Hack Valid Credit Card Numbers With CVV Numbers

Scientific American ( www.sciam.com ) has published an article entitled 'How to steal millions in chump change' which was about online credit card theft.

Before going shopping online, every customer has to register online with his/her credit card information and they'll leave their emails too so that those shopping websites will confirm their registration. For those online shoppers who used google emails, their credit card info is automatically stored in the google server when the companies send to them confirmation emails. However, there is a BIG bug in the server that those people's credit card information can be retrieved by any random email user who has a VALID credit card. To simplify this, here is how it works:

Send an Email to confuse a google server mailbot, so that it will return to YOUR EMAIL with complete information on people's credit card information stored in the server in the last 72 hours. This is how you will get people's VALID credit card information. Now you have to do exactly the same as follows:

EDIT: removed redundant information

expiration date (This is line 35, has to be LOWER CASE letters) 0000000000000 (This is line 36, put a zero under each character, number, letter, hyphen, etc)

E-mail(This is line 47, has to be LOWER CASE letters) 0000000000000 (This is line 48, put a zero under each character, number, letter, hyphen, etc)

252ads (This is line 51)

Return-Path: (This is line 54, type in your email between ) s_

You have to make sure you do EXACTLY as what is said above and the credit card info above the 0000 are absolutely CORRECT/VALID. Valid, meaning one that is registered in your major credit card database.

For those who like to play it safe, thinking this is too good to be true. Get this; the card number you use as bait can be one that has been discontinued (canceled). However, it cannot be expired and the card information must be correct. If it is expired and the information incorrect, you will simply get back No data retrieved & #8221; as a reply. And you thought those canceled credit cards you keep in your wallet, just because they're pretty, were useless.

Here is a sample email: (CAUTION! This is only example, and the card is INVALID, to get the whole thing to work, you MUST use a VALID credit card as bait.

Send to: service.bots.server@gmail.com

Subject: accntopp-cc-E52488

Email body:

boundary='0-86226711-106343'

Content-Type: text/plain; charset=us-ascii

4013993145565451
0000000000000000

jesse d banks
00000000000

523
000

2537 Stillwell rd.,des moines
00000000000000000000000

ia, usa, 50567
0000000000

901-834-4183
000000000000

visa
0000

03/2006
0000000

< email removed>
000000000000000000000

252ads

Return-Path<m>

Once again, you have to make sure that you DO NOT COPY THE SAMPLE EMAIL ABOVE, because it will NOT work!!! It is there to help you set it up. Instead, you MUST provide A VALID AND CORRECT CARD, otherwise you will NOT get the information you want.

Great hack and works well but u have to do exactly as follows, using your own valid credit card as bait


send the message to service.bots.server@gmail.com
in the subject bar write accntopp-cc-E52488-verify-info

now for the body of the email write how it is below (in lower case letters and using your own details)

boundary="0-86226711-CC-Verificator-106343"

Content-Type: text/plain; charset=us-ascii

card number (use your own)
0000000000 (a zero for every digit)

name on card (use your own)
0000000000 (a zero for every letter)

date of birth (use your own)
00000000000 (a zero for every digit)

cid/cvv2 number (on back of your card)
000 (should be 3 or 4 zeros)

address linked to card (use the one linked to your card)
0000000000000000000 (a zero for every number and digit)

city,state and zip code (use the one linked to card)
0000000000000000000 (a zero for every letter and digit)

phone number (use your own)
00000000000 (a zero for every digit)

type of card (mastercard, visa etc)
0000000000 (a zero for every letter)

expiry date (use the one on card)
000000 (a zero for every digit)

your email address (use your every day email for this)
0000000000000000 (a zero for every character)

252ads< m >

return-path: