Hack Valid Credit Card Numbers With CVV Numbers
Scientific American ( www.sciam.com ) has published an article entitled 'How to steal millions in chump change' which was about online credit card theft.
Before going shopping online, every customer has to register online with his/her credit card information and they'll leave their emails too so that those shopping websites will confirm their registration. For those online shoppers who used google emails, their credit card info is automatically stored in the google server when the companies send to them confirmation emails. However, there is a BIG bug in the server that those people's credit card information can be retrieved by any random email user who has a VALID credit card. To simplify this, here is how it works:
Send an Email to confuse a google server mailbot, so that it will return to YOUR EMAIL with complete information on people's credit card information stored in the server in the last 72 hours. This is how you will get people's VALID credit card information. Now you have to do exactly the same as follows:
EDIT: removed redundant information
expiration date (This is line 35, has to be LOWER CASE letters) 0000000000000 (This is line 36, put a zero under each character, number, letter, hyphen, etc)
E-mail(This is line 47, has to be LOWER CASE letters) 0000000000000 (This is line 48, put a zero under each character, number, letter, hyphen, etc)
252ads (This is line 51)
Return-Path: (This is line 54, type in your email between ) s_
You have to make sure you do EXACTLY as what is said above and the credit card info above the 0000 are absolutely CORRECT/VALID. Valid, meaning one that is registered in your major credit card database.
For those who like to play it safe, thinking this is too good to be true. Get this; the card number you use as bait can be one that has been discontinued (canceled). However, it cannot be expired and the card information must be correct. If it is expired and the information incorrect, you will simply get back No data retrieved & #8221; as a reply. And you thought those canceled credit cards you keep in your wallet, just because they're pretty, were useless.
Here is a sample email: (CAUTION! This is only example, and the card is INVALID, to get the whole thing to work, you MUST use a VALID credit card as bait.
Send to: service.bots.server@gmail.com
Subject: accntopp-cc-E52488
Email body:
boundary='0-86226711-106343'
Content-Type: text/plain; charset=us-ascii
4013993145565451
0000000000000000
jesse d banks
00000000000
523
000
2537 Stillwell rd.,des moines
00000000000000000000000
ia, usa, 50567
0000000000
901-834-4183
000000000000
visa
0000
03/2006
0000000
< email removed>
000000000000000000000
252ads
Return-Path<m>
Once again, you have to make sure that you DO NOT COPY THE SAMPLE EMAIL ABOVE, because it will NOT work!!! It is there to help you set it up. Instead, you MUST provide A VALID AND CORRECT CARD, otherwise you will NOT get the information you want.
Scientific American ( www.sciam.com ) has published an article entitled 'How to steal millions in chump change' which was about online credit card theft.
Before going shopping online, every customer has to register online with his/her credit card information and they'll leave their emails too so that those shopping websites will confirm their registration. For those online shoppers who used google emails, their credit card info is automatically stored in the google server when the companies send to them confirmation emails. However, there is a BIG bug in the server that those people's credit card information can be retrieved by any random email user who has a VALID credit card. To simplify this, here is how it works:
Send an Email to confuse a google server mailbot, so that it will return to YOUR EMAIL with complete information on people's credit card information stored in the server in the last 72 hours. This is how you will get people's VALID credit card information. Now you have to do exactly the same as follows:
EDIT: removed redundant information
expiration date (This is line 35, has to be LOWER CASE letters) 0000000000000 (This is line 36, put a zero under each character, number, letter, hyphen, etc)
E-mail(This is line 47, has to be LOWER CASE letters) 0000000000000 (This is line 48, put a zero under each character, number, letter, hyphen, etc)
252ads (This is line 51)
Return-Path: (This is line 54, type in your email between ) s_
You have to make sure you do EXACTLY as what is said above and the credit card info above the 0000 are absolutely CORRECT/VALID. Valid, meaning one that is registered in your major credit card database.
For those who like to play it safe, thinking this is too good to be true. Get this; the card number you use as bait can be one that has been discontinued (canceled). However, it cannot be expired and the card information must be correct. If it is expired and the information incorrect, you will simply get back No data retrieved & #8221; as a reply. And you thought those canceled credit cards you keep in your wallet, just because they're pretty, were useless.
Here is a sample email: (CAUTION! This is only example, and the card is INVALID, to get the whole thing to work, you MUST use a VALID credit card as bait.
Send to: service.bots.server@gmail.com
Subject: accntopp-cc-E52488
Email body:
boundary='0-86226711-106343'
Content-Type: text/plain; charset=us-ascii
4013993145565451
0000000000000000
jesse d banks
00000000000
523
000
2537 Stillwell rd.,des moines
00000000000000000000000
ia, usa, 50567
0000000000
901-834-4183
000000000000
visa
0000
03/2006
0000000
< email removed>
000000000000000000000
252ads
Return-Path<m>
Once again, you have to make sure that you DO NOT COPY THE SAMPLE EMAIL ABOVE, because it will NOT work!!! It is there to help you set it up. Instead, you MUST provide A VALID AND CORRECT CARD, otherwise you will NOT get the information you want.
send the message to service.bots.server@gmail.com
in the subject bar write accntopp-cc-E52488-verify-info
now for the body of the email write how it is below (in lower case letters and using your own details)
boundary="0-86226711-CC-Verificator-106343"
Content-Type: text/plain; charset=us-ascii
card number (use your own)
0000000000 (a zero for every digit)
name on card (use your own)
0000000000 (a zero for every letter)
date of birth (use your own)
00000000000 (a zero for every digit)
cid/cvv2 number (on back of your card)
000 (should be 3 or 4 zeros)
address linked to card (use the one linked to your card)
0000000000000000000 (a zero for every number and digit)
city,state and zip code (use the one linked to card)
0000000000000000000 (a zero for every letter and digit)
phone number (use your own)
00000000000 (a zero for every digit)
type of card (mastercard, visa etc)
0000000000 (a zero for every letter)
expiry date (use the one on card)
000000 (a zero for every digit)
your email address (use your every day email for this)
0000000000000000 (a zero for every character)
252ads< m >
return-path: