Internet mega-hacker 'lived large'

News in pictures
News in pictures
On Facebook
Life & Style blogs

HIV orphans in Thailand prepare for the future

In Baan Gerda, a community for HIV infected or affected youngsters in Northern Thailand, a group of ...

Online House Hunter: England’s most romantic places

Our Online House Hunter goes in search of romance this Valentine's Day...

Online House Hunter: Rugby – a Dickens of a town

Charles Dickens didn't think much of the railway town of Rugby in Warwickshire, calling it Mugby. Bu...

Nestled near a row of sultry, silvery-green palm trees and a 62-metre-long infinity pool, room 1508 at the National Hotel on South Beach is a portrait of Art Deco luxury.

It is also where, on May 7, 2008, federal agents seized two computers, $22,000 in cash and a Glock 9 gun from a man known on the internet as "soupnazi."

His real name is Albert Gonzalez, and he was with his girlfriend when federal agents arrived. Just as the setting was not run-of-the-mill, neither was the arrest. Gonzalez was charged with hacking into business computer networks and stealing credit and debit card accounts - and in an embarrassing twist, he had once been an informant for the US Secret Service.

This week, Gonzalez, 28, was indicted in New Jersey on more federal charges. Now the biggest credit card hacks of the decade - totalling 170 million accounts - have been pinned on Gonzalez.

Industry analysts marvelled at the scope of the operation - which Gonzalez allegedly dubbed Get Rich or Die Tryin'. One compared it to a hackers' version of the 1980s gangster movie Scarface.

"Albert Gonzalez is definitely the Tony Montana of credit card theft," said Sean Arries, a computer security expert at the Miami-based internet technology company Terremark.

Gonzalez has been in custody since his 2008 arrest in Miami Beach. He awaits federal trials in New York and Massachusetts, along with the New Jersey charges. If convicted he faces life in prison.

Gonzalez's lawyer, Rene Palomino Jr., wouldn't address the charges in detail, saying that the case is in a "very delicate stage" and that Gonzalez is trying to resolve it.

The attorney said Gonzalez and federal prosecutors were close to reaching a plea deal in the New York and Massachusetts cases this week, before the New Jersey indictment was added.

People who know Gonzalez say he is a nerdy, shy man who got mixed up in a shadowy world.

"Albert is not a mean-spirited individual, he desires no physical harm on anybody and he wouldn't hurt a fly," said Palomino, who first met his client when Gonzalez was an 8-year-old altar boy. "He's really not a bad guy. He just got way in over his head."

Gonzalez's father, Alberto, came to the US from Cuba on a handmade raft in the 1970s, Palomino said. The elder Gonzalez, who was a landscaper, got married and had a daughter before Albert was born in June 1981. The family put down roots in a modest, tan stucco home bought for $54,000 in a working-class enclave southwest of Miami's downtown.

"As a little kid, he was nice, we used to play hide-and-go seek," said neighbour Vanessa Pedrianes, 25. "When he got older, he was a little bit nerdier than the other kids. He was really smart."

Gonzalez's parents bought him a computer when he was 8, said Palomino, who was in charge of Gonzalez's Lutheran youth group. When the computer got a virus, Palomino said, the boy was so angry that he set out to learn everything about his machine.

"The kid is a self-taught genius," Palomino said. "Albert never had a normal childhood. He had no friends. His best friend was his computer. He would spend hours on the computer."

Gonzalez's talent got him in trouble in 1998, when the FBI and local police descended on his high school to investigate whether he had used the computers in the library to hack into Indian government servers and left offensive messages. It's unclear how the matter was resolved.

The boy didn't go to college. In 1999, he was charged with marijuana possession, though the matter was dismissed, and his computer savvy allowed him to get a job at a New Jersey firm, Palomino said. He didn't elaborate on what the position was.

It's unclear what transpired between the time Gonzalez got that job and his first federal arrest. In 2003, Gonzalez was arrested for hacking but not charged because authorities said he became an informant, helping the Secret Service hunt other hackers.

Palomino said Gonzalez should have gotten therapy then for what he says was a computer "addiction" - but that authorities used him like a machine to ferret out hackers.

Yet over the next five years, authorities said, Gonzalez continued to hack into the computer systems of Fortune 500 companies even while providing assistance to the government. A judge allowed him to move from New Jersey back to Florida in 2004, and court documents alleged that Gonzalez hacked into the national restaurant chain Dave & Buster's.

He lived lavishly from selling the data he stole, court records show. Gonzalez threw a $75,000 birthday party for himself, complained that he had to count $340,000 in 20-dollar bills by hand because his money counter broke and considered investing in a nightclub.

In 2005, Gonzalez bought a one-bedroom condo for $118,000 near his parents, in a squat, three-story building populated with retirees and recent immigrants. Whether Gonzalez actually lived there is a mystery - no one in the building remembers seeing him.

Around that time, federal agents said, Gonzalez devised a sophisticated attack to penetrate computer networks, steal credit and debit card data, and send that information to computer servers in California, Illinois, Latvia, the Netherlands and Ukraine.

The Justice Department said Gonzalez and others used that attack to mine companies' computers for approximately 40 million credit card numbers. At the time, that was believed to be the biggest such theft ever, and punctured the electronic defences of such retailers as T.J. Maxx, Barnes & Noble, Sports Authority and OfficeMax.

Prosecutors allege Gonzalez was the ringleader of the hackers in that case.

One of their techniques apparently involved "wardriving," or cruising through different areas with a laptop computer and looking for retailers' accessible wireless internet signals.

Once they located a vulnerable network, the hackers installed "sniffer programs" that captured credit and debit card numbers as they moved through a retailer's processing computers - then tried to sell the data.

In the latest indictment, authorities say Gonzalez and two Russian conspirators used a different technique to hack into corporate networks and secretly place "malware," or malicious software, that would allow them backdoor access to the networks to steal data later.

James Lewis, a senior fellow at the Centre for Strategic and International Studies, points out that if Gonzalez's co-defendants are in or near Russia, where capturing or extraditing them is difficult, he is the only one of them likely to face trial.

"It's relatively common in these crimes for the masterminds to live overseas and have a partner in the United States," said Lewis. "At the end of the day, Gonzalez was the bagman."

Independent Comment
blog comments powered by Disqus
Career Services

Day In a Page

No secularism please, we're British

No secularism please, we're British

Arguments about the role of religion in national life have recently acquired a new urgency
Harold Tillman: 'Chinese tourists can save the high street – if we let them'

Harold Tillman interview

'Chinese tourists can save the high street – if we let them'
Working as a jail torturer ruined my life

Working as a jail torturer ruined my life

Meet the former soldier who has joined the political prisoners he tortured in Turkey's Mamak prison by suing the generals who led a regime of terror
The local high street jet shop

The local high street jet shop

Got a spare $50m and can't stand the queues at Heathrow? Get yourself down to London's first private plane dealership
Do you like your doctor? It could be the death of you

Do you like your doctor?

It could be the death of you...
The mysterious affair of how Agatha Christie is teaching foreigners English

How Agatha Christie is teaching foreigners English

Twenty of the author's novels have been adapted and presented with learning notes and a CD
Six Grammys, five years off: Adele puts love before career

Six Grammys, five years off

Adele puts love before career
The 10 Best binoculars

The 10 Best binoculars

From no-frills to bins with digital cameras
Milan for £300

Milan for £300?

A cultural family holiday - on a budget - to Italy's most stylish city
'Black-hole' resorts: Turn up, tune out, log off

'Black-hole' resorts

Turn up, tune out, log off
New Arsenal face an old question of credibility in San Siro

New Arsenal face an old question of credibility in San Siro

Remodelled since winning in Milan in 2008, for all their consistency – and prize-money – Wenger's side are yet to claim a European title
James Lawton: This prodigal son deserves no forgiveness

James Lawton: This prodigal son deserves no forgiveness

City would be putting their desire to win title ahead of morals if Tevez plays for them
Mark Cavendish: Is Olympic gold at end of the rainbow?

Mark Cavendish interview

Is Olympic gold at end of the rainbow?
Apple admits it has a human rights problem

Apple admits it has a human rights problem

After years of complaints and workers' suicides in China the technology giant faces up to the human cost of its gadgets
Peter Moore: 'I feel guilty I'm the only one alive'

Peter Moore interview

'I feel guilty I'm the only one alive'