Friday, March 29, 2024

Cybercrime as a Service – Hackers Selling Ransomware, RDP logins and Credit Card Details on the Underground Markets

The underground markets flooded with a number of hacking tools that can be used to perform various malicious activities in the form of Cybercrime as a Service.

All these tools and services are offered at various pricing range, there are here are a number of dark web markets available such as Berlusconi Market, Empire Market, Wall Street Market, DreamPoint.

An analysis by Eset estimates the cost of products on the dark web markets and their prices.

RaaS

A ransomware-as-as-service is a service allows attackers to host their service in dark web which allows anyone to buy and use the services with their own modifications.

Eset spotted a wide range of ransomware packages for sale on the dark web, the criminals offering Updates, technical support, access to C&C servers.

Also Read: Hackers Offering DDoS-for-Hire Service Powered by Bushido Botnet in Dark Web Markets

RDP Logins

RDP logins sold on the dark web markets giving access to various RDP servers around the globe and the price varies between US$8-15 per server based on country and operating system.

“After buying such access, a cybercriminal might then use it to run ransomware or perhaps to install more discreet malware, such as banking Trojans or spyware.”

Servers for DDoS attacks

Cybercriminals put botnets on sale for launching DDoS attacks or for sending spam emails. the price varies depends on the service and how long you are to use the botnet.

The price ranging from 1 to 24 hours, an example indicates for three hours it costs US$60.

PayPal and credit card accounts

Credit card and Paypal details are for sale in various dark web stores and the charges about 10% of the total credit available in the stolen account.

Some cybercriminals also show what are the tools that they have used in conducting the phishing activity.

So, we can see that cybercriminals, hidden by tools that give them a certain degree of anonymity, have put together a profitable criminal industry, which includes everything from advertising and marketing to customer service, updates, and user manuals.  ESET Said.

You can follow us on Linkedin, Twitter, Facebook for daily Cybersecurity updates also you can take the Best Cybersecurity courses online to keep your self-updated.

Also Read: Cybercrime-as-a-Service – DDoS Attack Services Available in Dark Web Markets for $10 per Hour

Website

Latest articles

Beware Of Weaponized Air Force invitation PDF Targeting Indian Defense And Energy Sectors

EclecticIQ cybersecurity researchers have uncovered a cyberespionage operation dubbed "Operation FlightNight" targeting Indian government...

WarzoneRAT Returns Post FBI Seizure: Utilizing LNK & HTA File

The notorious WarzoneRAT malware has made a comeback, despite the FBI's recent efforts to...

Google Revealed Kernel Address Sanitizer To Harden Android Firmware And Beyond

Android devices are popular among hackers due to the platform’s extensive acceptance and open-source...

Compromised SaaS Supply Chain Apps: 97% of Organizations at Risk of Cyber Attacks

Businesses increasingly rely on Software as a Service (SaaS) applications to drive efficiency, innovation,...

IT and security Leaders Feel Ill-Equipped to Handle Emerging Threats: New Survey

A comprehensive survey conducted by Keeper Security, in partnership with TrendCandy Research, has shed...

How to Analyse .NET Malware? – Reverse Engineering Snake Keylogger

Utilizing sandbox analysis for behavioral, network, and process examination provides a foundation for reverse...

GoPlus’s Latest Report Highlights How Blockchain Communities Are Leveraging Critical API Security Data To Mitigate Web3 Threats

GoPlus Labs, the leading Web3 security infrastructure provider, has unveiled a groundbreaking report highlighting...
Guru baran
Guru baranhttps://gbhackers.com
Gurubaran is a co-founder of Cyber Security News and GBHackers On Security. He has 10+ years of experience as a Security Consultant, Editor, and Analyst in cybersecurity, technology, and communications.

Mitigating Vulnerability Types & 0-day Threats

Mitigating Vulnerability & 0-day Threats

Alert Fatigue that helps no one as security teams need to triage 100s of vulnerabilities.

  • The problem of vulnerability fatigue today
  • Difference between CVSS-specific vulnerability vs risk-based vulnerability
  • Evaluating vulnerabilities based on the business impact/risk
  • Automation to reduce alert fatigue and enhance security posture significantly

Related Articles