How much is your personal data worth to you? A lot. (Thanks, Equifax.) And how much is it worth to an identity thief? Verified high-limit credit cards from countries including the U.S., Japan, and South Korea are selling on the dark web for the bitcoin equivalent of about $10 to $20, according to an annual report on cybercrime by Secureworks, a unit of Dell Inc.
The dark web is “the collection of Internet forums, digital shop fronts and chat rooms that cybercriminals use to form alliances, trade tools and techniques, and sell compromised data that can include banking details, personally identifiable information and other content,” as Secureworks defines it.
Verified means the seller has tested out transactions on the card and found it hasn’t been canceled yet. For scammers on a budget, there’s unverified stolen credit card data, which comes out to pennies a card when bought in bulk.
This is a screen grab of merchandise for sale on the dark web.
Business credit cards are in favor, since they sometimes have no limit on spending, Tilley said. Those and high-end personal cards—say, a Platinum American Express that has been verified and has an 85 percent rating (judged by the seller to have an 85 percent chance of being successfully used in a fraud)—will go for $15 to $20. A regular Mastercard that doesn’t have a big limit might go for $9. An underground market inexplicably called Trump’s Dumps is one of the many sellers of this kind of stolen credit card data.
But wait, there’s more. Underground markets also sell full identities of individuals just like you for as little as $10 apiece. They’re called fullz, “dossiers that provide enough financial, geographic and biographical information on a victim to facilitate identity theft or other impersonation-based fraud,” the report explains. Fullz can help a criminal get past those irritating “secret questions” that sites ask to verify your identity.
read more here https://www.bloomberg.com/news/articles/2017-09-15/equifax-hack-your-social-security-and-identity-are-for-sale