‘ValidCC,’ a Major Payment Card Bazaar and Looter of E-Commerce Sites, Shuttered
Summary: ValidCC, a dark web shop that for more than six years hacked online merchants and sold stolen payment card data, abruptly closed last week after its proprietors said their servers were seized in a coordinated law enforcement operation. Group-IB attributed nearly 700 compromised e-commerce sites and at least 13 third-party software suppliers to the gang it called UltraRank, and ValidCC's front man SPR said the site lost more than 600,000 unsold stolen card accounts and took in roughly $100,000 in virtual currency deposits daily.
What you should know: The gang behind ValidCC compromised at least 13 third-party suppliers whose software components are used by countless online stores across Europe, Asia, North and Latin America - the same supply chain path that reaches merchants who never dealt with the shop directly.
Read the original at Krebs on Security ↗
- Topics
- Cybercrime & Law Enforcement
- Related
- Gootloader Malware Disrupted After Infecting 25,000 Computers Cyber Risks · Nov 13, 2026354 dark web vendors and buyers arrested in Operation Tor Nado Cyber Risks · Nov 13, 2026Law Enforcement Disrupts Gootloader, CastleRAT, and StealC Infrastructure Cyber Risks · Nov 13, 2026