Cyber Risks · Krebs on Security

How Much is That Phished PayPal Account?

Summary: A Krebs on Security report describes iProfit.su, a website selling compromised PayPal accounts that its proprietor said were stolen through phishing, with verified accounts priced from $2.50 up to roughly 8 to 12 percent of their balance. The shop also sold unverified accounts in bulk at $50 per 100, some listings included the victim's email username and password, and the same operators ran blackservice.su, a carding forum.

What's compelling: A verified PayPal account with a $1,102.37 balance was listed for $45, and the article notes that accounts sold with email access point to password-stealing Trojans as well as phishing - so the credential theft behind these listings is the same exposure that reaches corporate accounts.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related