A threat actor is promoting a new credit card market by releasing one million stolen credit cards between 2018 and 2019 on hacking forums.
Carding is the trafficking and use of stolen credit cards. These credit cards are stolen through point-of-sale malware, magecart attacks on websites, and information-stealing Trojans.
These stolen credit cards are then sold in criminal card marketplaces where other threat actors buy them to make purchases online, or more commonly, to buy hard-to-trace prepaid gift cards.
Last week, a new criminal card marketplace called AllWorld Cards posted on numerous hacking forums where they leaked a million credit cards for free.
According to the forum post, these credit cards were stolen between 2018 and 2019.
The threat actor claims that a random sample of 98 cards showed that approximately 27% of the cards were still active.
However, a report from Italian security firm D3Labs shows that 50% is still valid, a much more significant amount than was initially stated.
“At present, the feedback returned to our analytics team is still limited, but they are showing an incidence close to 50% of the cards still operational, which have not yet been identified as compromised.” reported D3Lab in a blog post about the leak.
Cyble cybersecurity firm also analyzed the credit card dump and told BleepingComputer that the leak contains credit card numbers, expiration dates, CVVs, names, countries, states, cities, addresses, zip codes for each credit card, and phone / email numbers.
While Cyble has only analyzed 400,000 cards so far, the top five partner banks are:
- STATE BANK OF INDIA (44,654 cards)
- JPMORGAN CHASE BANK NA (27,440 cards)
- BBVA BANCOMER SA (21,624 cards)
- THE TORONTO-DOMINION BANK (14,647 cards)
- POSTE ITALIANE SPA (POSTA BANK) (14,066 cards)
To verify if your card was part of this breach, Cyble imported the data into his. AmIBreached Service.
If your information was found in this breach, it is strongly recommended that you contact your credit card company to request a new credit card and number.
You should also carefully review your credit card statement for historical fraudulent charges and future charges.
The All World Cards market
The All World Cards site is relatively new to the card scene, and the promotion has been received with appreciation by many threat actors who have downloaded the dump.
The carding site started in May 2021 and has an inventory of 2,634,615 credit cards. The country with the most cards is the United States, with 1,167,616 cards on sale.
The cards range in price between $ 0.30 and $ 14.40, and 73% of the cards cost between $ 3.00 and $ 5.00.
All World Cards is a new market that cybersecurity companies and threat intelligence companies can observe.
Their goal is to be a big gamer, and with this million free downloads, they will likely attract many other threat actors to their market.