full-disclosure - Re: [apwg] Graph analysis of stolen credit cards

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Fri May 26 17:07:26 2006
From: glennhall at discoverfinancial.com (glennhall@...coverfinancial.com)
Subject: Re: [apwg] Graph analysis of stolen credit cards

It makes me feel both happy and very uneasy when Discover Card is not on
the list.  Just to clarify, when you say stolen cards, you really mean
stolen card data, correct?  In addition, in your analysis of the carder
forums, can you tell if the majority of the card data is obtained by the
carders via phishing and pharming, hackings, or both?

Thanks.
(Embedded image moved to file: pic29711.jpg)


                                                                           
             Lance James                                                   
             <phishing@...ures                                             
             cience.net>                                                To 
                                       "Malicious Activity Awareness &amp; 
             05/26/2006 12:56          Response Discussions"               
             AM                        <general-discussion@...-aware.org>, 
                                       Phish-Net <phish-net@...ta.net>,    
                                       Apwg <apwg@...iphishing.kavi.com>,  
                                       phishing@...urityfocus.com,         
                                       bugtraq@...urityfocus.com,          
                                       "full-disclosure@...ts.grok.org.uk" 
                                       <full-disclosure@...ts.grok.org.uk> 
                                                                        cc 
                                                                           
                                                                   Subject 
                                       [apwg] Graph analysis of stolen     
                                       credit cards                        
                                                                           
                                                                           
                                                                           
                                                                           
                                                                           
                                                                           




Hi all,

We took one sample of one carding/phishing forum that our Global
Surveillance Center was monitoring and sampled the set into a graph that
lists the top 10 banks and the losses over the last month. As you can
see, it's obvious who the top credit card companies are out there, but
at the same time, we can see an ever increasing on the top targets but
not necessarily an increase on the lower tiers over the entire three
months, but in the first two we see a significant increase in success
with stolen credit cards in general. In this case, the loss that we
captured (which probably isn't nearly the number captured by this forum)
was a little over 21,000 credit cards.

Thought this might interest some, and if this is interesting, we are
going to be providing a graph of the losses of top targets with malware
in the upcoming weeks.

Attached is the chart.

--
Best Regards,
Lance James
Secure Science Corporation
www.securescience.net
Author of 'Phishing Exposed'
http://securescience.net/home/news/phishingexposed.html
**********************************************
* New IntelliFound Service 2 weeks free               *
* Real-Time Identity Surveillance Service    *
* https://slam.securescience.com/signup.cgi  *
**********************************************

(Embedded image moved to file: pic09317.gif)
-------------- next part --------------
A non-text attachment was scrubbed...
Name: pic29711.jpg
Type: image/jpeg
Size: 14719 bytes
Desc: not available
Url : http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20060526/17156eb2/pic29711-0001.jpg
-------------- next part --------------
A non-text attachment was scrubbed...
Name: pic09317.gif
Type: image/gif
Size: 16989 bytes
Desc: not available
Url : http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20060526/17156eb2/pic09317-0001.gif