DataBreaches.Net

Menu
  • About
  • Breach Notification Laws
  • Privacy Policy
  • Transparency Report
Menu

Two Romanian citizens extradited to Atlanta to face cyber and fraud charges in connection with “vishing and smishing” scheme

Posted on May 5, 2018 by Dissent

From the government’s press release:

ATLANTA – Two international computer hackers, Teodor Laurentiu Costea and Robert Codrut Dumitrescu, were extradited from Romania and arraigned on federal charges of wire fraud conspiracy, wire fraud, computer fraud and abuse, and aggravated identity theft.  A federal grand jury returned the 31-count superseding indictment on August 16, 2017.  Cosmin Draghici, another co-defendant, is in custody in Romania awaiting extradition to the U.S.

“While in Romania, the defendants allegedly targeted victims throughout the U.S., including in the Northern District of Georgia, stealing personal information and possibly causing millions of dollars in losses,” said U. S. Attorney Byung J. “BJay” Pak. “These extraditions send a strong warning to cybercriminals and fraudsters worldwide, that we, along with our law enforcement partners, will work tirelessly to bring you to justice.”

“Our message to the victims of cyber fraud is that the FBI won’t let geographic boundaries stop us from pursuing and prosecuting the persons who cause them tremendous financial pain,” said David J. LeValley, Special Agent in Charge of FBI Atlanta. “Our message to the perpetrators of these crimes is that cybercriminals cannot hide in the shadows of the internet. We will identify them and bring them to justice.”

According to U.S. Attorney Pak, the charges, and other information presented in court: From approximately October 2011 until February 2014, Costea and Dumitrescu resided in Ploiesti, Romania.  An investigation revealed that Costea and Dumitrescu allegedly identified vulnerable computers in the U.S., and installed interactive voice response software that would automatically interact with call recipients.  In addition, the defendants allegedly utilized computers in the Atlanta area to install software to initiate thousands of automated telephone calls and text messages to victims in Atlanta and around the country. The messages purported to be from a financial institution and directed victims to call a telephone number due to a problem with their respective financial account.

When victims called the telephone number, they were prompted by the interactive voice response software to enter their bank account numbers, PINs, and full or partial Social Security numbers. The stolen account numbers were stored on the compromised computers and accessed by Costea and Dumitrescu, who then allegedly sold or used the fraudulently obtained information with the assistance of Draghici.

At the time of his arrest in Romania, Costea possessed 36,051 fraudulently obtained financial account numbers. The financial losses from the defendants’ scheme are estimated to be over $18 million.

Teodor Laurentiu Costea, 41, Robert Codrut Dumitrescu, 40, and Cosmin Draghici, 28 are all from Ploiesti, Romania. The charges result from the defendants’ alleged “vishing” and “smishing” attacks from Romania. “Vishing” is a type of phishing scheme that communicates a phishing message, that is, a message that purports to be from a legitimate source, in this case the victims’ banks, through a voice recording. “Smishing” is similar to “vishing,” but communicates a phishing message through text messages.

Members of the public are reminded that the indictment only contains charges.  The defendants are presumed innocent of the charges and it will be the government’s burden to prove the defendants’ guilt beyond a reasonable doubt at trial.

This case is being investigated by the FBI.

Assistant U.S. Attorney Michael Herskowitz is prosecuting the case.

For further information please contact the U.S. Attorney’s Public Affairs Office at [email protected](link sends e-mail) or (404) 581-6016.  The Internet address for the U.S. Attorney’s Office for the Northern District of Georgia is http://www.justice.gov/usao-ndga.

Source: U.S. Attorney’s Office, Northern District of Georgia

Related posts:

  • National Health Care Fraud Takedown Results in 324 Defendants Charged in Connection with Over $14.6 Billion in Alleged Fraud
Category: ID TheftOf Note

Post navigation

← Banco Inter shares drop on reported data leak, fintech fears
FastHealth breach still first being disclosed to some clients’ patients →

Now more than ever

"Stand with Ukraine:" above raised hands. The illustration is in blue and yellow, the colors of Ukraine's flag.

Search

Browse by Categories

Recent Posts

  • India’s Max Financial says hacker accessed customer data from its insurance unit
  • Brazil’s central bank service provider hacked, $140M stolen
  • Iranian and Pro-Regime Cyberattacks Against Americans (2011-Present)
  • Nigerian National Pleads Guilty to International Fraud Scheme that Defrauded Elderly U.S. Victims
  • Nova Scotia Power Data Breach Exposed Information of 280,000 Customers
  • No need to hack when it’s leaking: Brandt Kettwick Defense edition
  • SK Telecom to be fined for late data breach report, ordered to waive cancellation fees, criminal investigation into them launched
  • Louis Vuitton Korea suffers cyberattack as customer data leaked
  • Hunters International to provide free decryptors for all victims as they shut down (2)
  • SEC and SolarWinds Seek Settlement in Securities Fraud Case

No, You Can’t Buy a Post or an Interview

This site does not accept sponsored posts or link-back arrangements. Inquiries about either are ignored.

And despite what some trolls may try to claim: DataBreaches has never accepted even one dime to interview or report on anyone. Nor will DataBreaches ever pay anyone for data or to interview them.

Want to Get Our RSS Feed?

Grab it here:

https://databreaches.net/feed/

RSS Recent Posts on PogoWasRight.org

  • German court awards Facebook user €5,000 for data protection violations
  • Record-Breaking $1.55M CCPA Settlement Against Health Information Website Publisher
  • Ninth Circuit Reviews Website Tracking Class Actions and the Reach of California’s Privacy Law
  • US healthcare offshoring: Navigating patient data privacy laws and regulations
  • Data breach reveals Catwatchful ‘stalkerware’ is spying on thousands of phones
  • Google Trackers: What You Can Actually Escape And What You Can’t
  • Oregon Amends Its Comprehensive Privacy Statute

Have a News Tip?

Email: Tips[at]DataBreaches.net

Signal: +1 516-776-7756

Contact Me

Email: info[at]databreaches.net

Mastodon: Infosec.Exchange/@PogoWasRight

Signal: +1 516-776-7756

DMCA Concern: dmca[at]databreaches.net
© 2009 – 2025 DataBreaches.net and DataBreaches LLC. All rights reserved.