Teenage credit card hackers sentenced after vicious attack on UK business

Filed Under: Law & order

New Scotland YardTwo British members of the notorious GhostMarket online cybercrime forum have been sentenced for hacks that stole details of thousands of credit cards and forced an online hosting company to go out of business.

Prosecutors claimed that 19-year-old Zachary Woodham, who used the online handle "Colonel Root", chose the Punkyhosting webhosting firm to be his victim entirely at random, redirecting church webpages to pornographic content.

Ultimately the attacks, which took place between April and May 2009, put the Punkyhosting company out of business. Woodham then sent a taunting email to Punkyhosting gloating about his attack.

Following an investigation by the Metropolitan Police Service's Police Central e-Crime Unit (PCeU), authorities raided Woodham's Brighton home, seizing computer equipment. They also arrested Woodham's 18-year-old accomplice Louis Tobenhouse.

Police found evidence that the pair had stolen thousands of credit card details, and had targeted online gambling firms.

Woodham used some of the stolen cards details to pay for access to a number of premium rate chat lines which he owned, effectively laundering the money which he then paid into his own bank account.

In addition, the pair are said to have posted tutorials on the underground GhostMarket website that explained how to commit fraud and how to hack into company websites.

According to a police press release, Tobenhouse said "I will never get a job in IT now" when he was arrested.

Passing sentence, Judge Jeremy Donne at Southwark Crown Court said the crimes were so serious that if Woodham had been over 21 years old, he could have expected a three-year prison sentence.

However, the defendants' youth, their plans for further education, and the fact that they had entered guilty pleas, played to their favour.

Tobenhouse was sentenced to 400 hours of unpaid community work, and Woodham, who is now studying law at Sussex University, received a suspended prison sentence of 18 months imprisonment and a 360 hour spell of community service.

Woodham and Tobenhouse clearly had computing skills, but they chose to abuse them causing distress and financial loss for their innocent victims. The PCeU should be applauded for investigating this case, and bringing the culprits to justice.

And other youngsters considering a career in cybercrime should think carefully about just what might happen to them if they are caught by the computer cops.

, , , , ,

You might like

4 Responses to Teenage credit card hackers sentenced after vicious attack on UK business

  1. Dave Chetwynd · 1065 days ago

    "And other youngsters considering a career in cybercrime should think carefully about just what might happen to them if they are caught by the computer cops"
    To put it bluntly bugger all happened really....what about taking all the cash that they owned?. The UK justice system is a joke geared more to the "rights" of the criminal than the victim.

    • Andrew · 1064 days ago

      yep, even if they were 21, a 3 year prison sentence. i think they should have paid back the money and then some. also, to lose all rights to computers. we are entering in a very bad and dangerous world. the digital world is going to be rich hackers. and everyone else will be dirt poor. also it seems that no matter how strong your security is, there will be someone to hack it.

  2. dvsjr · 1065 days ago

    I agree with Dave. This is comical. Forced a business to close? Someone's dream of a business ended, employees out of work. Church pages sent to porn sites. Then credit card fraud, money laundering, and tutoring others and the response is a suspended sentence? He was making money laundering stolen credit cards. Did anyone think his comment about not getting a job in IT was even serious? What a joke. Such a huge message to ghe entire world. Cybercrime (for lack of a better term) is not taken seriously.

  3. Bill · 1064 days ago

    Fraud, extortion, theft, and all sorts of cyber crimes and they hasrdly get a smack on the wrist? Their punishment should have been a whole lot harsher than that. More like AT LEAST 10 years a peice and thousands in finds not to mention Woodham who's taking law should be expelled for good and NEVER allowed a career in law. Hackers should be dealt with more severely than they are.

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

About the author

Graham Cluley is an award-winning security blogger, and veteran of the anti-virus industry having worked for a number of security companies since the early 1990s. Now an independent security analyst, he regularly makes media appearances and gives computer security presentations. Send Graham an email, subscribe to his updates on Facebook, follow him on Twitter and App.net, and circle him on Google Plus for regular updates.