Documents / FOIA release
This Central Intelligence Agency internal wiki page, titled Hacker Jargon and approved for release on 4 September 2018, is a glossary of terms and acronyms used by hackers and cyber criminals in underground forums. It defines terms such as BIN, botnets, carding, dumps, mules, phishing, ransomware, skimming and Track 1 and Track 2 data. Most entries relate to credit card fraud and identity theft. The page was last modified in February 2016, and it does not discuss UFOs or unidentified aerial phenomena.
(U//F090.) Hacker jargon - CIA Wiki l (b)(3) Approved for Release: 2018/09/04 C06765084 CVV2 - CVV2 stands for credit card security code. Visa, MasterCard, and Discover require this feature. It is a 3 digit number on the back of the card. DDoS - Acronym for Distributed Denial of Service Attack. The intent when conducting a DDOS attack is to shut down a targeted website, at least for a period of time, by flooding the network with an overflow of traffic. DLs - A slang term that stands for counterfeit or novelty driver's licenses. Downloads - Compromised hosts on which hackers can download their own code. Can be done through an exploit or botnet. Usually used to extract infonnation of value from the victim computer. Drop - An intermediary used to disguise the source of a transaction. A location to which goods or cash can be sent or referred to a bank account through which money can be moved. Dumps - A collection of stolen credit card data or stolen user credentials. Includes at least Track l data, but usually includes both Track l and Track 2 data. Usually dumps are in the form of .txtf1les and include a long list of credit card numbers, track data (if stolen from a data processing site), or phishing data (if a product of a phishing scheme). Dump checking - Using specific software or altematively encoding track data on plastic and using a point of sale tenninal to test whether the dump is approved or declined. This provides carders a higher sense of security for obtaining quality dumps from those who offer them and also a sense of security when doing in store carding. Full info(s) - Tenn used to describe obtaining addresses, phone numbers, social security numbers, PIN numbers, credit history reports and so on. Full Info(s) are synonymous with carders who wish to take over the identity of a person or to sell the identity of a person. Grassed - Cheated Grift - cheat, Swindle Holos - Slang for the word Holograms. Holograms are important for those who make counterfeit plastic credit cards to emulate an existing security feature. ICQ - An abbreviation for "I Seek You". ICQ is the most widely used instant messaging system for carders. Popular among Eastern Europeans in their Internet culture, it continues to be used for carding activity. IRC - An abbreviation for "Internet Relay Chat". IRC is a global system of servers through which users can conduct real-time text-based chat, exchange files, and interact in other ways. IDs - Slang for identification documents. Carders market a variety of IDs, including bills, diplomas, driver's licenses, passports, or anything that can be used as an identity document. iFrame exploit/click-by downloads Mailbombing - Spamming MSR (Magnetic Strip Reader) - Device that can be used for skimming payment card information and/or 2 of4 Approved for Release: 2018/09/04 C06765084 6/27/2018 2:18 P
Not linked to a story yet.
FOIA release, from the cia-readingroom collection. The PDF is mirrored here; the original link is above. 4 pages are in the text index: search them above, or from the library's search.