Teenage Hacker Pleads Guilty in $600,000 DraftKings Cyber Attack
Date: 2023-11-18 Author: Dima Zakharov Categories: EVENTS
Credential Stuffing Unleashed
The accused hacker, J.G., infiltrated DraftKings in November 2022, stealing login details of 1,600 members and utilizing this information to hack into a staggering 60,000 accounts. Employing a method known as credential stuffing, he openly shared stolen login details, resulting in the withdrawal of funds from around 1,600 accounts.
“Fraud Is Fun”
According to federal prosecutors, the teenager admitted to his actions, even texting a co-conspirator saying, “Fraud is fun” and expressing addiction to seeing money in his account. Investigations at his home in February 2023 revealed a cache of programs and 700 files used for credential stuffing.
DraftKings' Response
DraftKings confirmed the cyber attack but withheld specific names. The company promptly reimbursed all the stolen money, emphasizing the paramount importance of customer safety and financial security. The hacker, charged with conspiring to commit computer intrusion, faces a maximum five-year prison sentence.
Additional Charges
Aside from the cyber attack, the hacker faces charges related to swatting. Court documents reveal he allegedly paid individuals with Bitcoin to make hoax bomb-threat calls to his high school due to boredom, desiring an early dismissal.
Legal Proceedings
The Southern District of New York’s Frauds and Cybercrime Unit handles the case, with assistant US attorneys Kevin Mead and Micah Fergenson representing the prosecution. The sentencing is yet to be scheduled.
