💾 Archived View for spam.works › mirrors › textfiles › hacking › cbiinfo captured on 2023-11-14 at 09:49:02.

View Raw

More Information

⬅️ Previous capture (2023-09-08)

-=-=-=-=-=-=-



CBI is a credit referral service, similar to TRW (though rather inferior).  
Basically, with the advent of large-scale credit use for high-end purchases, a 
need arose for a service which various businesses, banks, lending agents etc. 
could quickly and easily get a complete credit history on a potential customer.
Thus, these establishments can have at their beck and call your entire credit 
history: all your credit cards, their limits, any mortgages you have and their 
current status, as well as various other tidbits such as loans, car reposses-
sion defaulted extensions of credit, and the like.  Some peoples credit files 
are quite extensive, while others are surprisingly incomplete.  This, I sup-
pose, reflects the ammount of credit usage the individual in question has 
employed.  To make these credit referral services quickly and easily accessi-
ble, these companies have been kind enough to place all their records in an 
online databasewhich can be called and referenced by a legitimate account-
holder via modem.  Forutunately for us, the hacker community, this wonderful 
database can also be  called and accessed illegally.  THAT is where the phun 
begins.

PART 3: Okay, how do I get on?
To make the lives of the various legal users of their system easier, CBI has  
established numerous access points to their database. Unfortunately, at the 
timeof the writing of this phile, I only have two working dialup for CBI. They 
are: 1-713-591-8100  Houston, Texas
     1-804-466-1619  Norfolk, Virginia
Also, the voiceline for CBI's 'Equifax Credit Information Services' is 
1-201-842-7500. Call it and social engineer yourself a dialup or six.  Once 
you're ready to call, TAKE PRECAUTIONS. NEVER call a CBI dialup directly, or 
just through a code. ESPECIALLY if you're trying to hack out an account. 
Rather, use an outdial, or better yet, use several outdials. Make it HARD for
them to track you down. ATTHEVERY LEAST, use a diverter. I usually use a single
outdial, which seems to be safe enough for simply accessing the system.  
As I said, for hacking, a more 'layered' approach is advisable.  Okay, so now 
you've dialed the number from your cheesy outdial. The system connects. But, 
nothing appears on your screen. CBI does not recognize the standard 'carriage 
return' generated by your 'return' key. Rather, CBI accepts [cntrl-s] (^s) as 
a return. So, to awaken the system, hit cntrl-s (you may need to follow this 
with a return sometimes). Wait a few seconds and you'll see:(LA)PLEASE SIGN-ON:
The system has no echo, so you may want to call with half duplex for some 
visualre-assurance. You now enter your account. Accounts appear in two formats:
613bb2114-c2    OR    613bb2114-c2,az,p.
The system will accept either one (ie, the 'az,p.' is not necessary). After you
finish typing in the account, hit [cntrl-s] again. There will be a few seconds
brief wait, and if the account you entered is valid, the system will say:
Blammo. You're in.

PART 4: How to pull files
Once you're in, there are 2 BASIC commands that you need to know to pull      
peoples files. There are various other commands for more powerful accounts, but
as a low end user, you need not worry about these, and if you area a more
experienced user, then you don't need ME to tell them to you!
The files in the CBI database are referenced by either name and address or    
social security number. If you know either of these for your prospective 
target,you're in business. First, the easy one: To pull a persons credit file 
with their SS number, enter this command:         
id-sss-###-##-####.[cntrl-s]
Where #'s are the digits of the SS #. Do not forget the period at the end of 
thecommand, it IS necessary. Also, remember to enter the command with controls,
NOT return.
Next, the more useful method of pulling a file. Enter the following:
nm-first,last.ca-house #,streetname,streettype,town,state,zipcode.[cntrl-s]
As for the name, you MUST have the full last name, but you only need to enter
the first initial or a partial name. For the address, spelling the streetname
and town correctly are important. Also, the zipcode is NOT NECESSARY. You can
just put the period after the state and hit ^s. Streettype refers to blvd, st,
rd, ln, ct...etc, you get the idea...you can either spell it out or use the
common abbreviation. For towns or streets with 2 words, ie 'Seaside Heights'
enter it exactly as is, for example:
nm-lamer,joe.ca-666,wanker,ln,seaside heights,nj.^s

PART 5: What's this weird number shit?
When you successfully pull a file, you'll see something like this:            

72B,WOMBAT,BV,SCROTUM,SD,01010,TAPE RPTD 07/85
223,DERF,DR,TESTICLE,TX,43524,TAPE RPTD  09/87
BDS-09/14/58,SSS-121-32-1234                                                  
01 ES-,DERFLINK INC,HOSEHEAD,CA                                                
02 EF-,SELF EMPLOYED,SCROTUM,SD                                                
03 E2-,ADMIN,BEVCO ELECTR.,NJ                                                  
So what the hell does this shit mean? Well, obviously, it begins with the
person's name. 'SINCE' refers to the first time Equifax generated a file on 
thisperson, while FAD is the last time the file was updated. Next is listed the
person's places of residence, both present and past. (RPTD is the last date 
thatthey were still listed as being at that address). The 'BDS-' line contains 
the  person's birthdate and social security number, and sometimes their age as 
well.   The following '01 ES' type lines concern the person's employers, again 
both   present and past, with addresses for them.
Next, you'll see the following:
 *SUM-08/85-07/90,PR/OI-NO,FB-NO, ACCTS:3,HC$0-25000, 2-ONES, 1-FOUR.
 *INQS-OCEAN NATL 444bb952   11/23/90
Okay, this is a little more complex. The SUM indicates the period during which
this person has had credit of any kind. I do not know what PR/OI and FB indica
te ACCTS: is the number of entries on the list about to follow, ie, the amount 
of credit extensions this person has ever had. HC$ is the span on the values 
of these credit extensions. That is, he has been extended as much as $25,000 
at onetime. The 'ONES, FOURS, FIVES, NINES, ZEROS' etc indicate the TYPE of 
credit    accounts the person has. I am still in the process of deciphering 
what each one means. INQS is self explanatory. Listed are all the firms which 
have recently   pulled this person's file, and the date they did so.
Next comes the good part:


SEARS      *906DC29    08/90 07/85    0      523     R4 01 J  8764-5648374612846
CITIBK-MC  *906BB40    08/90 11/88 5000     1234     R1 34 S  542412345678
GMAC       *906FA34    07/90 10/87  25K 10Y  10K     I1 17 A  192-123456789
END OFREPORT     CBI AND AFFILIATES  -  11/26/90                              

Okay, broken down, this shit means:
FIRM/ID CODE: The creditor and its CBI account code. RPTD: Last time that entry
was updated, either due to purchase or change in credit extension. OPND: Date
the account was first opened. H/C: Ammount of credit. In the case of actual
credit cards, this is the card limit. TRM: Length of time the credit is extend-
ed for, in weeks. If followed by a 'M', it is in months, and if followed by a 
'Y' it is in years. BAL: Ammount still owed on the card as of the last update.
P/D, CS, MR, ECOA: beats the shit outta me!!! ACCOUNT NUMBER: Self-explanatory.
VISAS begin with a 4, MASTERCARDS begin with a 5, DISCOVER with a 6, etc. If 
you are uncertain as to whether an account is a card or not, run it thru your
friendly credit checker to check. Many entries will have helpful explanatory
footnotes like:  CLOSED ACCOUNT, CARD STOLENORLOST, REDEEMED REPOSESSION
REALESTATE MORTGAGE, AUTOLOAN, ACCOUNTCLOSEDBYCONSUMER

PART 7: Safe use/abuse of CBI
Okay, so you have an account and you know how to use it, right? So, what 
next?Well, firstly, you'd better cover your ass. As I said earlier, be sure to 
call  CBI through some sort of number-diverting system. To preserve the life of
your  account and protect your ass, you should also take the following precau-
tions.  First, try to call CBI dialups only during normal business hours 
LOCALTOTHE  DIALUP (based on whatever time zone it's in). That is, Monday-
Friday from 9:00amto 6:00pm if at all possible. Try NOT to call ATALL after 
12:00 midnight, as   this is extremely suspicious. Secondly, never pull files 
sequentially from your phone book (more on this later). Skip around as far as 
last names go. Thirdly,  don't be greedy...don't pull 100 files per 
call...stick to 10-20, no more that  30. Lastly, don't bother pulling the file 
of the President. We already tried pulling ole' George's file, but all we
got was his social security # and a message stating that that file was 'not
available'.

PART 8: Who do I pull?
It's essential that you never waste time on CBI, as accounts are valuable and 
not to be trifled away. So, don't spend all your time pulling your friends 
filesor your neighbor's. Go for the BIGBUCKS. Get out your local phone book and
run through it looking for names with 'attorney', 'MD', 'DDS' and such after 
them.  Then pull THOSE files. Also, its not a good idea to only pull files from
your local area...so...run down to your local library. All libraries have phone
directories for major cities nationwide. (Don't bother with the Manhattan guide,
as none of those addresses are residential ones, all offices and such).  Again,
try to pull the files of affluent folks. When you take an address from a phone
book, always try to make sure it isn't an office address.  Many directories will
list both office and 'res' ie residential numbers and addresses. You must have
the person's BILLING address to pull his/her file.  There are various other ways
to get peoples names and addresses, so be creative and have fun.

PART 9: Getting an account
This is the REAL hard part. Most people simply trade away their hard-earned
info for a CBI account. Frankly, the fact that few people know how to get new
ones is the reason why there are so few in circulation. SO, its time for all 
youhacks to start getting them YOURSELF. How, you may ask? There are two ways. 
The most commonly used way is to social-engineer them. Flip thru your local 
phone book and find a small car dealership. Call them up. Pretend you are a
CBI or Equifax employee. Again, be creative. If you sound like a 14yr old,
or if you can't lie to save your ass, don't try this. You'll only phuck things
up for the rest of us. Design your own scams. Be convincing. Leave them a number
to call   you back at...a loop, or a BBS #, or better yet, find a number thats
always busy. Or, if you have one, set up a VMB to issue a greeting as the office
of the person who you are impersonating. In short, be devious. After all, you're
a hacker!
Method two is a bit more tough. All CBI accounts that I've ever run into so far
take on a simple format, presented above. Now, you'll notice that the beginning
of an account (613bb2114) looks remarkably like the IDNUMBER presented in the
files you pull (ie 906dc29). The reason for this is that they are ONEINTHESAME.
Yes, thats right, CBI is nice enough to give you an extensive listing of partial
accounts for all of its subscribers. All accounts take on this format:
[3 DIGITS][2 LETTERS][2-5 DIGITS][a dash][2 CHARACTERS, EITHER NUMBER ORLETTER]
Quaint, yes? Now, since the company codes provide parts one thru three, all you
need to figure out is the 2-character code after the dash. In all cases I've
seen so far, this has been a letter followed by a number, but I am not certain
that this is ALWAYS the case.
So, in short: HACK AWAY.

PART 10: Company Codes
COMPANY       CODE          COMPANY       CODE          COMPANY      CODE

A & S         426dc33       ALLSTATE      465ig14       AMERIFEDRL   444bb7072
AMEX          906on259      AMEX          906on267      AMEXOPTIMA   906bb5130
AM EXPRESS    458on2792     BANCAMER-V    906bb206      BENF BNCHG   444fp289
BEN SMITH     882an137      BERKLY MTG    444fs1399     BK OF MDSN   843bb342
BK OF NY      404bb539      BLOMNGDALE    404dc21       BNY DE GLD   496on747
BNY DE STD    496bb82       BONWIT TEL    404cg94       BRADLEE'S    426dc1577
C & S         401bb4880     C & S COMM    872bb213      CARTSVBKFA   444fs1381
CHASE EDUC    728bb10420    CHASE(USA)    905bb587      CHASE VISA   496on598
CHASE VISA    426bb756      CHEM BK,DE    426bb3859     CHEM BK,NJ   444bb3469
CHEM BK,NJ    444bb3626     CHEM BK,NJ    444bb5605     CHRYS 1ST    444fp2137
CHRYSLER      906fa26       CITIBANK      906bb115      CITIBK-MC    906bb40
CITICORP      906fm6418     CITICORPSA    447fs844      CITI PRVS    906bb289
CNB USA       496on291      COMMERCE      901bb5101     COMMONWELT   906fm6335
CORESTATES    496on218      CORESTATES    458on3022     CRESENT      402re30375
CRSI-CHARM    426cg544      CS NATNL      872bb31       CS OTC       872bb205
CTL JER MC    444bb143      CTL JER SI    444bb6173     CTY FD MTG   444fm11838
DE TR         458on3014     DISCOVER      155on44       DISCOVR CD   905on1497
EFX-SML042    444zb361      EQUIBANK      496on648      FFB NEWJER   444bb5654
FIDELITY NA   496bb587      FIELD BROS    906cg2913     FJNB/SO MC   444bb5704
FLEET FUND    416fm2092     FNB TRV IL    444bb465      FNB TRV MC   444bb52C62
FNB TRV OD    444bb5308     FNB TRV VS    444bb5290     GE CAPITAL   404ff262
GE CAPITAL    906ff278      GE CAPITAL    906ff260      GECAP-TOPS   404ff1039
GECAP-CALD    404ff825      GECC          906ff252      GIMBELS      426dc561
GLENDALE      181fs320      GMAC          444fa483      GMAC         906fa34
GOTTSHALKS    163dc2280     GRDN ST OC    444bb2719     HBNA VISA    163bb17526
HMDEPOT       404hz141      HUGHES CHV    444an1082     IAR EQUITA   444zb00577 ?3??3 
?JC PENNEY     906dc185      JC PENNEY     444dc10639    JC PENNEY    906dc193
LITTMANS      444ja591      LORD & TAY    906dc151      MACYS        444dc49
MARINE MID    405bb280      MBNA AMER     801on119      MBNA AMER    801bb2942
MELLON BK     496bb74       MERIDN MTG    496fm271      MH/MC        426bb2380
MHT/MC        426bb541      MH/VISA       426bb1895     MH/VISA      426bb2406
MIDLTIC IL    444bb804      MIDLTIC OD    444bb3253     MNB/N IL     444bb9466
MOBIL OIL     906oc99       MONGRM-USA    404bb3483     NATL STATE   444bb1315
NATWST MTG    444fm12285    NCNB          805bb2492     NEIMAN-M     906dc656
NISSAN MTR    444fa848      NJNB          444bb6173     NJNB         444bb1869
NWB           444yc1311     NWB           444bb6363     NWB          444bb6496
NWB           444bb564      NWB           444bb3436     OCEAN NATL   444bb952
PNB IL        891bb186      PRIMERICA     496on44       RICE&HLMAN   444an2452
ROOTS         444cs315      SEARS         906dc29       SEARS        444dc510
SEARS         905dc3081     SEC PAC BK    180bb19097    SHOP CHARG   444cg377
SLMA-LSCP     496fz45       SNAPPER       404tz19       SNSONE TOY   444an4177
SPIEGELS      906dm10       STEINBACH     403dc1426     STERNS       496dc319
STRAWBRIDG    496dc20       STRD ROOF     444ki54       SUN RF MKT   606oc10587
SVGSBK SOC    414bb917      TOYOTA MTR    906fa67       TYOTA MOTR   444fa814
UCT RIKEL     444bb5035     UJB MC GLD    444bb9466     UJB-MID ST   444bb978
UJB/SO IL     444bb2248     UJB VISA      444bb1182     UJB VISA     444bb4491
UNIVRSL BK    444on366      UNIVRSL BK    444on200      UNIVRSL BK   444on358
UNIVRSL BK    444on341      WCI-HUFKOO    404hf375      YEGEN ASSO   444an449
1 VALLY BK    496fs380      1ST CARD      404bb182      1ST CARD     155on85
1STDEPOSIT    163bb19418    1ST JER CR    444zb668      1ST OMNI     801on1182
1ST STATE     444bb2958     ??????????    444bb1331     ??????????   465zb134

PART 11: THE END
Well, thats all for now. With this info, you neophytes should be quite capable
of using those CBI accounts you've been gleefully trading for so long. And,
with luck, a few more of you will start hacking out accounts. If any one has
other CBI dialups, or just other company codes for a possible 'UPDATE 
PHILE'...'CBI=The Revenge', please send them to me. I can be contacted via 
feedback at:      CYBERNETIK LIMBO (908)269-7042
Or at:
                  SOCIAL DISTORTION (908)303-0927, user #4.
Also, you can mail me on QSD chat at TymNet NUA 208057040540.
My box is 'ghost [pm]'.
Feel free to contact me if you have any questions about the info presented in 
this phile, or if you're interested in becoming a Panther Modern.
Finally, a few brief greets and thanks to: Neuromancer, Midnite Raider, Cyber-
Sage, RatFink, Digital-Demon, and particularly to Sir Hairy Legg, who got me on
to CBI in the first place.
Oh, one other thing. The information presented in this phile is for informa-
tional purposes only, to shed a glimmer of light on the inner workings of the 
arcane electronic world. In no way does this file condone or encourage credit 
fraud, illegal system access, or any other crimes. Equally, the author dis-
claims ALL RESPONSIBILITY for any misuse of the information presented above, or
any crimes committed thereby.
But that never stopped ya before, now did it? Muahahahahah!