Romanian authorities have arrested a man suspected of stealing more than $3 million through a series of computer crimes that included phishing attacks targeting eBay employees, The Register reports.
Liviu Mihail Concioiu allegedly masterminded two phishing attacks targeting eBay employees. Although it is unknown how many eBay workers fell for the ploy, a computer-forensics expert said it appears the alleged spear phisher bagged credentials for six eBay employees.
Using the stolen logins, Concioiu was able to gain access to an eBay database that had information about users of the popular auction site. Using the information he found there, Concioiu allegedly tried out a third phishing attack that targeted specific eBay users.
An eBay spokesperson issue the following statement:
“The Romanian authorities' arrest of Liviu Mihail Concioiu and his conspirators is a great victory in the global fight against Internet fraud. eBay's internal investigations team has been working closely with Romanian and U.S. law enforcement on this investigation since May of 2009, and we are confident that the evidence will link these individuals to a series of online attacks and organized criminal activity.“
Concioiu is also suspected of creating bogus ATM cards for Italian banks and withdrawing more than 300,000 euros, a scheme in which he pocketed about $3 million.