59.4 million compromised payment card records posted for sale on dark web in 2022: report

guest · Jan 17, 2023

By Jonathan Greig @jgreigj - January 17, 2023

Nearly 60 million compromised payment card records were posted for sale on dark web platforms in 2022, according to new report.
Click to expand...

Researchers with Recorded Future’s Insikt Group said the numbers were actually a stark decrease compared to the numbers seen in 2021, which reached almost 100 million compromised payment card records. The Record is an editorially independent unit of Recorded Future.

Hackers physically compromise merchant devices to steal payment card data to facilitate Card-Present (CP) transactions. While cybercriminals typically use digital compromises — often with Magecart e-skimmer infections — to steal card data from online Card-Not-Present (CNP) transactions.
Click to expand...

CP breaches in 2022 overwhelmingly affected small restaurants and bars but were down 62% compared to 2021. The researchers said the numbers have steadily declined over the years “due to the rising global adoption of more secure in-person payment methods.”

Contactless payment, EMV chips and the general decrease in in-person transactions have all contributed to the decrease, according to the researchers.
Click to expand...

CNP mostly targeted online ordering platforms – Recorded Future’s Magecart Overwatch discovered 1,520 unique malicious domains involved in the infections of 9,290 unique e-commerce domains at any point in 2022. Most involved campaigns that saw groups use fake payment card forms or take over legitimate merchant web infrastructure to install e-skimmers.

Just one Magecart campaign in January infected 80 restaurants using MenuDrive and 74 using Harbortouch. InTouchPOS faced its own Magecart campaign that resulted in e-skimmer infections for 157 restaurants using the platform, according to the report.
Click to expand...

Recorded Future noted that most hackers who get the compromised payment cards are not the same ones who use it for fraud, typically selling it off in ”carding shops.”

“Payment card fraud is an unpredictable, time-consuming process. Fraudsters must operate logistical networks, resell goods and services, devise and execute cash-out schemes, and launder their criminal profits,” the researchers said.
Click to expand...

Insikt Group: Annual Payment Fraud Intelligence Report: 2022

January 17, 2023
This report provides trends and metrics for the payment card fraud landscape in 2022 and identifies the merchants most frequently compromised or abused as tester merchants. The target audience of this report is fraud and cyber threat intelligence (CTI) teams at financial institutions and merchant services companies.
Click to expand...

Log in or Sign up

59.4 million compromised payment card records posted for sale on dark web in 2022: report

guest Guest

Log in or Sign up

59.4 million compromised payment card records posted for sale on dark web in 2022: report

guest Guest

Useful Searches