An 18-year-old Wisconsin man has been charged with a credential-stealing operation against users of popular US gambling site DraftKings, who are suspected of stealing an estimated $600,000.
Joseph Garrison, of Madison, Wisconsin, yesterday announced charges of complicity in computer intrusion, unauthorized access to a protected computer for further fraudulent purposes, unauthorized access to a protected computer, wire fraud conspiracy, wire fraud, and aggravated personal information. charged with theft. These offenses carry a total penalty of up to 57 years in prison.
Garrison is alleged to have launched an attack on a Draft Kings customer on November 18 last year.
For more information about credential stuffing, read The North Face warns of large-scale credential stuffing campaigns.
Using classic credential stuffing techniques, Garrison uses a list of stolen username and password combinations to simultaneously access accounts on the web where the victim may have used the same login. allegedly tried to
This way he was able to access 60,000 DraftKings user accounts. In some cases, he added a new payment method to his account, deposited $5 to confirm that payment method, and then was able to withdraw all the funds.
Garrison and his co-conspirators allegedly used the MO to steal approximately $600,000 from the accounts of 1,600 victims, according to the US Attorney’s Office for the Southern District of New York.according to reports Information security At the time, it was believed that only $300,000 was stolen from customer accounts.
Garrison’s home was raided by law enforcement officers in February, and his credentials included 700 “preferences” files for dozens of targeted websites and files containing 40 million login combos. Stuffing software was discovered.
His smartphone also allegedly contained a conversation with a co-conspirator about how to hack the Draft Kings account and withdraw funds.
In one conversation he is quoted as saying: . . I am obsessed with seeing money in my account. ”
Editorial image credit: T. Schneider / Shutterstock.com
