A person identified with the initials J.G., an 18-year-old hacker from Wisconsin, who allegedly stole over $600,000 from DraftKings giant by hacking into the online accounts of more than 1,000 registered players, has pleaded guilty to the charges brought to him.

J.G. allegedly stole the login and password information of over 1,600 DraftKings members and used the information to hack into over 60,000 accounts on the online sports betting platform in November 2022. 

“Fraud Is Fun”

As per information from federal prosecutors in Manhattan, the teenager has been accused of sending the stolen login information to other individuals who then made use of it to withdraw over $600,000 from around 1,600 accounts. 

The procedure, which is referred to as credential stuffing, was openly admitted by the 18-year-old who attempted to take cash out of other players’ accounts in an illegal manner. He transparently texted one of his co-conspirators saying “Fraud is fun,” according to official court documents, adding that he was “addicted to seeing money” in his account.

When investigators searched his home in February 2023, they allegedly discovered a series of programs that the teenager had used in credential stuffing.

The young man had apparently used more than 700 individualized files to set up a website used to launch the cyber-attacks on his computer. The device contained around 40 million password and username combinations, according to law enforcement representatives. 

DraftKings Says It Reimbursed All the Stolen Money

The investigation also found that the hacker had stolen more than $2.1 million prior to his 18th birthday, making around $15,000 per day between 2018 and 2021 alone.

He pled guilty to a count of conspiring to commit computer intrusion. The charge features a five-year in-prison maximum sentence. The alleged hacker will be sentenced at a later date. 

His case is prosecuted by the Southern District of New York’s Frauds and Cybercrime Unit. 

The prosecution is represented by assistant US attorneys Kevin Mead and Micah Fergenson.

The company has confirmed the hacking event but did not provide any names in the suit. 

DraftKings also reimbursed all the stolen money from customers, using a statement issued by a spokesperson to explain the safety and security of the personal and financial information of their customers “is of paramount importance” to them.  

The hacker was also charged with alleged swatting, which is the process of practice of making a hoax call to the emergency services. It is believed that the teenager paid people with Bitcoin to make fake bomb-threat phone calls to his high school because he was “bored” and eager to go home, according to court documents. 

Earlier in the week, DraftKings unveiled its new Progressive Parlay feature that will target the fantasy gaming market in an attempt to push back against the growing popularity of competing fantasy sports operators.

The news follows the operator’s launch during Maine’s first weekend of regulated sports betting via a partnership with Passamaquoddy Tribe and the publishing of its Q3 results showcasing strong performance. 

The post Hacker Accused of Stealing from DraftKings Customers Pleads Guilty appeared first on Keno Wizard.

Prosecutors said on Thursday that criminal charges have been brought against one Joseph Garrison who attempted and succeeded, along with his accomplices, to steal $600,000 from across 1,600 accounts as part of attacks launched on the popular sportsbook operators in November 2022.

A similar attack had already taken place that same month against FanDuel. However, FanDuel argued that it had been able to withstand the attack and no consumer was affected.

DraftKings Responds to Latest Development in Wake of Attacks

Commenting on this case, DraftKings issued a statement that was shared with media outlets, including CNBC, which did original reporting of the case. In that statement, DraftKings said that the safety of its customers was of paramount importance to the company, and added:

We worked with law enforcement in catching the alleged bad actor(s), and we want to thank the Department of Justice, including the FBI and U.S. Attorney, Southern District of New York, for their prompt and effective action.

DraftKings

DraftKings has also confirmed that funds to the impacted users were restored. Investigators though were alerted and a chase for the culprits began. Garrison’s home was visited by authorities on February 23, with police executing a search warrant and finding a number of cell and computer devices that, upon investigation, were determined to have been used as the means of both perpetrating the attack and communication with co-conspirators.

“Fraud Is So Fun”

The case against Garrison is now building up. If he is found guilty of the litany of charges he faces, amongst which, a conspiracy to commit computer intrusions, unauthorized access to a protected computer to further intended fraud, unauthorized access to a protected computer, wire fraud and aggravated identity theft, and wire fraud conspiracy, he may face up to 20 years of prison time.

These attacks come in the context of increasing interest in the sports gambling sector across the United States, which makes it all the more important for companies to ensure that they have impeccable security measures in place. In one of the images obtained from Garrison’s computer, the defendant says that “fraud is so fun.”

The post Criminal Charges Brought Against DraftKings Hacker appeared first on Keno Wizard.