A massive stolen data holding over 1.3 million credit and debit card records of Indian customers have been listed on the Dark Web for open sale that can fetch up to $130 million.
The data was uploaded on Joker’s Stash – one of the oldest card shops on the dark web which is known to be the place where major hackers sell card dumps, on October 28, according to the reports.
As per ZDNet report, it is the rarest and largest data dump in the history. The researchers from cyber security farm Group-IBA found the Indian card holders’ listing. Joker’s Stash is advertising it under the “INDIA-MIX-NEW-01” heading.
Every single set of data that belong to various Indian Banks, is valued at $100—higher than the usual rates.
“Early data analysis suggests the card details may have been obtained via skimming devices, installed either on ATMs or point of sale (PoS) systems,” report states, as per IANS.
The data dump includes “Track 2 data, usually found on a payment card’s magnetic stripe. The presence of this kind of data automatically rules out skimmers installed on websites (Magecart attacks), where Track 1 and Track 2 is never used,” the report added.
Usually, criminals use such card data to clone legitimate cards and withdraw money from ATMs in so-called “cash outs.”
In a similar scenario, card details for around 2.15 million Americans were put up for sale on Joker’s Stash.
In the past few years, Joker’s Stash has become one of the primary underground credit card shops where criminals purchase a significant number of stolen card details.
(With input from agencies)