Once they located a vulnerable network , they installed " sniffer programs " that captured credit and debit card numbers as they moved through a retailer 's processing computers - then tried to sell the data overseas .