Details for millions of payment cards put up for sale on Joker's Stash

guest · Oct 28, 2019

Details for 1.3 million Indian payment cards put up for sale on Joker's Stash
Exclusive: Today's Indian card dump considered one of the largest of its kind; prized at more than $130 million
October 29, 2019
https://www.zdnet.com/article/detai...ayment-cards-put-up-for-sale-on-jokers-stash/

In what security researchers have dubbed one of the biggest card dumps in recent years, more than 1.3 million payment card details have been put up for sale on Joker's Stash, the internet's largest carding shop, ZDNet has learned.

The new upload contains data primarily from Indian cardholders, security researchers at Group-IB told ZDNet today, after spotting the new upload just hours before.
Group-IB said the cards are being sold at a top-tier price of $100/card, putting the hackers on a trajectory of making more than $130 million from their latest haul.

"More than 98% belong to Indian banks, 1% - to Colombian, and more than 18% of the 550K cards that have been analyzed so far belong to a single Indian bank," the company added.
Joker's Stash is one of the oldest card shops around, is available on the dark web, and is also known to be the place where major cyber-crime groups like FIN6 and FIN7 both sell card dumps.

Today's Indian card dump is the third major card dump this year, in terms of size.
Click to expand...

guest · Feb 8, 2020

Group-IB detects Half a Million Indian Banks’ Cards on Joker’s Stash Cardshop
February 8, 2020
https://securityaffairs.co/wordpress/97467/cyber-crime/jokers-stash-indian-banks-record.html

Group-IB, a Singapore-based cybersecurity company that specializes in preventing cyberattacks, has detected a database containing over 460,000 payment card records uploaded to one of the most popular darknet cardshops (Joker’s Stash) on February 5. Over 98 percent of the records were from the biggest Indian banks.
This is the second major upload of payment records related to Indian cardholders registered by Group-IB in the past several months. The first one was reported by Group-IB last October.

According to Group-IB Threat Intelligence team, the database, comprising 461,976 payment records, in particular, exposed card numbers, expiration dates, CVV/CVC codes and, in this case, some additional information such as cardholders’ full name, as well as their emails, phone numbers and addresses.
All the cards from the database are being sold for $9 for piece, with the total underground market value of all the batch standing at $4,157,784
Click to expand...

guest · Apr 24, 2020

400.000 US, South Korean card records put up for sale online
April 24, 2020
https://www.bleepingcomputer.com/ne...h-korean-card-records-put-up-for-sale-online/

Details on roughly 400,000 payment cards related to US and South Korean financial organizations and banks are currently up for sale on Joker's Stash, the largest and most popular carding shop on the Internet.

The seller of this huge card dump put a $1,985,835 price tag on the full set and says that the buyers should expect a validity rate of around 30-40%.
While the database containing 397,365 card records is advertised as a mix of cards from the US and various EU countries, it's actually made up of 198,233 items South-Korean card records (about 49.9% of the total number of items) and 49.3% are from US banks and financial orgs.

"It should be noted that it is the biggest sale of South Korean records on the dark web in 2020, which contributes to the growing popularity of APAC-issued card dumps in the underground," according to security researchers at Group-IB who spotted the payment card database put up for sale on April 9.
"Even though, there is not enough information in this dump to make online purchases, fraudsters who buy this data can still cash out stolen records," Group-IB Senior Threat Intelligence analyst Shawn Tay said.
Click to expand...

Group-IB: South Korean and US payment card details worth nearly $2M up for sale in the underground

guest · Oct 16, 2020

Joker's Stash claims 3 million cards stolen from Dickey's Barbecue
October 15, 2020
https://www.cyberscoop.com/jokers-stash-forum-claims-3-million-cards-stolen-dickeys-barbecue/

Joker’s Stash, one of the most notorious web forums for stolen credit card data, has claimed a new scalp.

Sellers on the site this week claimed to be offering 3 million payment card numbers used at Dickey’s Barbecue Pit, a U.S. restaurant chain, researchers at intelligence firm Gemini Advisory said Thursday. More than 100 of the barbecue joint’s locations were affected by the breach, and the data is being sold for a median price of $17 per card, according to the research.
The data from Dickey’s Barbecue Pit customers appears to have been compromised between July 2019 and August 2020, according to Gemini Advisory.

“Joker’s Stash remains one of the most active, persistent, and affluent cybercriminals of our time,” Gemini Advisory CEO Andrei Barysevich said in an email. “In the past year alone, we estimate that this actor’s operations earned Joker and their accomplices close to half a billion dollars.”
Click to expand...

Gemini Advisory: Joker’s Stash Breaches Dickey’s Barbecue Pit

The Joker’s Stash dark web marketplace, known for advertising and uploading major breaches containing millions of compromised cards, has uploaded its latest breach, titled “BLAZINGSUN.”

Gemini Advisory determined that the compromised point of purchase (CPP) was Dickey’s Barbecue Pit, a US-based restaurant franchise.

However, given the widespread nature of the breach, the exposure may be linked to a breach of the single central processor, which was leveraged by over a quarter of all Dickey’s locations.

Gemini sources have also determined that the payment transactions were processed via the outdated magstripe method, which is prone to malware attacks.

Click to expand...

guest · Dec 18, 2020

Interpol and the FBI Seized “Joker’s Stash” Blockchain Domains
December 18, 2020
https://www.technadu.com/interpol-fbi-seized-jokers-stash-blockchain-domains/233058/

An important development is shaking the dark web at the moment, as the blockchain domains of the popular carding marketplace “Joker’s Stash” have been seized by Interpol and the FBI. The users who appear to be the platform administrators have played down the incident, saying that they will have other blockchain domains up and running in a couple of days and that the Tor versions of the site remain unaffected.

Seeing the interruption in the operation of these domains is weird and remains inexplicable as of now. If we see more of this kind of takedowns, then we can say that decentralized DNS has a weakness with certainty.
Click to expand...

Digital Shadows comments that there are many possible explanations for what may have happened. One is a hack on the site and a defacement using the FBI seizure notice to spread fear to the users and damage the platform’s reputation. Another one would be an incomplete attempt from the authorities to take down Joker’s Stash, followed by the retraction of the banner so as not to blow the operation. For now, the blockchain sites are returning a “Server Not Found” message, so we’ll have to wait and see.
Click to expand...

Digital Shadows: How Bizarre: Joker’s Stash .Bazar Site Allegedly Seized By Law Enforcement
Intel 471: More annoying than crippling: Joker’s Stash takedown is temporary

Log in or Sign up

Details for millions of payment cards put up for sale on Joker's Stash

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

Log in or Sign up

Details for millions of payment cards put up for sale on Joker's Stash

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

Useful Searches