India Markets closed

Details of 1.3 Mn Indian Payment Card Holders For Sale On Dark Web

In what is being called as one of the biggest card dumps that have been found online in recent years, as per a ZDNet report, card details of more than1.3 million payment cardholders have been put online for sale on Joker’s Stash, a website on the dark web.

It has been found that more than 98 percent of the dump belongs to Indian banks while 1 percent belongs to Colombian banks, as revealed by security researchers at Group-IB, which is an organisation that provides security solutions against online fraud.

This is the third major card dump this year, in terms of size.

List of Indian card details that have been dumped on the dark web.

Also Read: Man steals credit card info of 1,300 people by memorising it

Joker’s Stash is a term used by security researchers to describe an online marketplace where hackers put card details up for sale and advertise the same as “card dumps”. It’s one of the oldest places where major cyber-crime groups dump card details.

Criminals usually buy the card data to clone them and use the same at ATMs to withdraw money.

The above is an example of how an advert on Joker Stash looks like which has card dumps from multiple countries. 

Group-IB found that the card details have been put online for as much as $100 per card. This puts the overall estimated earnings of the hackers up to $130 million.

Furthermore, it has been found that the breach has happened across multiple banks as the cards found online varied among several banks.

Also Read: India’s Big Debit Card Fraud: Beware, This Is Just the Beginning!

Because of the advert being very recent, Group-IB has not been able to find whether there has been any kind of breach till now. Data analysis suggests that the card information could have been acquired using skimming devices installed in ATMs and PoS (Point of Sale) terminals.

The report also mentions that the card dump included Track 1 and Track 2 data which is mostly found on payment cards with magnetic stripes. This rules out the cards used only for online transactions. Since 31 December 2018, India has discontinued the use of cards with only magnetic stripes and switched instead to cards with embedded chips.

Earlier this year in February, card details of almost 2.15 million Americans were put on Joker Stash for sale with the card dump nicknamed ‘DaVinci Breach’.

. Read more on Tech News by The Quint.RSS & BJP’s Nehru-Netaji ‘Cosplay’: Irony Dies a Thousand DeathsDetails of 1.3 Mn Indian Payment Card Holders For Sale On Dark Web . Read more on Tech News by The Quint.