Share

​Stolen credit card numbers going for A$21 to $40

But hackers don’t have such trouble assigning a value to your personal property.

Advertisement

And there seems to be code of practice in operation on the Dark Web, with illegal sellers listing adverts in the same way as legitimate sellers, offering guarantees on stolen credit cards for example.

A report released Thursday discusses how much criminals receive for info they steal from consumers.

“The examples of the hidden data economy in this report represent only the tip of an iceberg”, the authors state.

Intel Security found that the Dark Web also has for sale credit and debit card data, bank log-in details, entire personal identities, and stealth bank transfers. They aren’t always stolen; a few are generated randomly. At the high-end, access credentials to a bank account with a $20,000 balance sells for $1,200.

In the United Kingdom, transfers ranged from $700 (£455) for a $10,000 (£6,470) balance, to $900 (£582) for a $16,000 (£10,355) balance. Prices for access to premium cable streaming services start at $7.50, while professional sports streaming services cost $15. The most valuable package includes what is called “Fullzinfo” information, which contains a billing address, PIN number, social security number, date of birth, mother’s maiden name and username and password access.

In this case, the prices for compromised online service accounts appear to be dictated exclusively by account balance. This is likely due to their limited uses and scenarios for exploit. Stolen login credentials for premium comic book services can be obtained for as little as $0.55.

McAfee Labs found login credentials for a $2,200 (£1,420) balance account selling for $190 (£123). Payment card information made available in those marketplaces will vary in price based on a multitude of options.

According to the report, researchers found a value hierarchy in how payment card data is packaged, priced and sold online. A basic offering is often free.

Apparently, these allow buyers to conduct online purchases by pretending to be their victims. Researchers found that a hotel brand loyalty account with 100,000 points will sell for $20.

Raj Samani, chief technology officer for EMEA at Intel Security and an author of the report, said that in all cases, firms like YouTube are advised about the issue but admits it’s tough to be up to date with all the videos coming online. “This “cybercrime-as-a-service” marketplace has been a primary driver for the explosion in the size, frequency and severity of cyber attacks”.

Advertisement

Over the years, the McAfee Labs team has worked with IT security vendors, law enforcement and others to identify and evaluate numerous websites, chat rooms, and other online platforms, communities, and marketplaces where stolen data is bought and sold.

Hackers advertising stolen data on YouTube to buy