Anatomy of a Crime: Secure DevOps or Darknet Early Breach Detection
summary
Walkthrough of the Roman Seleznev-era carding economy: 1.7 million stolen cards found on seizure, darknet bazaars selling packs of 10,000 cards for $10–$25 each, and a major retailer compromised by malware that infects 2,200 self-checkout terminals and scrapes card data from RAM. Shows use of BlackPOS RAM scraper, regex extraction, HTTP POST exfiltration, credential acquisition via breached vendors, Burp Suite for brute forcing, and the 2017 settlement that mandates darknet monitoring.
AI-written summary · about
chapters (6)
- 0:00Start
- 7:14Criminal Carding
- 11:00Retailer Hack: Skimmers
- 16:00Retailer Hack: Cost: 2017 Settlement
- 22:43Retailer Hack: Password Crack Demo
- 24:01Retailer Hack: Brute Force w/DVWA
related talks
54mThe Underground Ecosystem of Credit Card Frauds
35mBreach Data and the Dark Web
56mAnatomy of memory scraping credit card stealing POS malware
23mPoint of Sale System Architecture and Security
57mAnatomy of ... POS Malware
36mCyber Crime and Attacks on the Dark Side of the Web
59mA Journey to Protect Points-of-Sale
34mMagecart 2020 The New Face of XSS