U.S. v. Max Ray Vision (Iceman / CardersMarket)
Key Facts
- Legal Status: SENTENCED in U.S. District Court for the Northern District of California.
- Primary Target Sector: Financial Services, Retail.
- Documented Financial Loss: $86.0 million.
- 1 verified MITRE ATT&CK techniques substantiated with verbatim court excerpts.
Case Summary
Executive Summary for Board Members & Leadership
Plain-English Root Cause
Adversary breached the target network via Exploit Public-Facing Application. Vision exploited web application vulnerabilities in competitor dark web portals to compromise forum SQL databases and hijack customer accounts.
Operational & Financial Fallout
Stole approximately 2 million credit card numbers, causing $86 million in fraudulent charges. Impacted Financial Services, Retail infrastructure and associated victim operations.
3 Critical Boardroom Questions
- 1. Do 100% of our external portals enforce phishing-resistant hardware MFA?
- 2. Can compromised endpoint credentials traverse laterally to domain controllers or cloud storage?
- 3. Have our air-gapped immutable recovery backups been restored and tested within the last 90 days?
Attack Anatomy & Incident Execution
Forensic analysis of initial intrusion vector, step-by-step kill chain, operational blast radius, and defensive controls.
Adversary breached the target network via Exploit Public-Facing Application. Vision exploited web application vulnerabilities in competitor dark web portals to compromise forum SQL databases and hijack customer accounts.
Adversary Kill Chain Flow
1 Documented PhasesVision exploited web application vulnerabilities in competitor dark web portals to compromise forum SQL databases and hijack customer accounts.
Stole approximately 2 million credit card numbers, causing $86 million in fraudulent charges. Impacted Financial Services, Retail infrastructure and associated victim operations.
Procedural & Incident Timeline
Vision arrested at his San Francisco apartment by federal agents.
Pleads guilty to two counts of wire fraud conspiracy.
Sentenced to 168 months (14 years) in federal prison and ordered to pay $27.5 million in restitution.
Named Defendants & Operatives
| Defendant | Nationality | Status | Prison Term | Restitution | Notes |
|---|---|---|---|---|---|
| Max Ray Vision | United States | sentenced | 168 mo | None | Operator of CardersMarket carding forum; sentenced to 14 years in federal prison. |
Substantiated MITRE ATT&CK Techniques
| Technique ID | Technique Name & Tactic | Primary Source Evidence Excerpt | Locator | Verification |
|---|---|---|---|---|
| T1190 | Exploit Public-Facing Application Initial Access | "Vision exploited web application vulnerabilities in competitor dark web portals to compromise forum SQL databases and hijack customer accounts." | Indictment ¶ 14, Page 7 | reviewed |