backtop


Print E-mail del.icio.us 54 comment(s) - last by maverick85wd.. on Jun 4 at 5:33 PM

Maybe the recently charged hacker just needed someone to take a certain employee's stapler

In the world of hacking and phishing, there are your slightly unusual attacks, significant but not super eye-catching – there are hackers involved in corporate espionage, zealous nationalists targeting news sites, and rings of malicious Canadian phishers who aren't content to just go ice fishing.  However, every once in a while a story about a hacker really stands out from the rest.

The story of Michael Largent’s hacking victories and eventual downfall is one of those sort of stories.  Largent fulfilled the pop-culture dream that was popularized in such movies as Office Space and Superman 3 -- stealing a large sum of money, $50,000 to be exact, a few pennies at a time.

Largent used a massive fraud scheme to trick
Google Checkout and online brokers like E-trade and Schwab to send him the sum, a few cents at a time.  The fraud was made possible by a common practice relatively unknown to the general public.  When users open up accounts with these sites, the site sends a tiny payment from a few cents to a few dollars to the user.  The payment is meant to verify that the user has access to the account and that it’s active.

By opening
58,000 such accounts, Largent funneled money through the channels into a few private bank accounts.  Largent raked in $8,000 from Google's Checkout alone.

In the end, his activities were noticed by his bank.  The bank contacted him and Largent incredibly told them the entire story.  He claimed that he had read the terms carefully and believed he was legally safe.  He said what he was doing was not wrong and that he needed the money to pay off his debts.

Technically Largent was right -- almost.  What he was doing in practice was not wrong, but the fact that he used false names to do it was illegal.  Largent used false names such as cartoon characters, entered fake addresses, and used fake social security numbers.  These offenses opened him up to wire, mail, and bank fraud charges.

It looks as if Largent may soon be headed to "federal pound me in the…" as a certain employee in the movie Office Space exclaimed.  He is currently out of jail on bail and is awaiting the charges.  Interestingly Google is not pursuing damages currently and the police are not planning on charging him for the money obtain from Google Checkout.  The case of Largent just goes to show you sometimes there's a reason why a scheme that seems too good to be true hasn't been tried more often.



Comments     Threshold


This article is over a month old, voting and posting comments is disabled

How can someone so smart...
By amanojaku on 5/29/2008 10:01:30 AM , Rating: 2
Be so damn stupid?




RE: How can someone so smart...
By Tsunami982 on 5/29/2008 10:08:09 AM , Rating: 2
So if I just opened a bunch of these accounts using my real info... it would be legal?

This guy is beyond awesome though... a bit stupid in the end... but still awesome for having the balls to do it.


RE: How can someone so smart...
By RogueSpear on 5/29/2008 10:33:27 AM , Rating: 4
My guess is that using your real name, address, DOB, SS#, etc more than once would trigger an "error" that says something along the lines of "You already have an account here".


RE: How can someone so smart...
By MrBlastman on 5/29/2008 10:35:31 AM , Rating: 5
He was just doing them a favor by testing their account verification system. They should give him a job!

;)


RE: How can someone so smart...
By ninjaquick on 5/29/2008 10:49:10 AM , Rating: 2
History will tell you tho, if this guy is worth anything as a hacker, he prolly will get hired. The world of hackers is just great, not only do you get to say you were the first person to hack the CIA, but you can say that now you get payed to do it, and no small wage either.


RE: How can someone so smart...
By Polynikes on 5/29/2008 10:56:29 AM , Rating: 4
Sounds to me like this guy didn't "hack" anything. Even someone with the most basic web-browsing skills could pull this off.


RE: How can someone so smart...
By JasonMick (blog) on 5/29/2008 11:04:36 AM , Rating: 5
Thats not accurate. He wrote a script that automated the process of creating these accounts. That in a sense is a "hack" as much as denial of service scripts are hacks. Granted it might not have been a terribly complex or intelligent one, but it was rather ambitious you must admit.

And when you say "basic web-browsing skills" I think of my mom and there's no way she could pull off writing a script that would generate random soc. #s, cartoon names, etc. and scam these sites. ;)


RE: How can someone so smart...
By martinrichards23 on 5/29/2008 11:23:32 AM , Rating: 4
For anyone with basic programming skills it is very easy though. He is not a hacker, just a fraudster.


RE: How can someone so smart...
By Regs on 6/2/2008 12:50:56 PM , Rating: 2
Apparently now calling a fraud-ster a hack-ster is now considered a insult?

God forbid if someone who couldnt hack-it legit in life got called a hacker instead of a fraud when they got sent off to prison!


RE: How can someone so smart...
By Polynikes on 5/29/2008 12:40:22 PM , Rating: 3
I was thinking more along the lines of manually opening each account. No hacking required.


RE: How can someone so smart...
By ineedaname on 5/29/2008 1:45:22 PM , Rating: 3
if he scammed 50k for pennies a time... just do the math urself for how many times he'd have 2 do it.

I doubt someone with only basic web skills would sit there for THAT long doing it. Of course there's always gonna b someone that stupid and patient.

But yea the guy had to have at least basic programming skills as stated above.


By 4wardtristan on 5/29/2008 8:40:42 PM , Rating: 3
quote:
I doubt someone with only basic web skills would sit there for THAT long doing it. Of course there's always gonna b someone that stupid and patient.


well...if it gets you $50,000.....


RE: How can someone so smart...
By drew494949 on 5/29/2008 1:39:27 PM , Rating: 2
Wouldn't a better course of action be for, say, a company IS Manager to make a deal with a CFO where they utilize the employee information in their databases, to open these accounts in their employees names for utilization by the firm, and then generate a handsome bonus to themselves at the end of the year?

Wouldn't that just place them in the "jerk" boss category, instead of actual fraud?

<-- here's to thinking outside the box -->


RE: How can someone so smart...
By Schrag4 on 5/29/2008 2:26:24 PM , Rating: 3
I'm not a lawyer, but I'm going to go out on a limb and say that pretending to be someone else is actually worse in the eyes of the law than using a fake name. So opening accounts in other people's name would put you in the 'even worse fraud' category.

I mean, c'mon, if your neighbor opens an account as Daffy Duck, do you care? How about if he opens an account in your name? I bet you care then...


By maverick85wd on 6/4/2008 5:28:48 PM , Rating: 2
quote:
if your neighbor opens an account as Daffy Duck, do you care?


OF COURSE I CARE!! MR. DUCK'S CREDIT AND GOOD NAME COULD BE RUINED FOREVER!


RE: How can someone so smart...
By AstroCreep on 5/29/2008 8:07:44 PM , Rating: 2
...well maybe he can get a job as a script-kiddie?


RE: How can someone so smart...
By winterspan on 5/31/2008 4:56:59 AM , Rating: 2
quote:
"rather ambitious"


A script that submits a web form with different variables? Sounds like a "VBscript" project. :)


By marvdmartian on 5/29/2008 11:20:52 AM , Rating: 3
Maybe so.....unless, of course, he got caught when he used the Fred Flintstone moniker, and raised suspicion when he requested his payment in "clams"!!


RE: How can someone so smart...
By DM0407 on 5/29/2008 2:38:24 PM , Rating: 5
Will E-Trade stop saying "1000 new accounts opened everyday" at the end of every commercial now?


RE: How can someone so smart...
By MonkeyPaw on 5/29/2008 6:27:06 PM , Rating: 2
It was his first time. Maybe if he had more experience....


Perhaps he's hearing in his head right now...
By MrBlastman on 5/29/2008 9:55:49 AM , Rating: 1
Bdee Bdeebe Bdee Bdee That's All Folks!

as Bugs chomps on a carrot.




By RamarC on 5/29/2008 10:03:09 AM , Rating: 5
i wonder if one of his pseudonyms was Wile E Coyote, Super Genius.

well, i gotta go open up a few thousand accounts.


By bighairycamel on 5/29/2008 11:44:13 AM , Rating: 2
"All in favor of the name Bugs Bunny?"

"Now all in favor of the name Efrim the Retarded Rabbit?"


RE: Perhaps he's hearing in his head right now...
By FITCamaro on 5/29/2008 2:28:11 PM , Rating: 4
I choose the latter.

On a serious note, its sad that classic Looney Tunes are considered too "violent" to show to kids these days. But the myriad of cartoons with giant boobs and other violence apparently is ok.....go figure.

If your kid is too dumb to know or you're too lazy to teach them that playing with dynamite will get you killed, you/they probably should be killed. Its called natural selection. And the world will be a better place as a result.


RE: Perhaps he's hearing in his head right now...
By Nfarce on 5/29/2008 2:46:23 PM , Rating: 1
Amen bro. I'm about sick and tired of this "Nanny State" nation that we are becoming. The UK is already there, and that looks like that's where we are headed.

In any event, I purchased all the Looney Tunes DVD collections, so it's all good. My future kids will know them even if the asshat Nanny censors are out there - they can shove it up their @sses.

Most of us aged 30-45 grew up with play guns and "violent" video games and turned out fine. Parenting is collapsing this nation as more people turn to the government (and drugs like Ritalin) to "fix" their own problems with poor parenting and poor decision making.

God Save This Republic


By maverick85wd on 6/4/2008 5:33:39 PM , Rating: 2
I don't know why you got rated down, I agree... the situation is getting ridiculous.


Now it's your turn
By ninjabob333 on 5/29/2008 11:37:57 AM , Rating: 2
So now that they told us all exactly how he did it, what's to stop anyone else from doing the same thing, just in such a way that they don't get caught as easily as this guy?




RE: Now it's your turn
By Polynikes on 5/29/2008 12:43:10 PM , Rating: 4
Absolutely nothing.

Except maybe common sense.


RE: Now it's your turn
By SiliconAddict on 5/29/2008 11:32:19 PM , Rating: 3
And Federal pound me in the ass prison.


RE: Now it's your turn
By jRaskell on 5/29/2008 12:44:11 PM , Rating: 2
What stops most people is the threat of legal repercussions. It's a balance of risk vs. reward, and for most people the reward just doesn't justify the possibility of going to jail for multiple years and/or facing thousands or tens of thousands of dollars in fines. It's better in the long run to just earn your money honestly, or at least mostly honestly.


RE: Now it's your turn
By Viditor on 5/29/2008 10:53:10 PM , Rating: 2
In point of fact, if you live in a country where giving a false ID is NOT considered a fraudulent act, then what he did was perfectly legal. The money he collected wasn't illegal, just the fake ID was...


Not Really
By BMFPitt on 5/29/2008 10:06:04 AM , Rating: 1
I wouldn't call him a hacker, and he didn't do it anything like in Office Space. All he did was open a bunch of accounts.

I mocked the general media for their verbage, but I expected more from DT.




RE: Not Really
By RamarC on 5/29/2008 10:28:51 AM , Rating: 2
depends on your definition of hack. it's grown to mean utilizing shortcuts, loopholes, backdoors, etc. to do something that was difficult or not allowed.

see lifehack.


RE: Not Really
By Bender 123 on 5/29/2008 10:56:18 AM , Rating: 1
Agreed. Remember Mitnick said the easiest way into a system is to just ask someone for their logon and password and I would consider him the top of the heap when it comes to hacking...

The person in this article just took that to an extreme, by taking advantage of a ease of use loophole in the microdeposit system.


RE: Not Really
By stirfry213 on 5/29/2008 12:55:05 PM , Rating: 2
You guys are missing a very important aspect of "hacking", the person to person. Its called social hacking. This is still the most deceptive form of hacking. You can call up some joe schmo pretending to be a Credit company, ask him for his login id/pw for his credit card. He gives it to you because he's an idiot... you buy yourself a new big screen. I still consider this hacking, its just not in digital form.


RE: Not Really
By BadAcid on 5/29/2008 2:48:54 PM , Rating: 2
That's called fraud. We have a word and a felony charge for that already.


RE: Not Really
By Jedi2155 on 5/30/2008 12:20:57 AM , Rating: 2
Its also called social engineering....so that means hackers are really engineers? Then again there are Sanitation Engineers colloquially referred to the potty engineers.


If I were him...
By chmilz on 5/29/2008 11:24:37 AM , Rating: 5
I would have consulted with my local recovering crack addict door-to-door magazine salesperson for money laundering advice before I partook in this scheme. Pfft, amateur.




RE: If I were him...
By Omega215D on 5/29/2008 2:15:54 PM , Rating: 2
I'm such a nerd that I had to look up money laundering in the dictionary.


RE: If I were him...
By nayy on 5/30/2008 10:13:32 AM , Rating: 1
you forgot, ex-programmer.
;)


RE: If I were him...
By nayy on 5/30/08, Rating: 0
Off to..
By zinfamous on 5/29/2008 11:16:01 AM , Rating: 2
...FPMITA prison for him, i suppose.




RE: Off to..
By Macelind on 5/29/2008 3:51:39 PM , Rating: 2
Don't be soooo insensitive. Maybe we could send him a case of petroleum jelly. Oops! Now I'm being insensitive. All I have to say is HA HA!


RE: Off to..
By Leirith on 5/29/2008 7:29:17 PM , Rating: 2
Maybe he is hoping for white-collar resort prison.


Other Considerations
By DXRick on 5/30/2008 4:40:35 PM , Rating: 2
Will Daffy, Bugs, and the other toons sue him for ID theft ?

Most sites have you enter some verificatio text from an image to prevent scripts from being able to automate things. How could biggies like Google and Schwab not have some script prevention technique?

As a programmer who is learning .NET prgramming, I find it rather incredible that such a thing could be done today, and can't help but wonder what other vulnerabilities there are with the internet technologies being used.




RE: Other Considerations
By JimmyC on 6/3/2008 12:23:32 AM , Rating: 2
Captchas aren't 100% hack proof these days, even semi-skilled laymen with free time can come up with tons of info from the web.


RE: Other Considerations
By Darkk on 6/3/2008 2:54:38 PM , Rating: 2
quote:
by DXRick on May 30, 2008 at 4:40 PM

Will Daffy, Bugs, and the other toons sue him for ID theft ?

Most sites have you enter some verificatio text from an image to prevent scripts from being able to automate things. How could biggies like Google and Schwab not have some script prevention technique?

As a programmer who is learning .NET prgramming, I find it rather incredible that such a thing could be done today, and can't help but wonder what other vulnerabilities there are with the internet technologies being used.


I was thinking the exact same thing about the verification process. Incredible as it seems how did his scripts get past that part? Did he find some security loophole in the verification process that Google decided not to pursue him to save face? Google claims what he did wasn't against their terms of service but still wrong. I'm sure by now Google will be fixing this.

Makes you wonder.

I too thought about this scheme long time ago with PayPal when they deposited money into my account for verification purposes. I was like what prevents people from signing up with bogus names and do it on a large scale to rake in the money? The Superman 3 thing didn't occurred to me at the time of stealing "pennies at a time". I just thought it was ironic it took this long for somebody to exploit it.

Darkk



A Little Off Topic...
By uglyone888 on 5/29/2008 4:33:00 PM , Rating: 2
Just a quick thing I noticed when reading this. The guy's name is Michael Largent. L'argent in french means money. Maybe there's a correlation...




RE: A Little Off Topic...
By root mean sq on 5/29/2008 5:23:57 PM , Rating: 2
yeah, and maybe his retard roomate stopped dribbling on himself and flew to the Bahamas with all the money...

or maybe he wrote a checque to the aliens!!!!


As Zaphod would say...
By killerroach on 5/29/2008 10:38:29 AM , Rating: 3
"Ten out of ten for style, but minus several million for good thinking."

I've always wondered about whether or not that was possible, and this guy goes out and does it so I don't have to, although on a far grander scale than I would have thought would ever be feasible.

My only advice to the "hacker": Some things are best left solely as thought exercises.




restr!
By omnicronx on 5/29/2008 11:14:55 AM , Rating: 3
However, every once in a while a story about a hacker really stands out from the restr.




seems like
By tastyratz on 5/29/2008 1:24:04 PM , Rating: 3
someone had a case of the mondays




I'd been wondering about this...
By PrinceGaz on 5/29/2008 9:15:37 PM , Rating: 2
... as I just recently bothered verifying my bank details with PayPal (yeah I know, but it is the only way I can receive money from a certain site) and part of the process was that they would make two small deposits into my account (despite the fact I had zero balance with PayPal) and I'd enter the value of each amount from my bank statement to prove it was my account.

The two amounts only totalled about £0.30 but it did make me wonder if it would be possible to abuse it with multiple accounts. I suppose the 30p is mine to keep, at least until PayPal have taken that much in transaction charges.




someone so smart
By spaz2364 on 5/31/2008 3:16:01 PM , Rating: 2
I agree, what balls! LOL Kudos




"There is a single light of science, and to brighten it anywhere is to brighten it everywhere." -- Isaac Asimov

DailyTech Poll
Do you use copy/paste on your smartphone? 




17 Comments












botimage
Copyright 2010 DailyTech LLC. - RSS Feed | Advertise | About Us | Ethics | FAQ | Terms, Conditions & Privacy Information | Kristopher Kubicki