Hacker arrested for `52.9L online fraud
Accused hacked Xsilica Software Solutions account
The city cybercrime police on Wednesday nabbed a hacker named Vannam Sriram Dinesh Kumar who had withdrawn `52.9 lakh from the database server of PayG payment gateway.
The cybercrime police received a complaint from an employee of Xsilica Software Solutions Pvt Ltd on March 17 stating that their company's account was hacked and an amount of `52.9 lakh was diverted to other accounts.
Based on the complaint, the cybercrime team arrested Dinesh from Vijayawada in the early hours of Wednesday and were able to recover `17.2 lakh from him. Another `14 lakh was found in his account with HDFC bank that was also recovered.
Apart from these, three laptops, 12 mobile phones, 33 credit/debit cards along with some bank documents were also recovered from the accused.
Dinesh Kumar created user ID in payment gateway PayG by using disposable mail id and phone number. Then the accused used open
source software tools for evaluating the vulnerabilities of the payment gateway PayG.
Later the accused obtained the user ID of the super admin of the payment gateway PayG. Using the software, he gained access into the main database server utilising the vulnerabilities existing in the payment gateway software.
Finally, after gaining access to the data server, he transferred a total amount of `52.9 lakh from the nodal account of PayG to three virtual bank accounts existing with Yes Bank, Equitas Bank and ICICI bank.
The total amount was finally transferred to www.bitcoiva.com. where he purchased bitcoins from www.bitcoiva.com. He later transferred these bitcoins into another crypto account in www.remitano.com., and from there he sold the bitcoins and encashed the amount. “The accused developed a method, wherein he identifies vulnerabilities in the software of payment gateways and uses these gaps to hack into their core servers and divert money,” C.V. Anand, city police commissioner, stated in a press meet.