Cybercriminals have been busy over the past couple of years, and it’s starting to show. Digital identity inventory levels have never been higher, and prices have never been lower. It’s a great time to be a black market buyer.
According to a new report from Dell SecureWorks, an American identity is now selling for just $25. Two years ago, a fraudster would have had to shell out $40 for the same data. That’s what happens when supply outpaces demand in the business world, and it generally holds true even when you’re talking about criminal enterprises.
That $25 covers “fullz,” which typically include your name, mailing address, phone numbers, email addresses, date of birth, and social security number as well as complete bank account or credit card information.
Those who prefer to order a la carte can pick up a US Mastercard or Visa for the bargain-basement price of $4. Discover and American Express sell for a few dollars more, and a card’s full track one and track two data fetches around $12.
The keys to online banking accounts are worth quite a bit more. Credentials for accounts with a balance between $75,000 and $150,000 can fetch as much as $300, which actually still seems disturbingly cheap when you think about it.
Dell’s findings paint a pretty bleak picture of the state of online security, and they also offer some insight into the whole Cryptolocker situation.
Ransomware isn’t a new phenomenon, but Cryptolocker has taken things to a new level. Its criminal creators have cut out the middleman to make their money — they’re dealing directly with the compromised user to generate revenue instead of selling discount data on the black market.
It’s working, and working well. Unlike other cybercriminals who are slashing prices, the Cryptolocker crew is watching income rise and methodically perfecting their malware — adding support for anonymized payments via Bitcoin and rolling out a late payment option for those who regret ignoring the initial deadline.
The system is so successful even the police are paying up. In fact, Cryptolocker has been so successful that we shouldn’t be surprised if criminals increasingly turn their attention away from credential heists and toward ransomware.
More...
According to a new report from Dell SecureWorks, an American identity is now selling for just $25. Two years ago, a fraudster would have had to shell out $40 for the same data. That’s what happens when supply outpaces demand in the business world, and it generally holds true even when you’re talking about criminal enterprises.
That $25 covers “fullz,” which typically include your name, mailing address, phone numbers, email addresses, date of birth, and social security number as well as complete bank account or credit card information.
Those who prefer to order a la carte can pick up a US Mastercard or Visa for the bargain-basement price of $4. Discover and American Express sell for a few dollars more, and a card’s full track one and track two data fetches around $12.
The keys to online banking accounts are worth quite a bit more. Credentials for accounts with a balance between $75,000 and $150,000 can fetch as much as $300, which actually still seems disturbingly cheap when you think about it.
Dell’s findings paint a pretty bleak picture of the state of online security, and they also offer some insight into the whole Cryptolocker situation.
Ransomware isn’t a new phenomenon, but Cryptolocker has taken things to a new level. Its criminal creators have cut out the middleman to make their money — they’re dealing directly with the compromised user to generate revenue instead of selling discount data on the black market.
It’s working, and working well. Unlike other cybercriminals who are slashing prices, the Cryptolocker crew is watching income rise and methodically perfecting their malware — adding support for anonymized payments via Bitcoin and rolling out a late payment option for those who regret ignoring the initial deadline.
The system is so successful even the police are paying up. In fact, Cryptolocker has been so successful that we shouldn’t be surprised if criminals increasingly turn their attention away from credential heists and toward ransomware.
More...
