Sent at midnight: The reason behind the credit card SMS messages that alarmed citizens has been revealed

The National Intelligence Organization (MİT) launched an investigation following SMS messages regarding credit card transaction notifications that reached numerous citizens on the night of June 7. Findings revealed that the messages, which began at night and continued until morning, contained notifications regarding high-amount transaction attempts on credit cards, as well as one-time passwords.

Upon the assessment that the incident was carried out as part of an organized cyber activity, relevant institutions took action under the coordination of MİT. A multi-faceted study covering technical, intelligence, financial, and operational dimensions was conducted.

CARD INFORMATION TESTED WITH AUTOMATED SOFTWARE

While it was assessed that the activity targeting financial security had the potential to affect a wide user base, simultaneous coordination was established between institutions.

As a result of technical examinations conducted by the Cyber Security Presidency (SGB) and financial analyses carried out by the Financial Crimes Investigation Board (MASAK), it was determined that a large number of credit card numbers were tested via automated software. It was established that automated SMS messages were sent to cardholders during the attempts made to check the validity of the card information.

Within the scope of intelligence work carried out by MİT, the digital infrastructures and operational methods used were uncovered. In line with the technical and intelligence data obtained, the identities of the suspects and the systems they used were identified, and the operation process was initiated.

OPERATION IN ISTANBUL AND KOCAELI

Within the scope of the investigation initiated by the Ankara Chief Public Prosecutor's Office, teams from the Ankara Provincial Gendarmerie Command's Cybercrime Combat Branch conducted simultaneous operations in Istanbul and Kocaeli.

As a result of the work carried out under the coordination of MİT, 3 suspects whose identities were determined were taken into custody.

NUMEROUS RECORDS FOUND IN DIGITAL MATERIALS

Initial examinations of the digital materials seized during the operations revealed digital traces related to software and activities assessed to have been used for the mass testing of credit card information.

Furthermore, data sets in which test records belonging to numerous credit cards were systematically classified were identified.

IP addresses, server logs, and other digital traces assessed to have been used in the incident were also examined by the Cyber Security Presidency. As a result of the work, a significant portion of the technical infrastructure used in the activities was uncovered, while the systems and digital connections used by the suspects were deciphered.

Authorities stated that no financial loss occurred within the scope of the incident, but that the method used is among those frequently resorted to in organized cybercrime activities.

News Source: İHA