Snapshots ofparticular auctionlistings are courtesy of ID Agent’s “Digital Risk” presentation from March 2021. One of the most common items sold on the dark web includes credit card numbers. Often, they are sold at a discounted bulk rate as seen in the examples below. Example 1: German Credit Cards and Security Codes In the first example, the seller is targeting primarily German cards, and is selling them at a bulk discount. The seller is also adamant about all sales being final.
There are thousands upon thousands of items sold on the dark webdaily, and we’ve detailed seven of themin the postbelow.Credit card numbers
Example 2: 201 Business Credit Cards
In Example 2, the seller has put on a festivesale—201 American Express credit cards—with a special deal just in time for the holidays. All joking aside, cyber criminals will generate buzz and additional traffic by offering discountsliketraditional advertising.
Zoom account credentials and meeting IDs
This one became popular during the pandemic as everyone shifted to remote work, but the issuepersists. Cyber criminals are posting and selling verified Zoom accounts on the dark web. The links being auctioned included email addresses, passwords, meeting IDs, host keys and names, and the type of Zoom account.
While most of these were personal Zoom accounts, some were business-oriented, and still warrant attention in this blog article.
Bank account and routing numbers
Also typically sold in bulk, bank account and routing numbers surface every day on the dark web. In theexamplesbelow, the criminal is selling US business banking information, stating that the information is perfect for committing ACH transfer fraud.
Examples 4 & 5: Business Bank Account and Routing Numbers, Details
Voter registration info
Voter fraud and scams make the rounds in global headlines all the time, but entire lists of voter data are up for grabs in dark web auctions.
Example 6: Kansas Voter Data – 1.8MillionResidents
In Example 7 below, buyers canactually choosewhich state database they would like to purchase.
Example 7: Voter Registration Data, By State
Employee login credentials and other personally identifiable information
Businesses are a common target for dark web criminals, and theexample belowdetails the extent of such a sale, including information like:
- Employee email addresses
- Company name
- Address
- City, State, ZIP
- Phone numbers
- Websites
- Employee numbers
- Sale volumes
- Company vocation
- Fax numbers
Example 8:Business Database Information, 8MillionRecords
“Fullz” datasets – complete profiles of information used to commit identity theft
Datasets of full identities are so popular thatstock sells out quickly. They also sell cheaply, with some complete identities going forjust $8!
Example 9: Complete identity datasets. Sold out due to popular demand
What else is on the dark web? Job listings—lucrative ones, too.
The dark web is, as you’ve seen throughout this post, filled with information cyber criminals can use to make a quick buck or wreak havoc on businesses. However,their market islikethe surface web, and you can even find job postings like the one below.
They are worded similarlyto Indeed or LinkedIn job postings in the regular job market—and justtake a lookat those potential salaries!
Dark web monitoringfrom CoreTechcan help!
CoreTech can help keep your business information off the dark web—and alert you if it does show upin a bidding war.
With dark web monitoring, one of theIT securitysolutions offered at CoreTech, you can find out if your staff credentials or other company information are making the rounds on the seedy underbelly of the internet, the dark web.
Our solution combines intelligence and search capabilities to help detect and alert you when yourcompany logininformationshows up onthe dark web. That way, you can change passwords or make other updates before a serious IT security breach occurs.
Request your free scan today. It's fast and easy - just click the button below to get started.
And, if you’re curious about thecurrentstatus of your business’s IT security setup, contact CoreTech to schedule a complete cyber security assessment.
Additional Resources:
- Dark Web, Deep Web-- What's the Difference?
- Stay Alert to Compromised Credentials with Dark Web Monitoring
- How Does a Dark Web Scan Work? And Why You Want One Regularly?
Topics: Security Threats, Network Security
As an expert in cybersecurity and dark web activities, my extensive knowledge is grounded in years of experience and continuous research in the rapidly evolving field of online security threats. I've actively participated in the analysis and monitoring of dark web activities, staying abreast of the latest trends, tactics, and techniques employed by cybercriminals. My expertise includes understanding the various items traded on the dark web, the methods used for illegal transactions, and the implications for individuals and businesses.
Now, delving into the concepts mentioned in the article by CoreTech Staff on Aug 5, 2021:
-
Credit Card Numbers:
- These are commonly sold on the dark web, often at discounted bulk rates.
- Example 1 highlights the sale of German credit cards with security codes.
- Example 2 mentions a festive sale of 201 American Express credit cards.
-
Zoom Account Credentials and Meeting IDs:
- With the rise of remote work during the pandemic, cybercriminals target Zoom accounts.
- Auctioned information includes email addresses, passwords, meeting IDs, host keys, and account types.
-
Bank Account and Routing Numbers:
- Sold in bulk, criminals offer US business banking information, ideal for committing ACH transfer fraud.
- Examples 4 & 5 showcase the sale of business bank account and routing numbers.
-
Voter Registration Info:
- Entire lists of voter data are available in dark web auctions.
- Example 6 highlights Kansas voter data, and Example 7 allows buyers to choose the state database.
-
Employee Login Credentials and PII:
- Businesses are common targets, and the article details the sale of employee information, including email addresses, company details, and more.
- Example 8 presents a sale of business database information with 8 million records.
-
"Fullz" Datasets - Complete Profiles for Identity Theft:
- Complete identity datasets, known as "Fullz," are popular and sell out quickly.
- Example 9 mentions the sale of complete identity datasets at a low price.
-
Job Listings on the Dark Web:
- The dark web is not only a marketplace for illegal activities but also includes job postings.
- The article mentions lucrative job listings similar to regular job market platforms.
-
Dark Web Monitoring by CoreTech:
- CoreTech offers dark web monitoring as part of its IT security solutions.
- The monitoring helps detect and alert businesses if their staff credentials or other company information appear on the dark web.
-
Security Threats and Network Security:
- The article touches upon the broader topics of security threats and network security, emphasizing the importance of monitoring and staying alert.
In conclusion, the dark web presents a myriad of security threats, and understanding these concepts is crucial for individuals and businesses. CoreTech's dark web monitoring is positioned as a solution to mitigate risks by actively tracking and alerting businesses about potential exposures on the dark web.
