{"id":232,"date":"2011-04-28T09:30:00","date_gmt":"2011-04-28T16:30:00","guid":{"rendered":"http:\/\/www.infosecurity.pro\/?p=232"},"modified":"2019-04-20T16:26:20","modified_gmt":"2019-04-20T16:26:20","slug":"232","status":"publish","type":"post","link":"https:\/\/www.infosecurity.pro\/?p=232","title":{"rendered":"Possible TicketMaster hacker pleads guilty"},"content":{"rendered":"<p>\t\t\t\t<![CDATA[A hacker has pleaded guilty to fraud and identity theft totaling $36,624,815.52 after authorities found  him  with more than 675,000 stolen credit card accounts on his home   computers.\u00a0 The theft mostly used SQL injections which are one of the most popular attacks against SQL  databases of eCommerce sites. \u00a0 Unlike XSS vulnerabilities which use JavaScript, injections use an SQL statement which results in malformed requests resulting in sensitive details not intended for outside consumption.\nBeginning as early as 2002, RogeJio Hackett, Jr. began specifically to target computer databases that contained credit card information so that he could sell that information. RogeJio Hackett, Jr. would hunt for vulnerabilities in SQL\u00a0 databases and exploit any security vulnerabilities he found in order to gain unauthorized access to such databases. He would then steal the credit card information stored in such databases. For example, first in August 2007 and again on a later date, the defendant used his special skill in computer security in order to obtain unauthorized access to the computers of \"Company One,\" an on-line ticketing services provider. Company One provides the ability to order and to pay for tickets ordered on-line for such clients as libraries, museums, theatres, performing arts centers, raceways, sporting teams, and festivals. RogeJio Hackett, Jr. stole a total of359,661 individual\u00a0 access devices (i.e., credit card account information) from the computer systems of Company One.\u00a0\u00a0 He possessed many of these stolen access devices on his computers and storage media in his residence on June\u00a0 30, 2009, the day the United States Secret Service executed a search warrant on that location.\nIn addition to hacking, RogeJio Hackett, Jr. also obtained stolen credit card information by purchasing it from others over the Internet. From May 2008 until June 30, 2009, he bought stolen credit card information online from several different individuals he believed to be in the United States, Ukraine and Russia.\nFrom at least as early as September 2004, the defendant was a member of various on-line carding forums, i.e., on-line discussion forums for the purpose of buying or selling stolen financial information.\u00a0 On one such carding forum, the defendant was a \"Reviewed Vendor,\" a seller whose stolen financial information had been reviewed by someone assigned by the carding forum administrator.\nRead more in the <a href=\"..\/wp-content\/uploads\/2011\/04\/Hackett-SOF.pdf\">USA v Hackett<\/a> statement of facts.]]>\t\t<\/p>\n","protected":false},"excerpt":{"rendered":"<p>\t\t\t\t<![CDATA[]]>\t\t<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"amazonpipp_noncename":"","amazon-product-isactive":"","amazon-product-single-asin":"","amazon-product-content-location":"","amazon-product-content-hook-override":"","amazon-product-excerpt-hook-override":"","amazon-product-singular-only":"","amazon-product-amazon-desc":"","amazon-product-show-gallery":"","amazon-product-show-features":"","amazon-product-newwindow":"","amazon-product-show-list-price":"","amazon-product-show-used-price":"","amazon-product-show-saved-amt":"","amazon-product-timestamp":"","amazon-product-new-title":"","amazon-product-use-cartURL":"","amazon_featured_post_meta_key":"","_amazon_featured_alt":"","amazon-product-template":"","footnotes":""},"categories":[66,67],"tags":[],"class_list":["post-232","post","type-post","status-publish","format-standard","hentry","category-breaches","category-practices"],"_links":{"self":[{"href":"https:\/\/www.infosecurity.pro\/index.php?rest_route=\/wp\/v2\/posts\/232","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.infosecurity.pro\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.infosecurity.pro\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.infosecurity.pro\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.infosecurity.pro\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=232"}],"version-history":[{"count":1,"href":"https:\/\/www.infosecurity.pro\/index.php?rest_route=\/wp\/v2\/posts\/232\/revisions"}],"predecessor-version":[{"id":8324,"href":"https:\/\/www.infosecurity.pro\/index.php?rest_route=\/wp\/v2\/posts\/232\/revisions\/8324"}],"wp:attachment":[{"href":"https:\/\/www.infosecurity.pro\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=232"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.infosecurity.pro\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=232"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.infosecurity.pro\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=232"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}