Max Ray Vision (formerly Max Ray Butler, alias Iceman, born 1972), a former computer security consultant, was an online hacker charged with two counts of wire fraud and theft of nearly 2 million credit card numbers as well as approximately $86 million in fraudulent charges
In the spring of 1998, Butler installed a backdoor onto American federal government websites while trying to fix a security hole in the BIND server daemon. However, an investigator with the United States Air Force found Butler via pop-up notifications and his FBI handlers. The FBI had Butler infiltrate a group of hackers who hijacked 3Com's telephone system for personal teleconference use. Butler attended the annual DEF CON hacker convention the following summer and by then had second thoughts about his work with the FBI. He hired attorney Jennifer Granick for legal representation after hearing Granick speak at DEF CON, and the FBI terminated Butler consequently. On September 25, 2000, Butler pled guilty to gaining unauthorized access to Defense Department computers. Starting in May 2001, Butler served an 18 month federal prison sentence handed down by federal judge James Ware.
After his release from prison in 2003 on supervised release, Butler exploited Wi-Fi technology to commit cyberattacks anonymously along with Chris Aragon from San Francisco. He advanced to programming malware, such as allowing theBifrost trojan horse to evade virus scanner programs and exploited the HTML Application feature of Internet Explorer to steal American Express credit card information. Butler also targeted Citibank by using a Trojan horse towards a credit card identity thief and began distributing PINs to Aragon, who would have others withdraw the maximum daily amount of cash from ATMs until the compromised account was empty.
Arrested in 2007, Vision was accused of operating Carders Market, a forum where cyber criminals bought and sold sensitive data such as credit card numbers. After pleading guilty to two counts of wire fraud from stealing nearly 2 million credit card numbers and spending $86 million in fraudulent purchases, Max Ray Vision was sentenced to 13 years in prison, which is the longest sentence ever given for hacking charges. After prison, he will also face 5 years of supervised release and is ordered to pay $27.5 million in restitution to his victims.