NBI: ‘Hacker’ led victims to fake bank web site
A 22-year-old student from Isabela province was arrested for allegedly hacking bank accounts and withdrawing huge sums of money which enabled him to buy a car, motorbikes and high-end gadgets.
The National Bureau of Investigation (NBI) has filed a complaint at the Department of Justice in Manila against Christian Ian Salvador, a computer science student of Isabela State University-Cauayan Campus.
According to the bureau’s cybercrime division, the subject illegally obtained sensitive information, such as the user names, passwords, and credit card details of his victims.
Salvador allegedly sent out emails to bank clients asking them about their personal data, making it appear that the emails came from their banks.
“In the emails, Salvador’s victims were informed that due to security reasons, the bank was performing an update of its online banking database and therefore customers need to update their bank information by clicking on a link. The link then would take the customers to a fake web site where they would input their online banking details as well as their credit card information,” the bureau said in a statement on Wednesday.
The fake web site created by Salvador “look(ed) almost exactly like the legitimate website of the bank,” it noted.
Article continues after this advertisement“Once the customers put in their personal information, online banking information and credit card details, it would automatically be collated and sent to the Salvador’s designated email address.”
Article continues after this advertisement“Through this illegal activity, (Salvador) was able to purchase a brand-new Toyota Vios, Honda Beat and Yamaha Mio motorcycles, and several high-end gadgets,’’ the NBI said.
“He also sold the phished information to third parties over the internet,” the bureau said.
Armed with a search warrant issued by the Manila Regional Trial Court, NBI agents on March 3 raided Salvador’s Cauayan City residence, where he was arrested for violation of the Cybercrime Prevention Act, the Access Device Regulation Act, and the Data Privacy Act.
