Will the Real Joker’s Stash Come Forward?
Summary: KrebsOnSecurity reports that a network of look-alike carding sites, registered over several years to a handful of email addresses including fkaboot@gmail.com, domain@paysafehost.com and zanebilly30@gmail.com, impersonates major stolen-card markets such as Joker's Stash, VaultMarket, BriansClub and Infraud. The trail leads to Xperia Solution, a website development firm and domain registrar in Islamabad, Pakistan, whose CEO is listed as Muhammad Junaid and whose project manager is Yasir Ali; the real Joker's Stash is reachable only through a blockchain DNS browser extension for .bazar and .bit domains that sit outside ICANN's authority.
Key Takeaway: One researcher lost $200 in bitcoin to a fake Joker's Stash before his credentials stopped working, and FireEye reports a surge over the past year in threat actors adding blockchain domain support to their malware - infrastructure that is cheap, anonymous, and hard for law enforcement to seize.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026