe1563
      @johnfrancisdoe1563 4 ปีที่แล้ว +1

      gophop Even if not usually stored in plain text, he could install a patch that grabs each card and stores it in a plain file for later delivery to his rented server.

    • @Arbiter710
      @Arbiter710 4 ปีที่แล้ว +1

      Port scans RDP (most of them have common passwords)then searches queries...a lot of DBs are still getting breached like this

  • @cipheroth
    @cipheroth 4 ปีที่แล้ว

    Damn governments don't respect privacy ! XD

  • @relikvija
    @relikvija 6 ปีที่แล้ว

    can you hacker people explain to me why is the YT bell for this channel always off?
    I keep hitting it but when come back to it it's always off.

    • @ly-yx1rk
      @ly-yx1rk 6 ปีที่แล้ว

      relikvija ur pwned d00d

  • @jaketus
    @jaketus 5 ปีที่แล้ว +10

    How dumb was he not to encrypt his drives. And why would one use Windows in that case.

    • @impaugjuldivmax
      @impaugjuldivmax 4 ปีที่แล้ว +1

      that moron is just a scapegoat in someone's big game..

  • @chupathingy5862
    @chupathingy5862 ปีที่แล้ว

    34:27 you forgot to censor the card number.

  • @dylanholland1126
    @dylanholland1126 4 ปีที่แล้ว +1

    The Falklands*

  • @codyjewson4704
    @codyjewson4704 5 ปีที่แล้ว +2

    Roman. Dope name 👌💪

    • @99Kuromaru
      @99Kuromaru 4 ปีที่แล้ว +1

      Actually quite common and boring Slavic name

    • @impaugjuldivmax
      @impaugjuldivmax 4 ปีที่แล้ว +1

      lol, Roman is not a slavic name. it us clearly the Latin name used in Eastern Roman Empire

    • @99Kuromaru
      @99Kuromaru 4 ปีที่แล้ว +1

      @@impaugjuldivmax let me rephrase, quite common and boring name used among Slavs

  • @andreinekrasov2036
    @andreinekrasov2036 6 ปีที่แล้ว +12

    How hard can it be to to find a jury that knows nothing about computers to indict a Burger? I'm sure DOJ or FBI makes sure to find a knowledgeable jury...certain.

    • @gophop
      @gophop 4 ปีที่แล้ว +2

      A competent defense would've thrown all of that shit out. Windows logs? LMAO

    • @johnfrancisdoe1563
      @johnfrancisdoe1563 4 ปีที่แล้ว +2

      gophop This was Seattle, home to Microsoft. Hard to find 12 random people there and none knowing the inside of Windows.

  • @TheoryCrafter
    @TheoryCrafter 4 ปีที่แล้ว

    were the 2nd + 3rd to last questions just people pretending to be agents/criminals?

  • @Messiah38
    @Messiah38 5 ปีที่แล้ว

    Why do hackfest, 2600 event and other invite police to the events?

    • @NimbleJack3
      @NimbleJack3 5 ปีที่แล้ว +1

      It's meant to be an open, public exchange and showcase. If they wanted to secretly swap illegal secrets away from the eyes of the government, they wouldn't rent a function centre to do it. This is a "fun" event.

  • @zuiokopl2256
    @zuiokopl2256 5 ปีที่แล้ว +3

    so it mean america can just mail paypal and get a copy of email? Like wow, fuck the privacy