Language Selection

English French German Italian Portuguese Spanish

Black Market in Stolen Credit Cards

Filed under
Security
Web

"Want drive fast cars?" asks an advertisement, in broken English, atop the Web site iaaca.com. "Want live in premium hotels? Want own beautiful girls? It's possible with dumps from Zo0mer." A "dump," in the blunt vernacular of a relentlessly flourishing online black market, is a credit card number. And what Zo0mer is peddling is stolen account information - name, billing address, phone - for Gold Visa cards and MasterCards at $100 apiece.

It is not clear whether any data stolen from CardSystems Solutions, the payment processor reported on Friday to have exposed 40 million credit card accounts to possible theft, has entered this black market. But law enforcement officials and security experts say it is a safe bet that the data will eventually be peddled at sites like iaaca.com - its very name a swaggering shorthand for International Association for the Advancement of Criminal Activity.

For despite years of security improvements and tougher, more coordinated law enforcement efforts, the information that criminals siphon - credit card and bank account numbers, and whole buckets of raw consumer information - is boldly hawked on the Internet. The data's value arises from its ready conversion into online purchases, counterfeit card manufacture, or more elaborate identity-theft schemes.

The online trade in credit card and bank account numbers, as well as other raw consumer information, is highly structured. There are buyers and sellers, intermediaries and even service industries. The players come from all over the world, but most of the Web sites where they meet are run from computer servers in the former Soviet Union, making them difficult to police.

Traders quickly earn titles, ratings and reputations for the quality of the goods they deliver - quality that also determines prices. And a wealth of institutional knowledge and shared wisdom is doled out to newcomers seeking entry into the market, like how to move payments and the best time of month to crack an account.
The Federal Trade Commission estimates that roughly 10 million Americans have their personal information pilfered and misused in some way or another every year, costing consumers $5 billion and businesses $48 billion annually.

Full Story.

More in Tux Machines

Facebook-squishing Indian regulator's next move: Open source code

Fresh from squashing Facebook's effort to grab the enormous India market, the sub-continent's regulator has another goal in mind: open source software. Speaking at the India Digital Summit this week, chairman of the Telecom Regulatory Authority of India (TRAI), Ram Sewak Sharma, told attendees: "No service can be hostage to a particular technology." He then went on to explicitly support the broader adoption of open source software, arguing that it would help the booming digital economy in India from being locked into buying from a specific company and enable a broader and more equitable internet for all. "Any technology that is deployed for connectivity must be interoperable and the open standards framework and the principles it entails are extremely important," he argued. Read more

Ubuntu 16.04 LTS to Let Users Change the Visibility of App Menus in Unity Panel

We've already told you that we're running the latest Ubuntu 16.04 LTS (Xenial Xerus) operating system, right? Well, guess what? Earlier today, Canonical pushed a bunch of important updates to the upcoming distribution. Read more

GNOME 3.19.90 beta tarballs due (and more)

Hello all, We would like to inform you about the following: * GNOME 3.19.90 beta tarballs due * API/ABI, UI and Feature Addition Freeze; String Change Announcement Period * New APIs must be fully documented * Writing of release notes begins Tarballs are due on 2016-02-15 before 23:59 UTC for the GNOME 3.19.90 beta release, which will be delivered on Wednesday. Modules which were proposed for inclusion should try to follow the unstable schedule so everyone can test them. Please make sure that your tarballs will be uploaded before Monday 23:59 UTC: tarballs uploaded later than that will probably be too late to get in 3.19.90. If you are not able to make a tarball before this deadline or if you think you'll be late, please send a mail to the release team and we'll find someone to roll the tarball for you! Read more

US Air Force's Secure LPS (Lightweight Portable Security) Linux OS Gets Updated

Lightweight Portable Security (LPS), a thin Linux kernel-based operating system that creates a secure end node from trusted media on almost any PC, has been updated recently to version 1.6.4. Read more