By using this site, you agree to the Privacy Policy and Terms of Use.
Accept
Security Parrot - Cyber Security News, Insights and ReviewsSecurity Parrot - Cyber Security News, Insights and Reviews
Notification
Latest News
Android 14 will prevent malware from getting dangerous rights
February 12, 2023
Cybersecurity experts found malicious mods for Dota 2
February 12, 2023
The ESXiArgs encryptor has been updated. Data recovery is now impossible
February 12, 2023
Reddit has been hacked. Hackers stole source codes and internal data
February 12, 2023
The founder of the startup Webaverse was robbed of $ 4 million in cryptocurrency during a personal meeting
February 12, 2023
Aa
  • News
  • Tutorials
  • Security InsiderComing Soon
  • Expert InsightComing Soon
Reading: Carding site BidenCash gives away 1.2 million bank card data for free
Share
Security Parrot - Cyber Security News, Insights and ReviewsSecurity Parrot - Cyber Security News, Insights and Reviews
Aa
Search
  • News
  • Tutorials
  • Security InsiderComing Soon
  • Expert InsightComing Soon
Follow US
Security Parrot - Cyber Security News, Insights and Reviews > News > Carding site BidenCash gives away 1.2 million bank card data for free
News

Carding site BidenCash gives away 1.2 million bank card data for free

Last updated: 2022/10/10 at 12:40 PM
Security Parrot Editorial Team Published October 10, 2022
Share
SHARE

The carder darknet resource BidenCash again staged a high-profile “advertising campaign”. The site administration published a huge dump containing information about 1,221,551 bank cards for free, allowing anyone to download this data.

Let me remind you that the BidenCash website was launched in the spring of 2022 and almost immediately announced itself with a similar action: BidenCash operators decided to distribute a CSV file containing names, addresses, phone numbers, email addresses and bank card numbers to everyone for free, and thus advertise your platform. Then the experts reported that data about 6600 bank cards can be found in the dump, and about 1300 of them are new and valid cards.

As Bleeping Computer now reports, carders have begun a new, larger promotion, apparently designed to advertise new site URLs launched after the powerful DDoS attacks that BidenCash suffered last month.

To ensure a wider reach, scammers are promoting the new free map dump even on the open web and other hacker and carder forums. According to Cyble researchers, in total, the dump contains information about 1.2 million cards from around the world, with a validity period between 2023 and 2026. Most seem to belong to US users.

For most maps, the following data types are available:

  • Card number;
  • validity;
  • CVV number;
  • Owner’s name;
  • Name of the bank;
  • card type, status and class;
  • owner’s address (state and zip code);
  • E-mail address;
  • social Security number;
  • phone number.

Analysts believe that most of the card data was obtained from web skimmers: malicious scripts that hackers inject into the checkout pages of online stores. Such scripts steal information about bank cards and other user data.

Since dumps of this size are usually fakes on the dark web (outright fakes or old dumps with reworked data that epackaged under a new name), Bleeping Computer journalists carefully studied this “drain” together with analysts from the information security company D3Lab.

Unfortunately, the researchers confirmed that the data from several Italian banks is real, and the leaked records correspond to the real cards and their owners. However, most of the dump still turned out to be reworked and compiled from other leaks, for example, from the old dump of the All World Cards marketplace, which previously also distributed cards for free to everyone.

Judging by the sample studied by D3Labs experts, about 30% of the cards turned out to be “fresh”. If this result is extrapolated to the entire dump, about 350,000 cards distributed by the attackers may turn out to be valid. At the same time, the researchers say that approximately 50% of Italian cards may already be blocked, as issuing banks have detected fraudulent activity. This means that only about 10% of this leak may be of value to hackers.

Weekly Updates For Our Loyal Readers!

Security Parrot Editorial Team October 10, 2022
Share this Article
Facebook Twitter Email Copy Link Print

Archives

  • February 2023
  • October 2022
  • September 2022
  • August 2022
  • July 2022
  • June 2022
  • May 2022
  • April 2022
  • March 2022
  • February 2022
  • January 2022
  • December 2021
  • November 2021
  • October 2021
  • September 2021
  • August 2021
  • July 2021
  • June 2021
  • May 2021
  • April 2021
  • March 2021
  • February 2021
  • January 2021
  • December 2020
  • November 2020
  • October 2020
  • September 2020
  • August 2020
  • July 2020

You Might Also Like

News

Android 14 will prevent malware from getting dangerous rights

February 12, 2023
News

Cybersecurity experts found malicious mods for Dota 2

February 12, 2023
News

The ESXiArgs encryptor has been updated. Data recovery is now impossible

February 12, 2023
News

Reddit has been hacked. Hackers stole source codes and internal data

February 12, 2023

© 2022 Parrot Media Network. All Rights Reserved.

  • Home
  • Parrot Media Group
  • Privacy Policy
  • Terms and Conditions
Join Us!

Subscribe to our newsletter and never miss our latest news, podcasts etc..

Zero spam, Unsubscribe at any time.

Removed from reading list

Undo
Go to mobile version
Welcome Back!

Sign in to your account

Lost your password?