Cameron Harrison TARGETS eBay
Cam used stolen PayPal and eBay logins and targeted users with messages related to their eBay auctions.
Explicit Confidence 97% · Jack Rhysider EP 85 Details
“With that, Cam would have their logins to PayPal and eBay.”
Qualified triples from the transcripts. Origin, speaker, and evidence stay attached. These are not independently verified facts.
Cameron Harrison TARGETS eBay
Cam used stolen PayPal and eBay logins and targeted users with messages related to their eBay auctions.
Explicit Confidence 97% · Jack Rhysider EP 85 Details
“With that, Cam would have their logins to PayPal and eBay.”
Cameron Harrison TARGETS PayPal
Cam’s phishing campaign impersonated PayPal and collected PayPal credentials.
Explicit Confidence 99% · Jack Rhysider EP 85 Details
“Cam’s phishing scam was to tell people they needed to update their account details on PayPal.”
Cameron Harrison USES Luhn’s algorithm
Cam used Luhn’s algorithm to identify likely credit-card numbers in memory.
Explicit Confidence 99% · Cameron Harrison EP 85 Details
“look for something to match Luhn’s algorithm. That’s the way to identify a credit card number.”
Cameron Harrison USES Hydra
Cam used Hydra to brute-force passwords for RDP-accessible point-of-sale computers.
Explicit Confidence 99% · Jack Rhysider EP 85 Details
“Hydra tried a bunch of passwords and eventually found one that worked.”
Cameron Harrison USES carding
Cam participated in carding, including receiving and cashing out stolen credit-card information.
Explicit Confidence 98% · Cameron Harrison EP 85 Details
“I took the $2,000 of the carded Western Union.”
Cameron Harrison USES MSR
Cam used an MSR magstripe encoder to make IDs and later to write stolen card data onto physical cards.
Explicit Confidence 99% · Cameron Harrison EP 85 Details
“I wanted my IDs to scan, so I wanted an MSR.”
Cameron Harrison USES RDP
Cam targeted point-of-sale computers that exposed RDP for remote access.
Explicit Confidence 99% · Jack Rhysider EP 85 Details
“one port in particular he was hoping that was open was 3389 RDP.”
Cameron Harrison USES DarkMailer
After leaving jail, Cam installed DarkMailer on cyber-café computers and used them to send spam.
Explicit Confidence 99% · Cameron Harrison EP 85 Details
“I turned – I had DarkMailer installed on all of them and were blasting out spam.”
Cameron Harrison USES ATM cash-out
Cam regularly used counterfeit cards to withdraw stolen money from ATMs.
Explicit Confidence 99% · Jack Rhysider EP 85 Details
“From then on, cashing ATMs became a regular part of his routine.”
Cameron Harrison USES credential phishing website
Cam hosted a fake PayPal login site that collected victims’ credentials and payment details.
Explicit Confidence 99% · Jack Rhysider EP 85 Details
“The link would take them to Cam’s website which looked exactly like PayPal”
Cameron Harrison USES brute-force password guessing
Cam used brute-force password guessing against RDP-connected cash-register systems.
Explicit Confidence 99% · Jack Rhysider EP 85 Details
“he would unleash Hydra on it and try tons of different passwords to try to log in.”
Cameron Harrison USES dc.exe
Cam bought dc.exe because it formatted card data so it could be written correctly to magstripes.
Explicit Confidence 99% · Cameron Harrison EP 85 Details
“They were selling a program and the program was called dc.exe.”
“The software worked; it encoded the track data onto the cards perfectly.”
Cameron Harrison USES social engineering
Cam social-engineered banks by posing as cardholders and changing the phone numbers and addresses associated with accounts.
Explicit Confidence 99% · Jack Rhysider EP 85 Details
“he figured out ways to social engineer some of the banks connected to the cards”
Cameron Harrison USES network scanning
Cam scanned IP ranges and local networks to locate systems associated with small businesses and point-of-sale systems.
Explicit Confidence 99% · Cameron Harrison EP 85 Details
“now that IP; I’m gonna scan that whole range.”
Cameron Harrison USES Apache
Cam used publicly known Apache-related exploits to compromise web servers for hosting phishing pages.
Explicit Confidence 96% · Cameron Harrison EP 85 Details
“We’d just find some popular public exploit at the time for Apache or whatever it was”
Cameron Harrison USES Sub7
As a high-school student, Cam used Sub7 to access a classmate’s computer and take his work.
Explicit Confidence 99% · Jack Rhysider EP 85 Details
“He used Sub7 which is a Trojan to attack the guy’s computer”
Cameron Harrison USES Memory scraping
Cam searched the RAM of point-of-sale computers for payment-card data matching Luhn’s algorithm.
Explicit Confidence 99% · Cameron Harrison EP 85 Details
“set up your rerun, the point of sale software, and a debugger, so that way they can get – scan through the memory address ranges”
Cameron Harrison USES Carder.su
Cam used Carder.su under the alias Kilobit and participated in its carding community.
Explicit Confidence 99% · Jack Rhysider EP 85 Details
“Cam had been careful on Carder.su. He registered as the user Kilobit”
Cameron Harrison USES Nmap
Cam used Nmap to scan IP ranges for open ports on small-business networks.
Explicit Confidence 99% · Cameron Harrison EP 85 Details
“used the Nmap or something to scan and find out what open ports were there.”
Cameron Harrison USES Track 2 data
Cam extracted Track 2 data from payment-card information found in memory.
Explicit Confidence 98% · Cameron Harrison EP 85 Details
“anything in between that would be your Track 2.”
Cameron Harrison USES phishing
Cam learned and conducted phishing campaigns to steal account and payment information.
Explicit Confidence 99% · Jack Rhysider EP 85 Details
“He found someone who would teach him how to phish”
Cameron Harrison USES full
Cam obtained and used stolen full-information card records, including CVV, identity, and account details.
Explicit Confidence 98% · Cameron Harrison EP 85 Details
“I was able to get my hands on a full.”
“It’s basically a CVV, a card with a CVV; the expiration but also the name, address, phone number”
Cameron Harrison USES Western Union
Cam used Western Union to receive transfers funded with stolen credit cards and later to cash out stolen card details.
Explicit Confidence 99% · Jack Rhysider EP 85 Details
“Cam would then go down to any Western Union and pick up the cash.”
Cameron Harrison USES Counterfeit Library
Cam became a regular on Counterfeit Library and learned how to make fake IDs there.
Explicit Confidence 99% · Jack Rhysider EP 85 Details
“He became a regular on Counterfeit Library”
Cameron Harrison USES eGold
Cam used eGold to send the Kosovo group its share of money from cashing out stolen cards.
Explicit Confidence 98% · Jack Rhysider EP 85 Details
“To do this, he used a service called eGold.”