Guest Valdimir Levin, often ranked among the top 10 greatest hackers, discusses the truth behind the notorious $10.7M Citibank hack. Journalists misrepresented Levin's skills, but anonymous hacker Arknoid sheds light on the story. They explore vulnerabilities in Citibank's BBS, collision of hackers, and the mastermind behind the hack.
The Citibank hack in the 1990s was not driven by financial gain, but rather by hackers seeking entertainment and free modem calls.
Citibank's lack of security measures and awareness allowed the hackers to freely navigate the network for several months without being detected.
Deep dives
Vladimir Levin: The Mystique of the First Online Bank Robber
Vladimir Levin, often hailed as the first online bank robber, gained notoriety for his hack of Citibank's network in the 1990s. However, the true story of Levin's hack has been distorted and sensationalized in the media. Contrary to the popular narrative, Levin was not a brilliant hacker with expertise in mathematics and biotechnology. In reality, he was part of a group of hackers that exploited vulnerabilities in Citibank's systems, accessed their IT network, and stole valuable information. The hack was not driven by a desire for financial gain, as the hackers deliberately avoided stealing money due to the logistical challenges. Instead, they used the network for entertainment purposes, enjoying free modem calls and exploring different networks. This episode delves into the details of the hack, shedding light on the low-tech methods employed by the hackers and the lack of security measures in place at Citibank.
Mapping Citibank's Vulnerabilities
The hackers who targeted Citibank in the 1990s were drawn to the network due to its unique structure and vulnerabilities. Citibank had its own X.25 network and a separate BBS (Bulletin Board System) that provided a gateway to SprintNet. By analyzing a scan of the SprintNet directory, the hackers were able to map out the network and identify the most sensitive parts, including the systems responsible for financial transactions. They exploited security loopholes in Citibank's terminal servers and routers, accessing accounts with default passwords and guest logins. The lack of security awareness within Citibank allowed the hackers to roam freely within the network for several months, conducting their activities undetected.
The $10.7 Million Hack and the Role of Vladimir Levin
While Vladimir Levin is often credited as the mastermind behind the Citibank hack, the true story reveals a different narrative. Levin was not a member of the hacker group that targeted Citibank. Instead, one of the researchers from the group sold the collective information to Levin for a mere $100. With the assistance of organized crime, Levin used Citibank's money transfer system to conduct fraudulent transactions amounting to $10.7 million. The FBI apprehended Levin, and he served three years in prison, reimbursing $240,000. The hackers behind the actual network breach, however, did not face legal consequences and went on to have successful careers in the field of information security.
Valdimir Levin is often presented as "the first online bank robber," and appeares on many lists of the "Top 10 Greatest Hackers." But a few veteran Russian hackers cliam that Levin's infamous hack had been mangled by the journlists who wrote about it. What's the truth behind the 1994 $10.7 million Citibank hack?...