Special virus for gas stations allowed to steal fuel on an industrial scale

22 January 2018

To disclose a fraudulent scheme managed by the FSB

One of the favorite motorists the conversation is underfilling at the pump. On this, as well as the fuel, it is possible to argue infinitely. The situation is complicated by the fact that in addition to the major network stations in the market there are a lot of "privateers", to control which is much more difficult. But it now appears that the problem affects the Federal network.

A new scheme opened by the FSB. According to authorities, dozens of gas stations owned by major oil companies, used a special virus which motorists receive less fuel. The difference between the paid amount and actually poured has averaged 3-7 %.

In conversation with journalists of "Rosbalt" a source in the Ministry said that this is one of the largest frauds in this sector uncovered FSB. "Giant Scam covered almost the whole South of Russia, a virus was discovered at dozens of gas stations in Stavropol Krai, Adygea Republic, Krasnodar Krai, Kalmykia, and some republics of the North Caucasus and so on. Was built a network for the theft of fuel from ordinary citizens — the owners of gas stations one of financial loss were not carried," — said the representative of the FSB.

The author of the malicious software appeared in Stavropol hacker Denis Zaev. He wrote several viruses that are unable to discover the service of monitoring of oil companies. It is reported that these programmes were complemented AT the gas station: they controlled dispensers, the system of cash accounting and total counters.

According to "Rosbalt", the virus worked as follows. At the beginning of each scheme employees zaparojec station under the guise of cleaning left empty one of the tanks. At the time of purchase by customer of fuel, the program was nedolovili him about 3-7 % of the total purchased fuel that was shipped in pre-prepared tank. All counters and monitoring program displays false information that allegedly bought all the fuel left in the tank of the motorist.

After filling the tank the fuel is to dispensed to customers, with the virus removed data on the implementation of the system of cash accounting. Then the revenue from such operations was divided between the participants in the fraud.

Denis Zaev offered your brilliant virus guiding station staff. He not only sold, but also participated in the fraudulent scheme of theft of fuel, has received a share of the stolen money. According to the FSB, illegal revenue amounted to hundreds of millions of rubles.

Apparently, this scheme was on the money for quite a long time. Why is it not immediately revealed? The thing is that nobody approached the authorities with the appropriate application. Victims formally was not: simple motorists in most cases did not notice the incomplete filling. But even if someone from the police conducted a test purchase and got the station staff on the Scam, the value of the stolen two-three liters of gasoline from one machine not be pulled into a criminal case. At the same time, gas station owners no losses is not carried at all: in fact did not steal from them, and those who refueled.

At the moment, the hacker arrested, the court chose a measure of restraint in form of detention. He was charged under articles of the criminal code of the Russian Federation 159 (fraud in large scale) and 273 (creation and use of malware).

In fact, until this scheme has several issues. If all the presented data are correct, it could not steal all fuels, and only one, tank for collection of incomplete filling prepared only one. In this case, was probably selected the most popular form of fuel (it was probably AI-92). Also incomprehensible scheme with paying customers of this "stolen" fuel from the special tank. How did the purchase in that case, if a motorist wanted to not pay cash but a credit card? In this case, the funds received would be at the expense of the owner of the gas station, which would be immediately noticed the difference. Do attackers were able to redirect Bank funds to private accounts? But this is not so easy, especially since, as we have seen, has stolen only one type of fuel, and if several clients in a row was a different fuel, to streamline the operation of the entire filling stations become even more difficult (for example, one payment should go for real account a gas station, next to shell, and so on).

Perhaps the other details of an unusual scheme we'll never know.

.