wraggster
April 29th, 2011, 20:36
News via http://psx-scene.com/forums/f6/psn-database-containing-2-2million-credit-cards-now-up-sale-85702/
Rumors are following thru various underground "credit card" trading forums, and on the new #psnhack twitter list that a large section of the PSN database containing complete personal details along with over 2.2million working credit card numbers with the much-needed CVV2 code are being offer up for sale to the highest-bidder, after the "hackers" tried to sell the DB back to Sony for a price, but they of course didn't answer!
The following information is from Kevin Stevens, Security Researcher in hostile times from his @killercube (http://twitter.com/#!/killercube) on Twitter:
Hackers offer to return DB containing 2.2million CC's to Sony for a price, they say NO!
Quote:
Discussion about #psnhack and possible speculation about the hackers being from Europe Logs - efnet - #ps3dev - 2011-04-26 (http://173.255.232.215/logs/efnet/ps3dev/2011-04-26)
<Mathieulh>trixter, people I know had a shell on the psn servers
<Mathieulh>did you know that sony didn't disable the function that sets the psn server under maintenance ?
The hackers that hacked PSN are selling off the DB. They reportedly have 2.2 million credits cards with CVVs #psnhack
Sony was supposedly offered a chance to buy the DB back but didn't #psnhack
@mikkohypponen That is what is going around on some underground forums. The DB contains pretty much everything
@the_pc_doc That is what I thought but the guys selling it say that they have CVV2 numbers
@RiquezJP Well not properly securing your server breaks compliance as far as I know.
@RangerRick Yeah, this information about the CVV2 numbers could be bogus. The guys selling the DB could just be making it up.
Supposedly the hackers selling the DB says it has: fname, lnam, address, zip, country, phone, email, password, dob, ccnum, CVV2, exp date
No, I have not seen the DB so I can not verify that it is true
What follows is some 'screenshots' from various 'underground' forums, that suggests the database is complete, and also contains over 150,000 German accounts, so is this just a "Europe" slice of the pie, or did the still unnamed 'hackers' target that country because of what Sony did to the 'scene' in regard to how they were handling the graf_chokolo case!
Rumors are following thru various underground "credit card" trading forums, and on the new #psnhack twitter list that a large section of the PSN database containing complete personal details along with over 2.2million working credit card numbers with the much-needed CVV2 code are being offer up for sale to the highest-bidder, after the "hackers" tried to sell the DB back to Sony for a price, but they of course didn't answer!
The following information is from Kevin Stevens, Security Researcher in hostile times from his @killercube (http://twitter.com/#!/killercube) on Twitter:
Hackers offer to return DB containing 2.2million CC's to Sony for a price, they say NO!
Quote:
Discussion about #psnhack and possible speculation about the hackers being from Europe Logs - efnet - #ps3dev - 2011-04-26 (http://173.255.232.215/logs/efnet/ps3dev/2011-04-26)
<Mathieulh>trixter, people I know had a shell on the psn servers
<Mathieulh>did you know that sony didn't disable the function that sets the psn server under maintenance ?
The hackers that hacked PSN are selling off the DB. They reportedly have 2.2 million credits cards with CVVs #psnhack
Sony was supposedly offered a chance to buy the DB back but didn't #psnhack
@mikkohypponen That is what is going around on some underground forums. The DB contains pretty much everything
@the_pc_doc That is what I thought but the guys selling it say that they have CVV2 numbers
@RiquezJP Well not properly securing your server breaks compliance as far as I know.
@RangerRick Yeah, this information about the CVV2 numbers could be bogus. The guys selling the DB could just be making it up.
Supposedly the hackers selling the DB says it has: fname, lnam, address, zip, country, phone, email, password, dob, ccnum, CVV2, exp date
No, I have not seen the DB so I can not verify that it is true
What follows is some 'screenshots' from various 'underground' forums, that suggests the database is complete, and also contains over 150,000 German accounts, so is this just a "Europe" slice of the pie, or did the still unnamed 'hackers' target that country because of what Sony did to the 'scene' in regard to how they were handling the graf_chokolo case!