[TheRecord] Man charged with hacking MLB, NBA, NFL, and NHL user accounts to stream games

The US Department of Justice has filed charges today against a Minnesota man who hacked MLB, NBA, NFL, and NHL user accounts in order to supply content to a pirate streaming website that he operated.

Charges were levied against Joshua Streit, 30, of St. Louis Park, Minnesota. The DOJ claims that Streit, who went online as “Josh Brody” or “inflx,” operated the HeHeStreams website between 2017 and August 2021.

Officials said that Streit used stolen credentials to access other people’s MLB, NBA, NFL, and NHL accounts in order to hijack game streams, which he later re-broadcast on the HeHeStreams website.

The pirated streams were offered part of a paid package that gave buyers access to the streams of all four US sports leagues at prices inferior to those practiced by the leagues’ official websites.

In addition, officials said that Streit also attempted to extort the MLB, asking the company to pay $150,000 to disclose details about security flaws that he found on their servers.

US officials didn’t say what started the investigation into Streit’s operation, but court documents [PDF] detail how the FBI discovered the real-world identity of the HeHeStreams operator, suggesting the case might have started following a complaint against the site.

Per the same documents, the FBI said they were able to track down the HeHeStreams operator after the site’s administrator used the same “inflx” username on both the streaming site’s chat and on Reddit.

Through data obtained from Reddit, US investigators discovered that the Reddit account had been registered with an email address used by Streit for his personal blog, where he often posted cybersecurity research.

In addition, data provided by other companies and internet service providers firmly established a link between the HeHeStreams operator and Streit’s home IP address.

Streit faces up to 60 years in prison if found guilty on all charges. The MLB claims that his hacking incurred losses of around $3 million, money that he might need to pay to the company.

An email seeking comment sent to Streit’s publicly-listed email address was not returned.

The post Man charged with hacking MLB, NBA, NFL, and NHL user accounts to stream games appeared first on The Record by Recorded Future.

Source: Read More (The Record by Recorded Future)

You might be interested in …

[ZDNet] Microsoft Edge 92 starts rolling out to mainstream users

All posts, ZDNet

Microsoft is adding a handful of new features, including a Password Health Dashboard, to version 92 of its Chromium-based Edge browser. Source: Read More (Latest topics for ZDNet in Security)

Read More

[ZDNet] Parents of teens who stole $1 million in Bitcoin sued by alleged victim

All posts, ZDNet

Clipboard malware was developed with the sole purpose of stealing cryptocurrency. Source: Read More (Latest topics for ZDNet in Security)

Read More

Daily NCSC-FI news followup 2019-12-16

Inside Evil Corp, a $100M Cybercrime Menace krebsonsecurity.com/2019/12/inside-evil-corp-a-100m-cybercrime-menace/ The U.S. Justice Department this month offered a $5 million bounty for information leading to the arrest and conviction of a Russian man indicted for allegedly orchestrating a vast, international cybercrime network that called itself Evil Corp and stole roughly $100 million from businesses and consumers. As […]

Read More