Thursday, April 02, 2009

Credit Card Use by Terrorists

Think it can't happen to you? So did I.

But late last summer someone used my Credit Card to run up nearly $4,000 of airfare and other items throughout Europe, traveling mainy on 9/11 and 9/12 to add insult.

Now before you say shame on me know that I am extremely security conscious for reasons I won't go into here. I always know where my card is, buy from very few sites on the internet and always take my receipt. So I wa either hacked or it was an inside job. Call customer service for that credit card company and you end up in Mumbai as often as Dallas.

Still, someone got me. Someone using the name Ahmed Mumtaz.

Yeah, so I'm profiling. So what? Fucking sue me.

Fortunately I spotted the problem as soon as I got my first statement showing it. And cancelled the card. Alerts put on my accounts. Things that still cause me aggravation to this day (try to get a student loan through quickly for your kid with an alert on your Credit records).

Unfortunately, beyond cancelling the debts incurred, nothing else has been done. Even though I talked with my credit card company. Even though I opened a case with the Internet Crime Complaint Center. Nothing. Zero. Zip.

The most help I got was from a vendor who got taken in by this who said whoever ordered on my card ordered stamps (rubber type variety) and had them shipped to Brooklyn.

By the time I discovered the issue, the flights had already been taken, items shipped. Leaving the nagging question What did I just help finance?

But the worst part is the Credit Card company itself. Who is supposed to be looking out for accounts. For chrissake not a year earlier they held a transaction and called me to verify it was really me buying $25 worth of gas 100 miles from home on my card. Yeah, I was visiting my kid at school.

But no red flags when flights are being booked to Dublin, Paris, Pisa when I've never been outside the continental U.S.?

So it's no joke. No small matter. Be security conscious with your identity.

what? My Credit Card company?

Citigroupthebastards.

Seems like they don't need a bailout. Just someone to go their bail.

from Counterterrorism Blog:

My Written Statement for Congress on Credit Card Use by Terrorists
By Andrew Cochran

Yesterday, the Subcommittee on Emerging Threats, Cybersecurity, and Science and Technology of the U.S. House Committee on Homeland Security held a hearing titled, "Do the Payment Card Industry Data Standards Reduce Cybercrime?" The subject of the hearing was to examine whether data security requirements for businesses that store, process, or transmit personal information during Internet payments provide sufficient protection against data breaches, fraud, and terrorism. The subcommittee invited me to submit a written statement on the use of credit cards by terrorists. My statement quoted from and summarized posts by Contributing Experts Dennis Lormel, Matthew Levitt, and Michael Jacobson, and included information from our panel on February 29, 2008, “Meta-Terror: Terrorism and the Virtual World,” with Contributing Experts Evan Kohlmann and Roderick Jones and the Senior Vice President and Chief Technology Officer of VeriSign. You can download my three-page statement, and here is an excerpt:

Credit cards are extremely vulnerable to fraud and are used extensively by terrorists. The internet not only serves as a learning tool for terrorists but also functions as a mechanism to steal credit card information through hacking, phishing and other means. In many instances, when terrorist operatives are apprehended, they have multiple identifications and credit cards in a variety of names in their possession. The terrorists who executed the devastating 2004
Madrid train bombings, which killed almost 200 people, and who carried out the deadly July 7, 2005, attacks on the transportation system in London were self-financed, in part through credit card fraud.

Younes Tsouli, aka “Terrorist 007,” and his two associates, Waseem Mughal and Tariq al-Daour, used computer viruses and stolen credit card accounts to set up a network of communication forums and web sites that hosted everything from tutorials on computer hacking and bomb making to videos of beheadings and suicide bombing attacks in Iraq. They raised funds through credit card information theft and fraud, which were used to support the communications, propaganda and recruitment for terrorists worldwide, as well as to purchase equipment for Jihadists in the field. One expert described their activities as “operating an online dating service for al-Qaeda.” The three men pled guilty to inciting terrorist murder via the internet.

• Stolen credit card numbers and identities were used to buy web hosting services. At least 72 stolen credit card accounts were used to register more than 180 web site domains at 95 different web hosting companies in the U.S. and Europe.

• On one computer seized from al-Daour’s apartment, some 37,000 stolen credit card numbers were found. Alongside each credit card record was other information on the identity theft victims, such as the account holder’s address, date of birth, credit balances and limits.

You can download the testimony by the witnesses from the hearing website. I appreciate this opportunity and thank the subcommittee chairwoman, Rep. Yvette Clarke, for the invitation.

No comments: