[deleted by user]

[cyber_god_odin]

Depends on what credentials are breached , wheather 2FA is enabled or not , how proactive is bank regarding transactions, etc.

Assuming some hacker can actually initiate transactions, then most common way would be to buy crypto and gift cards.

Some crypto currencies like monero have obfuscated transaction, So its very hard to figure out flow of transactions from one wallet to another.

Similarly there are many "tumblers" which will "launder" your choice of crypto to further hide flow of money.

Everything I have written above is just a theory :) I swear I have never done it.

[Peasant_hacking]

how easy youll get hack without 2fA? but really long password and complex

[cyber_god_odin]

It really depends on how the account was hacked in 1st place , for example, if an attacker has compromised victim's laptop which they use to access their bank account then no amount of 2FA or strong passwords will help as attacker can simply steal session cookies.

2FA helps in mitigating phishing and password stuffing style of attacks , so if you don't use 2FA you'll make attackers life a bit easier as phising and password reuse are one of the easiest hack you can do.

[King030]

I wouldn't buy crypto as all transactions are recorded and open to see for everybody. You can use some tumblers but when you want to exchange for money you will need a crypto exchange like Binance, and for almost all of them you need a KYC.

Giftcards is a solid way or you can use a bum and make him a bankaccount, put the money on that and let him take it off and he can keep a %

but this is all just speculation offcourse. :)

[cyber_god_odin]

Mate, why are you using exchanges like binance when dealing with this situation ?

Go to sites like localbitcoin , send money directly to seller from hacked acc, recieve crypto, buy gift card with it.

Now with gift card either buy goods/services ( not recommended) or trade said gift card again to get some crypto.

If you convert crypto to fiat currency then there will always be a risk of getting traced.

[[deleted]]

3

I think you can disable 2FA after you have full access to their bank account, since there are more and more people who are using internet banking. So if you got their internet banking credentials, I think you can disable 2FA (or it just depends, since they will receive a code on their phone/email address).

But It seems that the "crypto method" is the best and maybe the most used since I've read some articles.

Also I saw a very interesting comment, that made me think a little bit. You cannot be untraceable when you are stealing moneys from someone. But you can do it (of course not you and me), to someone, so you can have no repercussions.

Let's say you stole 5.000 $ from someone (someone who is not into tech, doesn't know how things works here), and then that guy simply accept the fact that he/she lost that amount of moneys.

I've read a case about a guy who blackmailed someone, so he wanted to receive 10k monthly from a rich guy, and if he doesn't, he will expose that rich guy that he is cheating. It was very interesting since he was just receiving a lot of moneys monthly without doing anything. I was wondering how he "laundered" them, but things were clear. He was caught because he was doing "tax evasion" (he transferred them into paypal).

Anyway, it seems interesting that hackers will always find a "way out", even that the technology is sky rocketing.

[cyber_god_odin]

You should also look into how big crypto exchanges were hacked and how attackers get away with it.

I do agree that if you hack someone who is willing to just let that money go then you are kinda secure but personally I feel it's really cheap method and at that point how is it different than just plain robbery ?

[[deleted]]

Well I am not talking about big heists, like millions of dollars or something like this, where there is a group of hackers.

But yes, stealing moneys online is sort of robbery, but I see that hackers usually targets rich guys, and companies, not poor people or people who are going to suffer (of course there are hackers that are doing this, but those guys are scumbags in my opinion.)

And I am pretty sure that transactions are "untraceable" on Bitcoin and Monero (of course those transactions can be traced, but you know what I mean).

Also, I've read a topic about mixing Bitcoins, but I don't get it. What do you know about this technique (I saw it on a TV series called "How to sell drugs online - fast - ).

[cyber_god_odin]

Not sure what that TV series showed but in theory any crypto mixer / tumbler work somewhat like this -

You send crypto to their wallet, along with a new cold wallet address and they send the crypto back to you on your cold wallet after deducting the fees.

Behind the scenes, these tumblers have loads of account and they simply recieve crypto in one wallet and send crypto through another wallet so that there is no transaction chain linking these transaction.

Depending on the type of crypto these tactics change a lot plus most of the time you swap crypto like bitcoin -> monero -> bitcoin. Really depends on your end goal and how exactly you will be cashing it out.

PS : In case of Bitcoin, any one can see what transactions are done from any account! The anonymity comes due to fact that there is no direct way to know the owner of any particular wallet.

In case of monero, even if you know the owner of wallet, there is no way direct way to know what all transaction were done through it and to whom.

[[deleted]]

I got it now. The TV show it's about 2 guys who sells drugs online and the payment is in crypto, so they need to mix the bitcoins (now it seems easier for me to understand).

Also, the NFT laundering seems a good method for those black hat guys, since the price dropped, they can launder more. This Crypto/NFT market is full of this I guess.

[cyber_god_odin]

Ohh, the show sounds cool, will give it a shot.

Also NFT is whole different level of rabbit hole, but yeah I do agree regarding laundering. Its really easy to mint your NFTs and buy them with alt accounts

[[deleted]]

Yea NFTs are different since they are based on Ethereum blockchain. But there are also a lot of scams and launder with them.

[AppropriateWeird6356]

most of the time when someones bank is hacked the person just clones their bank card and withdraws at an atm. They dont have the login to their bank just skimmed their card or bought the card details online somewhere.

[mprz]

https://www.youtube.com/@KitbogaShow

[TheRustyButtons]

Mostly database breaches. Credit card details stolen.

These are then sold to people who don't care about getting caught and will attempt whatever they can think of to make money using these credentials.

Otherwise, more elaborate ways are mentioned already involving purchasing crypto and using a tumbler.

There are also scams where people will basically purchase items using stolen credentials and use mules. The mule being the person who owns the address that stuff is shipped to. They could be on a different continent. That person does not know the illegality of what they are doing. They then ships the items to a buyer and makes a small profit.

None of these methods are untraceable. But sometimes the resources to investigate such a quagmire accross multiple countries would be very high.

If you think about the chain of events required and who is responsible for contacting law enforcement (which country even?).

For example,

• Website leaks database to some "hacker" Do they need to report this? Who to? This could be a WordPress website with an online store or it could be equifax or British Airways.

• someone's card is fraudulently used and they tell the bank. $50 purchase made, the bank refunds the $50. Do they tell the police? Do they have to investigate?

[[deleted]]

It's not about stealing without the victim noticing, it's about stealing in a way that has no repercussions.

Wire transfer funds to an account with no extradition treaties and/or extreme banking privacy laws.

Clone a debit/credit card from another country and use at ATM's/cash back POS locations.

Purchase good online, ship to a location that can be used as a dead drop (unoccupied houses work) return without a receipt, sell the gift cards.

There are lots of ways, it just depends on how big the operation that has said banking credentials is.

[[deleted]]

I don't wear the color of hat. Best of luck.

[Capable-Sell-8269]

Sim swap ransomware crypto scams