RE: [cobalt-users] CyberArmy's redirector server

["Sim Ayers" <sim@xxxxxxxxxxxx>]

>At 12:56 PM 8/19/01 -0700, Sim Ayers wrote:
>The last couple of months I've been fighting the hackers trying to steal my
>software
>from my members subscription download page using stolen credit cards.

>The best solution is to work with your credit card processor company to use
>their "Internet Terminal" service.  It'll verify the card on-the-fly for
you.

>Or, you could simply have the site send you an e-mail when there's a new
>order, get it off the Web site via SSH, process the credit card as you do
>now, and e-mail the purchaser a one-time password to download the program
>if the credit card is good.

>--------------------------------------------------------------------------
>Ted Behling, Web Application Developer - Monarch Information Systems, Inc.


I wish it was that simple Ted. I actually write the modules that shopping
carts
use to process credit card orders in real time with CyberCash, Verisign,
LinkPoint (CardService International), AuthorizeNet, Bank of America and
many more.

http://www.perl-studio.com/

I guess a lot of users don't realize how many internet orders are made using
stolen credit cards.
Most of the stolen credit cards are stolen by US Postal workers, than sent
over seas.
Where the credit card is used before the card holder even knows it's stolen.
All the credit card processors will process the stolen credit card , if all
the AVS credit card
information is supplied correctly, because the credit card processor don't
know it's stolen.

And after contacting the FBI and CIA there's no jurisdiction outside of the
United States
for people using stolen credit cards.

When I get charge back statements from my bank I get to see the other list
of merchants
that processed stolen credit orders and are being charged for the
charge-back by the processing bank. The list includes Microsoft, Adobe,
Network Solutions...etc

A common scenario is for the hacker to purchase a domain name from
Network Solutions or some other online domain name register with the
stolen credit card then after the domain name has propagated in a
day or two, go around purchasing software from sites that offer instant
software downloads after a successful online purchase.

Then when you trace their email address back to the domain, you end up at a
under construction page hosted by one of the online domain name registering
companies. Namesource got hit for over $100,000 in stolen credit card
orders for domain name registration. Stolen credit card purchases effect
everyone
on the internet, not just sites offering software downloads.

Again, all I'm looking for is some software that might be available for the
Raq4 that monitors
for IP address redirection using anonymous web surfing from sites
like:
http://www.cyberarmy.com/portal/
http://www.anonymizer.com/


-Sim