A Turkish man alleged to have masterminded the theft of more than $55m (£39m) has pleaded guilty in a US court. Ercan Findikoglu is believed to have co-ordinated the attacks, which used mules to withdraw money from cash machines around the world. US prosecutors said hack attacks on three payment processing companies aided the widespread theft. The charges he faces carry a potential jail term of more than 50 years. The gang won access to computer networks let them inflate balances and remove withdrawal limits on pre-paid debit cards. Copied cards were then used to withdraw money via cash machines in a series of co-ordinated operations carried out between 2010 and 2013. In one attack in February 2013, the gang of mules working in New York withdrew more than $2.4m from 3,000 cash machines in an 11-hour period, said US prosecutors. One operation by the gang went after cards issued by JP Morgan Chase that helped the American Red Cross raise money for disaster relief. Findikoglu pleaded guilty to several different charges including "computer intrusion conspiracy" for leading the hacking spree. "By hacking into the computer networks of global financial institutions, the defendant and his co-conspirators were able to wreak havoc with the worldwide financial system by simultaneously withdrawing tens of millions of dollars,'' said US attorney Robert Capers in a statement. The charges faced by Findikoglu mean he could face a 50-year jail term. However, US prosecutors said a plea deal reached with him would mean he was incarcerated for between 11 and 15 years. He will be sentenced on 12 July. Findikoglu was caught and arrested at Frankfurt airport in 2013, and fought extradition to the US for more than 18 months.
Turkish hacker, Ercan Findikoglu, pleaded guilty to masterminding the theft of over $55m in cyber attacks on banks and could face over that day in prison for his part in the scheme. He is believed to have coordinated the attacks on three payment processing companies, before using mules to withdraw money from ATMs worldwide. Those involved targeted the companies and changed admin privileges, which allowed them to inflate bank balances and remove the withdrawal limits on pre-paid debit cards. Copied cards were then used to withdraw money from ATMs. The attacks took place between 2010 and 2013 and in one 11-hour period, a gang of mules operating in New York withdrew over $2.4m from 3,000 ATMs; the wider operation 50 years spread across 24 countries, involved 36,000 transactions and netted $40m.