Ochko123 - How the Feds Caught Russian Mega-Carder Roman Seleznev

Best of Black Hat USA 2017 Briefings Winner

How did the Feds catch the notorious Russian computer hacker Roman Seleznev - the person responsible for over 400 point of sale hacks and at least $169 million in credit card fraud? What challenges did the government face piecing together the international trail of electronic evidence that he left? How was Seleznev located and ultimately arrested? This presentation will begin with a review of the investigation that will include a summary of the electronic evidence that was collected and the methods used to collect that evidence.

by Harold Chun & Norman Barbosa

[patrickcameron]

Him surviving a terrorist attack and spending two months in a coma halfway through the story was a hell of a twist.

[baruchben-david]

The thing is, he more ir less handed himself over to the authorities by being so sloppy. It's less credit to the Feds, and more blame to him.

[frostbolt]

Learned a lot. I still find it amazing that these massive online empires tend to fall due to massive opsec failures. Silk Road, Alphabay, etc.

[anuragkashyap]

Lesson :
1 Live in Russia & Never Leave Russia

THATS ALL

[ilaser]

Would have laughed if he was successfully sued for infringing on 2Pac's IP before being arrested for fraud.

[MrRigdensChannel]

Great video. I was really surprised when I saw the old Broadway Grill. I walk past that shuttered restaurant almost every day.

[RyanKearney]

Anyone else notice the workgroup name of the machine was VAIO? This guy never reformatted the machine after he bought it? Damn...

[BvousBrainSystems]

"Was there any encryption that you had to deal with?"
"In this case no, there was none"
*audible laughter across the room*


This hacker is getting roasted by the guys who cuffed him lol

[danpowell]

1.7M instances of theft, 38 counts of fraud. That's one count for every 45k card numbers he was caught with.

[MadameMinty]

tl;dr he basically handed himself to them on a plate.

[keystarr]

A legendary talk! Thank you so much for putting this out

[dreftymac]

Dude, this is awesome and needs to be made into a screenplay.

[enlightendbel]

"Would it have been harder to convict if you didn't have his password?"

He wasn't protected in any way on that Vaio, no security measures, hardware or software based, as these guys explained, there was no encryption or anything even remotely security related on that laptop.

There's 10000 ways to get into a windows system if you have physical access to the system.

There's ways to get to the data on a system if you have physical access to the system.

It was cute they guessed the password, but that wasn't even needed. His shitty password, combined with his bad security measures and all the other ways he was blazee about security, the dude was bound to get caught and bound to get convicted if caught.

His security measures were to travel to and through places that didn't extradite to the US. Including the place he was arrested.
Little did he know or understand that diplomacy used to be a thing and you can get any country to agree to anything if its worth their while.

[edtx]

With all the IRS scammers, credit card scammers, spammers and other scams, its really good to hear a story where one was tracked down and arrested. Really great presentation!

[YerZero]

24:40 you can tell he's used to waiting for applause at this point, but wrong crowd lol

[percyblakeney]

As an audience member I'd say "thank you for the insight as to how your team did it." As a gov supervisor I'd ask "why the sh*t are you showing your cards!"

[sathyantinku]

That guy thought he would never ever be caught. How the hell a hacker uses Ochko123

[blitzkrieg]

Roman Selezneav has been RELEASED TODAY 8/1/2024

[MilesBellas]

Nov 2017


"The prolific Russian hacker Roman Seleznev was sentenced to 14 years in prison Thursday for his role in a $50 million cyberfraud ring.

This latest sentence follows a 27-year-prison sentence Seleznev received in April on charges of hacking point-of-sale computers that he then sold to the criminal underground. That scheme generated nearly $170 million in fraudulent charges, prosecutors said. Both sentences will run concurrently."

[Sugrax]

27 years for no physical harm done? US is fucking insane