The Market for Stolen Account Credentials
Summary: A seller on the dark web service Carder's Paradise, whose wholesaler division is called Seller's Paradise, sold roughly 35,000 stolen username and password pairs in the first seven months of 2017, earning more than $288,000 at an average of $8.19 per credential on consignment. The service charges customers about $15 per credential on average across more than 200 e-commerce and banking sites, with frys.com logins at $190, AT&T Wireless with email inbox access at $30, NavyFederal.com at $60, and Thomson Reuters properties at $50, and it also sells full identities priced by FICO score up to $150 and credit reports from the three major bureaus at $35 each.
What you should know: Nearly 9,000 different customers bought this one seller's credentials, and the same underground market prices a full identity with a perfect 850 FICO score at up to $150 - so the Equifax breach data on 145 million Americans entered a market where it was already broadly for sale.
Read the original at Krebs on Security ↗
- Topics
- Malware
- Related
- ARTEX and beyond: AI-enabled penetration testing platforms Cyber Risks · Nov 13, 2026Fake GTA 6 download goes after Steam logins and crypto wallet data Cyber Risks · Nov 13, 2026Operation Endgame Takes Down Gootloader, CastleRAT and StealC Servers, Seizes 6.4M Stolen Logins Cyber Risks · Nov 13, 2026