로우 해킹: 사이버 범죄와 배신 사례

### 로우 해킹: 사이버 범죄와 그 결과에 대한 경고 이야기
* 💻 2003년, 브라이언 살세도와 그의 공범들은 로우의 내부 네트워크를 해킹했고, 이로 인해 **살세도는 당시 미국 역사상 가장 긴 징역형인 9년형**을 선고받았습니다.
* 🔒 이 해킹은 '수프 나치'로 알려진 미지의 인물이 조직 범죄와 연관이 있고 **정부 정보원으로 활동한 것으로 알려진 알버트 곤잘레스의 압력**에 의해 조직적으로 이루어졌습니다.
* 📅 살세도는 곤잘레스가 자신을 협박했다고 주장하며 **협박이 없었다면 신용카드 스니퍼를 설치하지 않았을 것**이라고 주장하면서 **9년 형량에 대한 의문**을 제기하며 법적 공방이 시작되었습니다.
* 👮 2008년 8월, 곤잘레스는 **2만 달러가 넘는 현금과 총기**를 소지한 채 체포되었고, 그가 **다양한 사이버 범죄에 연루**되었으며 **미국 비밀경호국의 정보원**으로서 역할을 했다는 사실이 폭로되었습니다.
* 🕵 FBI는 보안팀이 보안 침해를 감지했을 때 **로우의 해킹 사실**을 알게 되었고, 고객 정보를 수집하기 위해 **로우의 신용카드 처리 소프트웨어를 수정한 살세도와 그의 파트너인 아담**이 체포되었습니다.
* 📊 살세도와 아담은 음모와 컴퓨터 사기에 대해 유죄를 인정했지만, 그들의 행동으로 인해 발생할 수 있는 잠재적 피해에 따라 형량이 결정되어 **아담은 26개월, 살세도는 9년형**을 선고받았습니다.
* 🔍 4년 후, 살세도는 자신을 해킹하도록 압력을 가한 사람이 **정부를 위해 일하고 있을지도 모른다**는 사실을 알게 되었고, 새로운 증거를 바탕으로 **형량에 이의를 제기할 것**을 고려하게 되었습니다.
* 🛠 이 이야기는 사이버 범죄의 복잡성과 그에 따른 법적 영향을 강조하며, **한 번의 잘못된 결정이 어떻게 심각하고 지속적인 결과**를 초래할 수 있는지를 설명합니다.

브라이언 살세도는 신용카드 정보를 훔치려다 미국 역사상 가장 긴 해커 형을 선고받았습니다.

In 2003, the longest prison sentence in U.S. history at the time was given to a hacker named Brian Salcido. Salcido and two accomplices hacked into Lowe's internal network, attempting to steal credit card information and sell it to a guy known as the suit. All with the assistance of a Pringles can. Now, before we go into any more detail, let me introduce you to Adam Bobbill. He was known as the shy giant of a man who stood at six feet five inches tall, who would describe himself as a geek with a bad childhood. Saucedo apparently met Adam through local computer circles, and the two became friends. Now we have that background information. Our story begins in the spring of 2003. Adam and his roommate Paul Timmons were war driving around Southfield, Michigan. While war driving, they managed to stumble across an unsecured network at Lowe's. War driving is the act of looking for a publicly accessible Wi-Fi network from a moving vehicle using a laptop or a smartphone. Six months after finding the unsecured

Network Adam came back to the same location with Saucedo. Together, they discovered a weakness in the system and found out they could jump directly from the Southfield lows to the company's central database in North Carolina and further to the local networks of the stores around the entire country. This is exactly what they did over the following few weeks. While doing this, they'll planting a software inside the server. More on that later. Lowe's network engineers were able to detect the break-ins and piece together timings of when the break-ins would occur. On November 6, 2003, Lowe's officials called the Charlotte office of the FBI as there was a break-in happening at that very second. Using system monitoring tools, the Lowe's team determined a security breach was happening that very moment in Southfield. The FBI immediately went to stake out the Southfield store's parking lot. While in the car park, they spotted a very suspicious car, a Pontiac Grand Prix. Now, normally, this car isn't very suspicious.

but what makes it so suspicious was one of two reasons. The first reason was the two men sitting inside the car typing away on their laptops. But the dead giveaway was that the car was bristled with antennas, one of the antennas being a Pringles can that was wrapped in foil. So picture this right, you're an FBI agent staking out a parking lot trying to find something suspicious. You see a Grand Prix X which has two guys typing on in their laptops and 10 is poking out and one of them's a Pringles can. Anyway, the FBI ran the license plate of the car and it came back with Adam's name. The agents watched them work for about 20 minutes. After that, they tailed them to a local Caesar's pizza restaurant. While low security team worked to figure out what the hackers had done, the security team had discovered that the pair had modified a created piece of software called TCP credit. Lowe's use TCP credit to handle credit card transactions. The two changed this program so it would

stash customers' credit card numbers where the hackers could come back later and retrieve them. The program had collected only six credit card numbers when it was discovered. Shortly after this, the FBI had arrested Salcedo and Adam. Salcido and Adam pleaded guilty to conspiracy and Computer Fraud. The sentence they received was largely based on the amount of harm that would have occurred if the plan succeeded. On appeal, Saucedo's lawyers argued that the Hacker's sentence should have been proportionate with the actual damage that was caused, but the appeal was denied. Adam got a total of 26 months in federal prison, and the 21-year-old Brian Salcedo got a whopping nine years. Now, this is where the story gets interesting. Four years after pleading guilty, hacker Brian Salcedo learned from prison that a co-conspirator who pressured him to go through with the hack was possibly working for the feds at the time. So, say they started replaying, and he's had a crucial moment right before the crime.

A week before he had planted the credit card sniffing code, he nearly backed out of the entire scheme. So, Sado says he started getting cold feet when he realized that Lowe's Network administrators had detected his presence on the network. He wanted to bail, but he had already lined up a buyer for the credit cards, a mysterious figure in the computer underground known as The Soup Nazi, who wouldn't take no for an answer. The Soup Nazi told Salcedo and his partner that it was too late to turn back. He insinuated threats against us and said we had to continue doing what we were doing, said Salcido in a phone interview from prison. Federal indictments unmasked the Soup Nazi as a 27-year-old Albert Gonzalez. Gonzalez is the alleged mastermind of a series of Wi-Fi-based intrusions into U.S. retailers, including TJ Maxx, Office Max, and DSW. Perfecting the attack pioneered by Salcedo, Gonzalez allegedly stole at least 40 million credit card and debit card numbers, worth millions of dollars.

on the black market court records revealed that Gonzalez had been busted in July 2003. three months before saucedo's Lowe's hack began at his arrest the government emits Gonzalez became a key informant for the U.S Secret Service eventually aiding in the 2004 arrest of 28 fraudsers linked to the credit card fraud supersite known as shadowcrew.com now I know for a fact that he was an informant during the time that he was dealing with her says Salcedo another source involved in the lowest hack confirmed salcedo's account and said that the suit Nazi made the impression that he was connected to organized crime and demanded that Salcido go through with the attack although it's unlikely that the Secret Service instructed Gonzalez to threaten Salcedo and the agency may not have even been aware that its informant was dealing with the Lowe's hacker these Revelations raise enough questions of potential trap for saucedo to attempt a court challenge to his nine year prison sentence.

as stated before, it was the longest sentence in U.S. history at the time. This was supposed to be upheld by federal appeal in court. Saucedo's argument would basically be that Gonzalez threatened him as a government agent in order to induce him to plant the sniffer. He would not have planted the sniffer but for the threat, and his sentence was based on that. Societo desperately tries to get in contact with his prosecutor to attempt to challenge the decision in court. Although so say it, the prosecutor did not return a phone call Tuesday. All this information about Albert Gonzalez came out because he was arrested in possession of more than twenty thousand dollars in cash and a Glock 27 firearm. All this occurred in August of 2008. Now Saucedo had served his time at the federal prison camp in McKenney, Pennsylvania. He had a job at the welding shop after serving his time. I think it's safe to say he won't be maliciously hacking anymore. Thank you for watching.

They Hacked Into Lowes Using A Pringles Can

Code Green

해킹으로 인한 최장 징역형 선고

2003년, 브라이언 살시도는 두 명의 공범과 함께 로우의 내부 네트워크를 해킹하여 신용카드 정보를 훔치려다 미국 역사상 가장 긴 징역형을 선고받았습니다.

살시도와 그의 친구인 아담 보빌은 지역 컴퓨터 동호회를 통해 만나 컴퓨터에 대한 공통된 관심사로 유대감을 형성했습니다.

이들의 범죄 활동은 미시간주 사우스필드에서 전쟁 운전을 하면서 시작되었고, 그곳에서 로우의 보안되지 않은 네트워크를 발견했습니다.

아담과 사우세도는 시스템의 취약점을 악용하여 사우스필드에서 노스캐롤라이나에 있는 로우의 중앙 데이터베이스로 이동하면서 소프트웨어를 심었습니다.

Lowe의 네트워크 엔지니어는 침입을 감지하고 이를 FBI에 알렸고, FBI는 사우스필드 매장을 잠복했습니다.

이 계획은 '수프 나치'로 알려진 알버트 곤잘레스가 주도했으며, 그는 살세도와 그의 파트너에게 사이버 범죄를 계속하겠다고 협박하여 결국 4천만 개의 신용카드 및 직불카드 번호를 훔쳤습니다.

프링글스 캔 등 안테나가 뾰족하게 달린 차 안에서 노트북으로 타이핑하던 두 남성이 FBI 요원의 눈에 띄었습니다.

이 두 사람은 고객의 신용카드 번호를 숨기는 소프트웨어 프로그램을 수정하여 6개의 카드 번호를 수집한 후 체포되었습니다.

살세도는 9년형을, 아담은 26개월형을 선고받았고, 4년 후 살세도는 공범이 연방 수사기관을 위해 일하고 있다는 사실을 알게 되었습니다.

논란이 되고 있는 사우세도와 곤잘레스의 사례

소세도가 오랜 징역형을 선고받은 것은 곤잘레스가 정부 요원으로서 위협을 가했다는 혐의에 영향을 받아 소세도가 스니퍼를 심게 된 것입니다.

2008년 현금 및 총기 소지 혐의로 체포된 곤잘레스는 미국 비밀경호국의 핵심 정보원이 되어 대규모 신용카드 사기 사건과 관련된 사기범을 체포하는 데 도움을 주었습니다.

소세도는 복역 후 비밀경호국의 개입과 곤잘레스의 행동에 대해 의문을 제기하며 형량에 이의를 제기했습니다.