Cyber Risks · Krebs on Security

Carders Park Piles of Cash at Joker’s Stash

Summary: Joker's Stash, a carding shop that opened in early October 2014, has become one of the busiest stolen-card markets online, often adding hundreds of thousands of freshly stolen cards each week and drawing dozens of customers who have spent five and six figures. The site claims all its cards are "exclusive, self-hacked dumps," pays out through Bitcoin, and runs a loyalty rating that subtracts refunds from deposits, with a 30 percent discount for customers who top up bitcoin balances to $10,000 or more.

Why it matters: KrebsOnSecurity tied Joker's Stash to accounts compromised in retail breaches it had disclosed over the prior two years, including Hilton Hotels and Bebe Stores, and identified hundreds of three-word partner domains mostly registered over the past year and nearly all abusing services from New Jersey-based Vultr Holdings.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related