Security Experts:

Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Tracking & Law Enforcement

Alleged Developers of Photobucket Hacking Tool Arrested

Law enforcement authorities in the United States on Friday indicted and arrested two individuals suspected of developing, marketing and selling a piece of software designed to enable unauthorized access to protected content stored on the image and video hosting website Photobucket.

Law enforcement authorities in the United States on Friday indicted and arrested two individuals suspected of developing, marketing and selling a piece of software designed to enable unauthorized access to protected content stored on the image and video hosting website Photobucket.

According to the indictment, Brandon Bourret, 39, of Colorado Springs, Colorado and Athanasios Andrianakis, 26, of Sunnyvale, California have been accused of conspiring to commit computer fraud and abuse, access device fraud, identification document fraud, and wire fraud.

Photobucket allows users to protect albums containing private content by marking them “private” or “password protected.” Bourret and Andrianakis are said to have developed a tool, dubbed “Photofucket,” that allowed them to access images and videos stored in private or password-protected albums.

The suspects allegedly used the application between July 12, 2012 and July 1, 2014 to circumvent Photobucket privacy mechanisms and access private images and videos. Authorities say Bourret and Andrianakis accessed password-protected albums by obtaining guest passwords. They used the guest passwords to access the protected information, and they also provided the guest passwords to customers of the Photofucket app.

Investigators obtained emails in which the suspects discussed the tool and ways of improving it. They also obtained details on money transfers made between the men, and payments made by their customers.

“Unauthorized access into a secure computer system is a serious federal crime,” said Special Agent in Charge Thomas Ravenelle for the Denver Division of the FBI. “The arrest of Brandon Bourret and his co-conspirator reflects the FBI’s commitment to investigate those who undertake activities such as this with the intent to harm a company and its customers.”

Bourret and Andrianakis face up to five years in prison and a $250,000 fine for the conspiracy charge, up to five years in prison and a $250,000 fine for the computer fraud charge, and up to ten years in prison and a $250,000 fine for each of the two access device fraud counts.

Related: Former US Govt Employee ‘Tried to Sell Nuclear Secrets’

Related: Canadian Hacker Arrested for Spying Through Webcams

Related: Alleged Creator of Svpeng Android Malware Arrested in Russia

Written By

Eduard Kovacs (@EduardKovacs) is a contributing editor at SecurityWeek. He worked as a high school IT teacher for two years before starting a career in journalism as Softpedia’s security news reporter. Eduard holds a bachelor’s degree in industrial informatics and a master’s degree in computer techniques applied in electrical engineering.

Click to comment

Expert Insights

Related Content

Cybercrime

The FBI dismantled the network of the prolific Hive ransomware gang and seized infrastructure in Los Angeles that was used for the operation.

Ransomware

The Hive ransomware website has been seized as part of an operation that involved law enforcement in 10 countries.

Ransomware

US government reminds the public that a reward of up to $10 million is offered for information on cybercriminals, including members of the Hive...

Cybercrime

The owner of China-based cryptocurrency exchange Bitzlato was arrested in Miami along with five associates in Europe

Cyberwarfare

Google Project Zero has disclosed the details of three Samsung phone vulnerabilities that have been exploited by a spyware vendor since when they still...

Cybercrime

A hacker who reportedly posed as the CEO of a financial institution claims to have obtained access to the more than 80,000-member database of...

Application Security

Virtualization technology giant Citrix on Tuesday scrambled out an emergency patch to cover a zero-day flaw in its networking product line and warned that...

Privacy

Employees of Chinese tech giant ByteDance improperly accessed data from social media platform TikTok to track journalists in a bid to identify the source...