Cyber Risks · Krebs on Security

‘Mega Search’ Aims to Index Fraud Site Wares

Summary: A service called MegaSearch.cc, launched at the end of 2011, indexes the first six digits (Bank Identification Numbers) of compromised payment cards for sale across five fraud shops, letting buyers find which shop holds cards from a given bank without creating accounts at each store. Its creator told KrebsOnSecurity the indexed shops held roughly 360,000 compromised accounts at launch, have since moved more than 200,000 cards, and that the site currently indexes 352,000 stolen account numbers, with Citibank cards the most sought-after, followed by FIA Card Services, Capital One and Chase.

Key Takeaway: One operator working with five shops reports moving more than 200,000 stolen cards in roughly a year, and he says Social Security numbers and proxies are next on the index - a consolidation of criminal inventory that lowers the effort needed to turn a breach into fraud.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related