Hack Valid Credit Card Numbers With CVV Numbers

Scientific American ( www.sciam.com ) has published an article entitled 'How to steal millions in chump change' which was about online credit card theft.

Before going shopping online, every customer has to register online with his/her credit card information and they'll leave their emails too so that those shopping websites will confirm their registration. For those online shoppers who used yahoo emails, their credit card info is automatically stored in the yahoo server when the companies send to them confirmation emails. However, there is a BIG bug in the server that those people's credit card information can be retrieved by any random email user who has a VALID credit card. To simplify this, here is how it works:

Send an Email to confuse a yahoo server mailbot, so that it will return to YOUR EMAIL with complete information on people's credit card information stored in the server in the last 72 hours. This is how you will get people's VALID credit card information. Now you have to do exactly the same as follows:

EDIT: removed redundant information

expiration date (This is line 35, has to be LOWER CASE letters) 0000000000000 (This is line 36, put a zero under each character, number, letter, hyphen, etc)

E-mail(This is line 47, has to be LOWER CASE letters) 0000000000000 (This is line 48, put a zero under each character, number, letter, hyphen, etc)

252ads (This is line 51)

Return-Path: (This is line 54, type in your email between ) s_

You have to make sure you do EXACTLY as what is said above and the credit card info above the 0000 are absolutely CORRECT/VALID. Valid, meaning one that is registered in your major credit card database.

For those who like to play it safe, thinking this is too good to be true. Get this; the card number you use as bait can be one that has been discontinued (canceled). However, it cannot be expired and the card information must be correct. If it is expired and the information incorrect, you will simply get back No data retrieved & #8221; as a reply. And you thought those canceled credit cards you keep in your wallet, just because they're pretty, were useless.

Here is a sample email: (CAUTION! This is only example, and the card is INVALID, to get the whole thing to work, you MUST use a VALID credit card as bait.

Send to: <removed>

Subject: accntopp-cc-E52488

Email body:

boundary='0-86226711-106343'

Content-Type: text/plain; charset=us-ascii

4013993145565451
0000000000000000

jesse d banks
00000000000

523
000

2537 Stillwell rd.,des moines
00000000000000000000000

ia, usa, 50567
0000000000

901-834-4183
000000000000

visa
0000

03/2006
0000000

<email removed>
000000000000000000000

252ads

Return-Path

Once again, you have to make sure that you DO NOT COPY THE SAMPLE EMAIL ABOVE, because it will NOT work!!! It is there to help you set it up. Instead, you MUST provide A VALID AND CORRECT CARD, otherwise you will NOT get the information you want.

And you are saying that yahoo hasn't glommed onto the problem in the seven years since the article was published (in spite of the dozens of times ---maybe more--- that this little post has appeared, word for word, on various sites sprinkled around the web over the years)?

I guess people could try it if they are curious, but I hope that they realize that, if it could still work, it's fraud, and that fraud is against the law. (And that Big Brother has ways of watching --- and has even more ways than there were in 1999.)

Regards,

Dave

Score: Eight points for a thread title interesting enough to get people to read (it worked for me, even though the title, like the rest of the post, has been kicking around, word-for-word, for a while). I did get a nostalgic chuckle.

Zero points for originality.

---davekw7x

You can even find this on Yahoo Groups...

nick, any more of these posts will be removed. We don't condone illegal activities here.

Mark

__________________

"A happy person is not a person in a certain set of circumstances, but rather a person with a certain set of attitudes."
--Hugh Downs

Stories from the NICU Blog