"1M Stolen Credit Cards Hit Dark Web for Free"
Researchers have discovered that threat actors have leaked 1 million stolen credit cards for free online as a way to promote a relatively new and increasingly popular cybercriminal site dedicated to selling payment card credentials. The cards were published on an underground card selling market called AllWorld.Cards and were stolen between 2018 and 2019, according to info posted on the forum. The leaked credit cards include the following fields: credit card number, expiration date, CVV, name, country, state, city, address, ZIP code, email, and phone number, according to threat actors. The researchers stated that AllWorld.Cards appears to be a relatively new player to the market for selling stolen credit card data on the Dark Web. The researcher's analysis suggests that this market has been around since May 2021. The curators of AllWorld.Cards began flogging their cybercriminal services on carding sites in early June to drum up new business. There is some uncertainty about how many of the cards are actually still active and available for cybercriminals to use. Cyble researchers noted that threat actors claimed that 27 percent, according to a random sampling of 98 cards, are still active and can be used for illegal purchasing. However, according to the researcher's own analysis, which involved sending the credit card numbers to client banks "to carry out the appropriate mitigation actions," the researchers found that closer to 50 percent of the cards are "still operational, not yet identified as compromised." Of the banks, 72,937 of the cards were associated with the State Bank of India, 38,010 with Banco Santander (Brazil), 30480 with a U.S. bank based in Ohio called Sutton Bank, 27,441 with JP Morgan Chase Bank, and 24,307 with BBVA Bancomer S.A. a bank based in Mexico. In the last six months of 2020 alone, threat actors offered more than 45 million compromised cards for sale in underground credit card markets monitored by security firm Cybersixgill.
Threatpost reports: "1M Stolen Credit Cards Hit Dark Web for Free"