Wednesday, October 16, 2024
HomeDark Web1 Million Payment Cards Data From South Korea Comes to Sale on...

1 Million Payment Cards Data From South Korea Comes to Sale on Darkweb for $24 USD

Published on

Malware protection

Over 1 million payment card records that stolen from south Korea sold on the dark web market for the past few months and the price fixed approximately $24.

Cybercriminals posted the stolen records in Dark web since May 2019, and these stolen payment card data have been obtained from breach of a parent company that operates several different businesses.

Stolen data’s are South Korean-issued CP records, and the data believed to be leaked from point-of-sale (POS) integrator breach, where attackers possibly stole many merchants data.

- Advertisement - SIEM as a Service

Cyber attacks on E-commerce business are continuously growing in APAC, especially in South Korea, but the exact compromised point of purchase (CPP) remains unclear.

Based on the research report, 42,000 compromised South Korean-issued CP records posted for sale in the dark web in May 2019, 230,000 records in, June 2019 and 890,000 records were posted in the dark web in July month alone.

payment card

According to Gemini advisory research, This spike currently consists of over 1 million compromised South Korea-issued CP records posted for sale in the dark web since May 29, 2019. 

“Among these records, 3.7% of card records issued by the US. One of the most affected US financial institutions was a credit union that primarily serves the US Air Force; the Air Force maintains multiple air bases in South Korea.”

Card records posted on the dark web mostly belong to US cardholders since 1 million U.S visitors had been visited South Korea in the past 12 months.

Cybercriminals charging $40 for single payment card data and the price is higher than the median price of South Korean CP records across the dark web overall, which is approximately $24 in last year.

The researcher believes that card data was obtained from a POS integrator breach, if threat actor gained access to a single integrator service then they possibly gain access the individual POS devices that issued by integrator service.

Eventually, The threat actor would then have access to payment data from multiple sources, accounting for the lack of a common merchant among the compromised payment card.

you can read the 10 Important Components of PCI Compliance Checklist for Protecting the Customers Payment Card Data.

You can follow us on Linkedin, Twitter, Facebook for daily Cybersecurity updates also you can take the Best Cybersecurity course online to keep yourself updated.

Balaji
Balaji
BALAJI is an Ex-Security Researcher (Threat Research Labs) at Comodo Cybersecurity. Editor-in-Chief & Co-Founder - Cyber Security News & GBHackers On Security.

Latest articles

HORUS Protector Delivering AgentTesla, Remcos, Snake, NjRat Malware

The Horus Protector crypter is being used to distribute various malware families, including AgentTesla,...

ErrorFather Hackers Attacking & Control Android Device Remotely

The Cerberus Android banking trojan, which gained notoriety in 2019 for its ability to...

Hackers Allegedly Selling Data Stolen from Cisco

A group of hackers reportedly sells sensitive data stolen from Cisco Systems, Inc.The...

Fortigate SSLVPN Vulnerability Exploited in the Wild

A critical vulnerability in Fortinet's FortiGate SSLVPN appliances, CVE-2024-23113, has been actively exploited in...

Free Webinar

Protect Websites & APIs from Malware Attack

Malware targeting customer-facing websites and API applications poses significant risks, including compliance violations, defacements, and even blacklisting.

Join us for an insightful webinar featuring Vivek Gopalan, VP of Products at Indusface, as he shares effective strategies for safeguarding websites and APIs against malware.

Discussion points

Scan DOM, internal links, and JavaScript libraries for hidden malware.
Detect website defacements in real time.
Protect your brand by monitoring for potential blacklisting.
Prevent malware from infiltrating your server and cloud infrastructure.

More like this

Northern Ireland Police to Pay £750,000 Fine Following Data Breach

The Police Service of Northern Ireland (PSNI) has been ordered to pay a £750,000...

Google Warns Of North Korean IT Workers Have Infiltrated The U.S. Workforce

North Korean IT workers, disguised as non-North Koreans, infiltrate various industries to generate revenue...

MC2 Data leak Exposes 100 million+ US Citizens Data

Researchers have uncovered a massive data breach at MC2 Data, a prominent background check...