Intellectual Property Law

Foreign Phisher Sentenced to 50 Months in U.S. Prison

By Ryan Singel, Kevin Poulsen, Sarah Lai Stirland, Kim Zetter, and David Kravets

The first foreigner convicted of phishing in the United States was sentenced to 50 months in federal prison Monday.

Defendant Ovidiu-Ionut Nicola-Roman is a Romanian citizen arrested two years ago in Bulgaria and extradited to the United States. Nicola-Roman, who pleaded guilty last year to one count (.pdf) of U.S. computer access fraud, was part of an overseas phishing group (.pdf) the authorities said was responsible for ripping off more than $1 million from Americans.

The 2005 to 2007 plot was simple: send unsolicited e-mails posing as various banks. The messages informed e-mail recipients there was a security problem with their account. The e-mails requested recipients to forward credit card information, dates of birth, Social Security numbers, phone numbers and PIN numbers. Hundreds responded, leading the group to reproduce credit cards and ATM cards.

While those with a minimal level of online sophistication understand the perils of phishing and can recognize when they are a target, the general populace does not. Gartner estimates that, in 2007, about $3.2 billion was stolen via phishing in the United States alone.

The Romanian phishers posed as representatives from JP Morgan Chase, Comerca Bank, LaSalle Bank, US Bank, Wells Fargo and others.

The defendant, in seeking leniency, told (.pdf) a Connecticut federal judge that he committed the crimes to care for his sick mother.

Arrest warrants remain outstanding for as many as six other Romanians indicted in Connecticut.

Photo: Sophos D/A/CH Presseinfo

See Also:

• Britney, Obama Twitter Feeds Hijacked Following Phishing Attack ...
• Online Campaign 2008: A Phishing Bonanza?
• Homeland Security Website Hacked by Phishers? 15 Signs Say Yes ...
• Zombie Computer Army Targets Bank Account Passwords
• Phaux Phish
• New Online Fraud Tool Kit Discovered
• FBI Announces Botnet Dragnet

Full post as published by Threat Level on March 30, 2009 (boomark / email).