This holiday season, more consumers than ever will be shopping digitally — and cybercriminals are already capitalising on the opportunity. Greg Foss, Senior Cybersecurity Strategist at VMware Carbon Black, looked through the dark web to find that:
- There’s a continued rise in e-skimming attacks in the retail sector, where attackers inject JavaScript into website payment processing pages in order to siphon credit cards and account credentials from customers.
- Magecart is one of the most prominent groups behind this activity, consistently extending their capabilities and improving their tactics to infiltrate e-commerce applications, evade detections, and siphon off sensitive card data.
- Swiped credit cards are going for an average rate of $10-20/card on the dark web
- PayPal accounts are selling for $2-10/account, with those accounts loaded with more money costing more.
Cybersecurity researcher commented below on this findings.
The opinions expressed in this post belongs to the individual contributors and do not necessarily reflect the views of Information Security Buzz.