I’ll Take 2 Master Cards and a Visa, Please
Summary: A Krebs on Security report from September 2010 describes underground sites such as rock3d.cc where stolen Visa, MasterCard, Discover and Amex card numbers sell for about $1.50 for U.S. accounts and $4 for U.K. accounts, with the data attributed to malware like the ZeuS Trojan. The site also sells "fullz" - card data plus cardholder details such as date of birth and mother's maiden name - and added a $0.60 fee for narrowing a search by city and state, raising one MasterCard to $2.10.
Why it matters: At roughly $1.50 per U.S. card, the street price of a stolen account number is low enough that a glut of stolen data and vendor competition, not scarcity, set the market - a volume problem rather than a price one for anyone defending cardholder data.
Read the original at Krebs on Security ↗
- Topics
- Malware
- Related
- ARTEX and beyond: AI-enabled penetration testing platforms Cyber Risks · Nov 13, 2026Fake GTA 6 download goes after Steam logins and crypto wallet data Cyber Risks · Nov 13, 2026Operation Endgame Takes Down Gootloader, CastleRAT and StealC Servers, Seizes 6.4M Stolen Logins Cyber Risks · Nov 13, 2026