Cyber Risks · Krebs on Security

Trump’s Dumps: ‘Making Dumps Great Again’

Summary: A stolen credit card shop called Trump's-Dumps is advertising more than 133,000 card dumps for sale at prices from just under $10 to more than $40 in Bitcoin, hosted on a Russian server alongside carding sites Fe-shop and Monopoly. Krebs links the shop's Jabber contacts at trumplink[dot].su to an email address tied to at least 15 other domains that RiskIQ says appeared in e-commerce hacking campaigns since March 2016 against unpatched Magento, Powerfront and OpenCart stores, including a breach of the U.S. Senate GOP committee site among more than 5,900 others.

What's compelling: The same domain infrastructure behind this shop traces to attacks on more than 5,900 sites that accept credit cards, so the criminal operation is not just selling stolen data but actively feeding it through unpatched shopping cart software.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related