While one’s personal data is worth a lot to an individual, it would be interesting to know how much worth it carries for the identity thief.
According to an annual report on cybercrime by Secureworks, a unit of Dell Inc, the bitcoin equivalent of about $10 to $20 is the selling price for verified high-limit credit cards from countries including the U.S., Japan, and South Korea.
According to Secureworks, the dark web is “the collection of Internet forums, digital shop fronts and chat rooms that cybercriminals use to form alliances, trade tools and techniques, and sell compromised data that can include banking details, personally identifiable information and other content.”
Verified means that a seller has found that a card hasn’t been canceled yet after he has tested out transactions on the card. And amounting to just pennies a card when bought in bulk, is the value for scammers sitting on a budget for unverified stolen credit card data.
Alex Tilley, a senior security researcher on Secureworks’ counter threat unit research team said that credit cards generally aren’t selling any cheaper on the dark web these days. But higher-quality cards – the ones with sizable limits and suitable properties for fraud, are more likely to be obtained by buyers today. While chilling news for most of us, it is a welcome change for criminals as it isn’t as hit-or-miss as it used to be.
Tilley said that because they sometimes have no limit on spending, business credit cards are in favor. $15 to $20 is the price range for those and high-end personal cards—say, a Platinum American Express that has been verified and has an 85 percent rating. And $9 could be the price for a regular Mastercard that doesn’t have a big limit.
Full identities of individuals just like you for as little as $10 apiece are being sold by an underground hacker market inexplicably called Trump’s Dumps. The report explains that they’re called fullz, “dossiers that provide enough financial, geographic and biographical information on a victim to facilitate identity theft or other impersonation-based fraud.” Those irritating “secret questions” that sites ask to verify your identity can be avoided by a criminal with the help of Fullz.
Along with more identifying information about the owners, more offers of bulk pre-verified card details have been recently seen by Secureworks’ researchers. The cardholder’s mother’s maiden name is even included in offers in some cases. Still, they cost just $10 to $12. This is below is a fullz offer with a lot of personal identification on a Korean consumer.
According to a report from IBM’s security research group, known as the IBM X-Force, published earlier this year, tax-filing data, which don’t expire, can go for about $40 to $50.
Tilley said that no piece of personal information is innocuous. Waiting until they have enough that their fraud attempt is likely to succeed, criminals will amass bits of data on people.
“Everything is valuable,” he said. One bit of information “could be the last piece of a puzzle someone needed to take out a loan in your name. You don’t know how far along criminals are until it’s too late.”
(Adapted from Bloomberg)