14 DAY TRIAL // A group of cybercriminals established a website that specializes in selling payment card data online, AllWorld.Cards, according to Threat Post. Threat actors leaked 1 million stolen credit cards (gathered between 2018 and 2019) to help promote their criminal operations.
Cybersecurity researchers from Cyble discovered the leak during a regular check of Dark Web marketplaces and cybercrime activity. According to researchers, the market began operating around May 2021 and is accessible through a TOR network as well as on the Clearnet. Researchers from Italian firm D3 Lab said in a post, “It is conceivable that the data was shared for free to entice other criminal actors to frequent their site…by purchasing additional stolen data from unsuspecting victims,” (translated)
As cybercriminals allege, credit card information exposed on their platform includes everything from a person's name to the address where they live, as well as their ZIP code, phone number, credit card number, and expiration date.The credit cards, and sometimes gift cards, are used to make payments that are difficult to trace back to the source of the transaction.
Credit card data theft is a lucrative business on the black market, and hackers can obtain credit card information in a variety of methods, including social engineering. Point-of-sale card skimmers targeted Magecart assaults on websites and Trojans that steal information from websites are among the most commonly used techniques.
Stolen credit cards can be used by threat actors as intermediates to promote the sale of other illicit services or products
According to Cybersixgill, over 45 million compromised credit cards were accessible for sale on underground credit-card markets during the last six months of 2020. While it is currently unknown how many of the cards are being used abusively, 27% of the cards in the sample were active and could be used for illegal purchases.
Cyble compiled a list of the top 500 financial institutions based on the number of stolen credit cards that have been discovered. The list includes BBVA Bancomer S.A. with 24,307 cards, JP Morgan Chase Bank N.A. with 27,441 cards, Sutton Bank with 30,480 cards, Banco Santander (Brazil) with 38,010 cards, and State Bank of India with 72,937 cards, according to the latest available data.