Page 42 - CDM Cyber Warnings November 2013

Doxing services, where a cybercriminals steals as much information as they can about a victim

or target via malware based attacks, social media, social engineering ranges from $25 to $100.

A cyber criminal for nearly $300 can acquire stolen credentials for a bank account with a
balance of $70,000 to $150,000, yes my friend the amount of balance is one the main factor that

influence its price.

The increased number of data breaches (e.g. MacRumors, LexisNexis, Dun & Bradstreet and
Kroll Background America, vBulletin) are flooding the underground market with huge quantity of
data stolen during the cyber attacks, including bank account credentials, Social Security

Number and many other personal information. The availability of so much information is leading
to a leveling down of its prices.

"I expected to see the drop," "The best thing we could hope for was for these prices to be very

high. It would be a more encouraging trend if the prices increased." said Stewart, who is director
of malware research for Dell SecureWorks.

Stolen personal identities were quoted for $40 per U.S. stolen ID and $60 for a stolen overseas
ID in 2011, today the quotation are 33 to 37 percent cheaper.

The experts found more cybercriminals selling a cardholder victim's birth date and Social
Security Number as well as the card data itself to ensure the stolen card data can be used.

"The hackers have come to realize that merely having a credit card number and corresponding

CVV code (Card Verification Value--the 3 or 4 digit number on one’s credit or debit card) is not
always enough to meet the security protocols of some retailers," "Hackers are also selling
cardholders’ Date of Birth and/or Social Security Number. Having this additional information

42 Cyber Warnings E-Magazine – November 2013 Edition
Copyright © Cyber Defense Magazine, All rights reserved worldwide