bugtraq - Re: [apwg] Graph analysis of stolen credit cards

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <OF878C66AC.25EA2843-ON8625717A.0047C903-8525717A.00484D7E@discoverfinancial.com>
Date: Fri, 26 May 2006 09:09:47 -0400
From: glennhall@...coverfinancial.com
To: Lance James <phishing@...urescience.net>
Cc: phishing@...urityfocus.com, Phish-Net <phish-net@...ta.net>,
	"full-disclosure@...ts.grok.org.uk"
	<full-disclosure@...ts.grok.org.uk>, bugtraq@...urityfocus.com,
	"Malicious Activity Awareness &amp;
	Response Discussions" <general-discussion@...-aware.org>, Apwg
	<apwg@...iphishing.kavi.com>
Subject: Re: [apwg] Graph analysis of stolen credit cards

It makes me feel both happy and very uneasy when Discover Card is not on
the list.  Just to clarify, when you say stolen cards, you really mean
stolen card data, correct?  In addition, in your analysis of the carder
forums, can you tell if the majority of the card data is obtained by the
carders via phishing and pharming, hackings, or both?

Thanks.
(Embedded image moved to file: pic29711.jpg)

             Lance James                                                   
             <phishing@...ures                                             
             cience.net>                                                To 
                                       "Malicious Activity Awareness &amp; 
             05/26/2006 12:56          Response Discussions"               
             AM                        <general-discussion@...-aware.org>, 
                                       Phish-Net <phish-net@...ta.net>,    
                                       Apwg <apwg@...iphishing.kavi.com>,  
                                       phishing@...urityfocus.com,         
                                       bugtraq@...urityfocus.com,          
                                       "full-disclosure@...ts.grok.org.uk" 
                                       <full-disclosure@...ts.grok.org.uk> 
                                                                        cc 

                                                                   Subject 
                                       [apwg] Graph analysis of stolen     
                                       credit cards                        

Hi all,

We took one sample of one carding/phishing forum that our Global
Surveillance Center was monitoring and sampled the set into a graph that
lists the top 10 banks and the losses over the last month. As you can
see, it's obvious who the top credit card companies are out there, but
at the same time, we can see an ever increasing on the top targets but
not necessarily an increase on the lower tiers over the entire three
months, but in the first two we see a significant increase in success
with stolen credit cards in general. In this case, the loss that we
captured (which probably isn't nearly the number captured by this forum)
was a little over 21,000 credit cards.

Thought this might interest some, and if this is interesting, we are
going to be providing a graph of the losses of top targets with malware
in the upcoming weeks.

Attached is the chart.

--
Best Regards,
Lance James
Secure Science Corporation
www.securescience.net
Author of 'Phishing Exposed'
http://securescience.net/home/news/phishingexposed.html
**********************************************
* New IntelliFound Service 2 weeks free               *
* Real-Time Identity Surveillance Service    *
* https://slam.securescience.com/signup.cgi  *
**********************************************

(Embedded image moved to file: pic09317.gif)
Download attachment "pic29711.jpg" of type "image/jpeg" (14719 bytes)

Download attachment "pic09317.gif" of type "image/gif" (16989 bytes)

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/