Cybercrime

US Announces Takedown of Card-Checking Service, Charges Against Russian Operator

The US announces charges against Denis Gennadievich Kulkov, the creator and operator of card-checking platform Try2Check since 2005 until it was taken down this week.

Ionut Arghire

May 4, 2023

The US Department of Justice this week announced the takedown of card-checking platform ‘Try2Check’ and charges against its Russian administrator.

The individual, Denis Gennadievich Kulkov, 43, created the platform in 2005 and operated it until the takedown. The US is offering a $10 million reward for information leading to his capture.

According to the indictment (PDF), Try2Check was created as a service for cybercriminals who sold and purchased stolen credit cards in bulk, allowing them to check whether the cards were valid and active. Cybercriminals then used the results to advertise the valid credit card numbers they had for sale.

Authorities estimate that the platform was processing tens of millions of card numbers on a yearly basis, enabling the illicit credit card trade through major card shops. The platform charged $0.20 per check, in Bitcoin.

Also known as Try2Services, Try2Check relied on unauthorized access to a US-based payment processing company’s servers to perform the checks, the indictment alleges.

The US took the card-checking platform’s websites offline this week, working together with German and Austrian authorities.

According to the indictment, Kulkov made over $18 million in Bitcoin, which he used to purchase luxury items, including a Ferrari. However, it is unclear how much he made from the scheme, as he also received proceeds through other payment systems.

Kulkov was charged with access device fraud, computer intrusion, and money laundering. If found guilty, he faces up to 20 years in prison.

Advertisement. Scroll to continue reading.

Written By Ionut Arghire

Ionut Arghire is an international correspondent for SecurityWeek.

Latest News

Click to comment

CIEM Chat: How to Reduce Cloud Identity Risk

March 26, 2024

Join the session as we discuss the challenges and best practices for cybersecurity leaders managing cloud identities.

Virtual Event: Ransomware Resilience & Recovery Summit

April 17, 2024

SecurityWeek’s Ransomware Resilience and Recovery Summit helps businesses to plan, prepare, and recover from a ransomware incident.

You Against the World: The Offenders Dilemma

Foreign attackers have many more toolsets at their disposal, so we need to make sure we’re selective about our modeling, preparation and how we assess and fortify ourselves. (Tom Eston)

Why Intelligence Sharing Is Vital to Building a Robust Collective Cyber Defense Program

With automated, detailed, contextualized threat intelligence, organizations can better anticipate malicious activity and utilize intelligence to speed detection around proven attacks. (Marc Solomon)

Know Your Audience When Speaking to Security Practitioners

How can security practitioners make sense of the vendor landscape and separate those who talk a good game from those who can execute, perform, and solve real problems for enterprises? (Joshua Goldfarb)

Cybersecurity Mesh: Overcoming Data Security Overload

A significant cybersecurity challenge arises from managing the immense volume of data generated by numerous IT security tools, leading organizations into a reactive rather than proactive approach. (Torsten George)

The OODA Loop: The Military Model That Speeds Up Cybersecurity Response

The OODA Loop can be used both by defenders and incident responders for a variety of use cases such as threat assessment, threat monitoring, and threat hunting. (Etay Maor)

Cybercrime

Comodo Forums Hacked via Recently Disclosed vBulletin Vulnerability

A recently disclosed vBulletin vulnerability, which had a zero-day status for roughly two days last week, was exploited in a hacker attack targeting the...

Eduard KovacsOctober 1, 2019