Russians Arrest 3 in RBS WorldPay Heist

Suspects Tied to $9 Million Theft from ATMs
Russians Arrest 3 in RBS WorldPay Heist

Russian federal authorities this week arrested three suspects already indicted here in the U.S. for the RBS WorldPay heist, bringing hope that there will be justice meted out for the $9 million hack that stunned even the most knowledgeable law enforcement officials when it happened in November 2008.

See Also: FRAML Challenges: A New Risk Era for Mid-Market Banks and Credit Unions

The three men arrested by the Russian Federal Security Service (FSB) are Viktor Pleshchuk, Sergei Tsurikov and Oleg Covelin. The FSB, which is the internal law enforcement body in Russia, is the most powerful bureaucracy in the country. Because Russian law prohibits extradition of its citizens, Pleshchuk of St. Petersburg would face a Russian court. At this point it is unclear what charges he would face, or how stiff the penalties for his participation in leading the others might be. U.S. authorities have asked that Tsurikov be extradited for trial. Tsurikov, an Estonian, was arrested by Estonian authorities last year before being turned over to the FSB for further questioning earlier this week.

In the November indictments handed down in Atlanta, Pleshchuk and Tsurikov were the accused leaders of the group of eight hackers. The group allegedly infiltrated RBS WorldPay's network and broke the encryption around the company's payroll debit cards. According to the indictment, the hackers then cloned the cards and used them to withdraw $9 million in cash from 2,100 ATMs in 280 cities around the world, all in a 12-hour period. Authorities allege the hackers were able to break the encryption because Covelin, a native of Moldova, identified a flaw in RBS WorldPay systems that allowed him to carry out the hack with Tsurikov and Pleshchuk.

U.S. law enforcement officials acknowledged last year when the indictments were announced that they had received critical cooperation from other law enforcement agencies overseas, including Estonia. Estonian police had noted some suspect withdrawals from ATMs in Tallinn, and subsequently arrested Tsurikov. The high-profile case received top level priority by the FBI and other U.S. law enforcement, even being mentioned in the White House CyberSpace Police Review in 2009.

Law enforcement here would not comment on the Russian arrests, and RBS WorldPay says only that it is continuing to support the investigation. Tom Konz, head of business intelligence and marketing at RBS WorldPay in the U.S., says the company won't comment on the arrests because of the "ongoing investigation by law enforcement" here in the US and overseas.


About the Author

Linda McGlasson

Linda McGlasson

Managing Editor

Linda McGlasson is a seasoned writer and editor with 20 years of experience in writing for corporations, business publications and newspapers. She has worked in the Financial Services industry for more than 12 years. Most recently Linda headed information security awareness and training and the Computer Incident Response Team for Securities Industry Automation Corporation (SIAC), a subsidiary of the NYSE Group (NYX). As part of her role she developed infosec policy, developed new awareness testing and led the company's incident response team. In the last two years she's been involved with the Financial Services Information Sharing Analysis Center (FS-ISAC), editing its quarterly member newsletter and identifying speakers for member meetings.




Around the Network

Our website uses cookies. Cookies enable us to provide the best experience possible and help us understand how visitors use our website. By browsing bankinfosecurity.com, you agree to our use of cookies.