bugtraq - Re: [General-discussion] Graph analysis of stolen credit cards

Open Source and information security mailing list archives

Date: Thu, 25 May 2006 23:38:56 -0700
From: Lance James <phishing@...urescience.net>
To: Lance James <phishing@...urescience.net>
Cc: phishing@...urityfocus.com, "full-disclosure@...ts.grok.org.uk"
	<full-disclosure@...ts.grok.org.uk>, Phish-Net
	<phish-net@...ta.net>, bugtraq@...urityfocus.com, "Malicious
	Activity Awareness &amp;
	Response Discussions" <general-discussion@...-aware.org>, Apwg
	<apwg@...iphishing.kavi.com>
Subject: Re: [General-discussion] Graph analysis of stolen
	credit cards

One thing to add:

This is one group, with 21,000 cards per month (that we know about) and
law enforcement estimates about $500.00 per card in average loss. At
that rate, in 3 months, one carding group causes $10,500,000.00 in loss.
And this carding group is at the low end of the totem poll.

Lance James wrote:
> Hi all,
>
> We took one sample of one carding/phishing forum that our Global
> Surveillance Center was monitoring and sampled the set into a graph that
> lists the top 10 banks and the losses over the last month. As you can
> see, it's obvious who the top credit card companies are out there, but
> at the same time, we can see an ever increasing on the top targets but
> not necessarily an increase on the lower tiers over the entire three
> months, but in the first two we see a significant increase in success
> with stolen credit cards in general. In this case, the loss that we
> captured (which probably isn't nearly the number captured by this forum)
> was a little over 21,000 credit cards.
>
> Thought this might interest some, and if this is interesting, we are
> going to be providing a graph of the losses of top targets with malware
> in the upcoming weeks.
>
> Attached is the chart.
>
>   
>
> ------------------------------------------------------------------------
>
> ------------------------------------------------------------------------
>
> _______________________________________________
> General-discussion mailing list
> General-discussion@...-aware.org
> http://mal-aware.org/mailman/listinfo/general-discussion
>   

-- 
Best Regards,
Lance James
Secure Science Corporation
www.securescience.net
Author of 'Phishing Exposed'
http://securescience.net/home/news/phishingexposed.html
**********************************************
* New IntelliFound Service 2 weeks free	     *
* Real-Time Identity Surveillance Service    *
* https://slam.securescience.com/signup.cgi  *
**********************************************

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives