Security Incidents mailing list archives

RE: Stolen Card Purchases


From: "Green, Art" <Art.Green () landsend com>
Date: Wed, 10 Jul 2002 12:58:17 -0500


Try the Internet Fraud Complaint Center at https://www.ifccfbi.gov/bcms/logon.asp.  I have heard of companies being 
referred here by their local FBI office.

Art
--
Art Green                 V: +1-608-937-5226
Sr. Security Analyst
Lands' End, Inc.
1 Lands' End Way
Dodgeville, WI 53595
Visit us on the web: http://www.landsend.com
--

-----Original Message-----
From: Ray Pompon [mailto:raypompon () attbi com]
Sent: Wednesday, July 10, 2002 11:44 AM
To: Jonathan A. Zdziarski
Cc: incidents () securityfocus com
Subject: RE: Stolen Card Purchases



I agree.  Mary is a good resource, I've met her and she's pretty sharp.

There have been times where I've had to "shop" a case around to the various
agencies to get attention.  Good bets are the FBI, Secret Service, the
locals,  or even right to the source: The US Attorney's office.   If you've
got damages and decent evidence, then you usually can get a case going.


At 06:43 PM 7/9/02 -0700, Greg Reber wrote:
Jonathon - try Mary Kimura, Infragard coordinator for the San Francisco FBI
office.

-greg

The information in this email is likely confidential and may be legally
privileged. It is intended solely for the addressee. Access to this email by
anyone else is unauthorized. If you are not the intended recipient,  any
disclosure, copying, distribution or any action taken or omitted to be taken
in reliance on it, is prohibited and may be unlawful.

-----Original Message-----
From: Jonathan A. Zdziarski [mailto:jonathan () networkdweebs com]
Sent: Tuesday, July 09, 2002 5:24 PM
To: incidents () securityfocus com
Subject: Stolen Card Purchases

We've seen a significant increase in the number of stolen credit card
purchase [attempts] made on our website recently, and I'm wondering if
anyone has had very good experience in convincing any legal arm to take
action.  We have sent three related incidents to the Secret Service, who
will not touch it unless there's at least $50,000 involved.
Unfortunately, most local law enforcement agencies are impotent at such
issues.  We traced the first attempt back through an open proxy where
the administrator even sent us enough information to track him back to a
residential DSL line, but nobody's willing to put in even a little work
to go and subpoena the data and make an arrest.

We're getting pretty sick of having to feel "paranoid" when customers
purchase our products, so I'm hoping some of you may have had more luck
than I have thus far in dealing with such issues.  Any creative comments
would be appreciated.

Jonathan A. Zdziarski
President
Network Dweebs Corporation
http://www.networkdweebs.com


----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management
and tracking system please see: http://aris.securityfocus.com


----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com



----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com


----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management
and tracking system please see: http://aris.securityfocus.com


Current thread: