A boastful teenage hacker has been charged with orchestrating a break-in to the sports betting website DraftKings, which led to $600,000 being drained from hundreds of customer accounts. Joseph Garrison, 18, of Madison, Wis., is accused of using stolen log-in and password combinations he bought on the dark web to hack his way into 60,000 accounts on DraftKings last November. He then sold the information to others who used it to drain 1,600 customer accounts, federal prosecutors in Manhattan said.
This technique of hacking is known as credential stuffing, which works best when online users utilize the same password and log-in name across multiple sites. “Fraud is fun,” Garrison allegedly wrote in a text message to a co-conspirator, court documents said. “I’m addicted to seeing money in my account.” DraftKings is not named in the criminal complaint, but the company confirmed that some of its customers’ accounts had been compromised in the scheme and said that it had restored the money that had been stolen. “The safety and security of our customers’ personal and payment information is of paramount importance to DraftKings,” the company said in a statement. At the time of the hack, Garrison was already fa …
Article Attribution | Read More at Article Source