The US Department of Justice, Apple and Supercell have been warned about a possible money laundering case. Through Apple, using fake accounts and gaming profiles, sophisticated carders charged stolen debit and credit cards for premium subscriptions, then sold the accounts on the Internet.
The activity came to light in mid-June, when security researchers from Kromtech Security stumbled upon an unencrypted MongoDB database , which they analyzed
“Once we started analyzing the database, it didn’t take long for us to realize that this was not a typical business database,” said a Kromtech researcher.
“At first glance, the database appears to belong to credit card thieves (also known as carders), and the database is relatively new, just a few months old.”
The same Kromtech researcher reports that the carders used a special tool, with which they created new IOS accounts with fake details, and then added the cards to the new accounts.
The carders then used a second tool, with which they automatically downloaded specific applications, created new accounts, and purchased premium subscriptions, which they later sold online for real money.
Experts say that carders, in order to charge the stolen cards, mainly targeted accounts from games such as Clash of Clans, Clash Royale and Marvel Contest of Champions.
The research also states that the exposed database contained data from 150,833 cards in total, and the cards come from 19 different banks. Researchers believe that the content of the database came from the dark web.
More information about the research can be found at the link.
