The Dark Visitor

Not every industry is suffering during these tough economic times. One of my favorite Chinese hacker websites is expanding operations and doing a little hiring. In fact, business is so good, they are expanding into the US, Hong Kong, South Korea and the UK.

The salary range is from 30,000-100,000 yuan (USD 4,300 to 14,500 approx) and they are inviting computer and network security personnel from all over the country and the world to join their organization. However, the applicants must work at the Beijing headquarters for a trial-period of three months.

If you make it past the trial period you get to enjoy the same perks as the rest of the staff such as dining together, birthday cakes, free travel, paid holiday, training and end-of-year red envelope (these contain money).

For those who show exceptional skill at their post, arrangements can be made to go to Hong Kong, South Korea, the US and the UK.

They are trying to fill four positions:

1) Training department manager

2) Training department computer lecturer

3) Training department network lecturer

4) Training department security lecturer

The advertisement list all the qualifications for the positions to include education and ages. I will supply these details for anyone who is interested. The applicants will have an online test and need to report for a two day interview.

They also list three different online applications for graduates, non-graduates and interns.

Mine is already filled and let’s hope I snag one of these sweet positions. Hell, they won’t even have to pay reloc

US law enforcement busted a gang of 11 international hackers that stole 40 million credit and debit card numbers. Three things stand out for me in this report:

1. Three of the defendants are U.S. citizens, one is from Estonia, three are from Ukraine, two are from the People’s Republic of China and one is from Belarus. One individual is only known by an alias online, and his place of origin is unknown.
2. In addition, an indictment against Hung-Ming Chiu and Zhi Zhi Wang, both of the People’s Republic of China, and a person known only by the online nickname “Delpiero,” was also unsealed in San Diego today. Chiu, Wang and Delpiero are charged with conspiracy to possess unauthorized access devices, trafficking in unauthorized access devices, trafficking in counterfeit access devices, possession of unauthorized access devices, aggravated identity theft, and aiding and abetting. Also in San Diego, Sergey Pavolvich, of Belarus, and Dzmitry Burak and Sergey Storchak, both of Ukraine, were charged in a criminal complaint with conspiracy to traffic in unauthorized access devices. All are believed to be foreign nationals residing outside of the United States.
3. The San Diego charges allege that Yastremskiy, Suvorov, Chiu, Wang, Delpiero, Pavolvich, Burak and Storchak operated an international stolen credit and debit card distribution ring with operations from Ukraine, Belarus, Estonia, the People’s Republic of China, the Philippines and Thailand. The indictments allege that each of the defendants sold stolen credit and debit card information for personal gain.

First, I’m struck by the diversity of the group. They seem to come from all over the globe and my question is how did these people get together?

Second, and any help from someone familiar with the legal system would be greatly appreciated, the report states that several of the people indicted, lived outside of the US. Does this mean they were taken into custody in their respective countries or just named in the indictment? My guess is just indicted but I would like clarification if anyone knows.

Third, did the PRC cooperate in this investigation? The news has made its way into major Chinese news outlets and the Chinese hacker community but so far without comment. And yes, we are trying to find more information on Chiu and Wang.

Finally, major kudos to the Department of Justice for breaking the case.

UPDATE: We did warn you to watch these types of connections back in March.