Monday, March 17, 2025
Homecyber securityUniCC – the Largest Dark Web Vendor of Stolen Credit Cards Shut...

UniCC – the Largest Dark Web Vendor of Stolen Credit Cards Shut Down

Published on

SIEM as a Service

Follow Us on Google News

Though many vendors were available on the dark web, UniCC has been one of the largest marketplaces for stolen credit card vendors. They have been in the market since 2013 and have made an estimated $358 million in cryptocurrencies.

Previously, Joker’s Stash, another one of the largest credit card vendors announced their retirement in Jan 2021. Following them, UniCC has also announced its cease of services. UniCC took a lead of 30% in market share when Joker’s Stash left the market.

(Joker’s Stash announcement dark web in Jan 2021)

In 9 years, UniCC has received around $350 million dollars in Ether, Dash, Bitcoin, and Litecoin. Every day, tens of thousands of cards were listed and sold. They were known for their relatively low price than other vendors.

Image
(UniCC Home page)

Statistically, Joker’s Stash received a large sum when compared to UniCC. But still, they managed to bag more than a quarter a billion in crypto.

Millions of card data were breached and stolen from online retailers, Banks, and other payment-based companies which were then sold at UniCC. Cards purchased from UniCC can be used to buy high-value items which in turn can be sold again to make actual money.

This was popularly known as “Carding”. This technique helps to turn crypto into cash.

A few months before, White House Market – One of the largest darknet drug market leaders were shut down. Cannazon and Torrez who were also the market leaders followed and did the same.

UniCC’s retirement might be due to avoid more law enforcement attention or the drift to run away with what they have. This is because of the fact that Slilpp one of the stolen credentials market leaders was seized by the FBI, who made $22 million in BTC.

The next question of the darknet users would be who might be the next. Carding market contributes $1.4 billion in sales with BTC alone.

You can follow us on LinkedinTwitterFacebook for daily Cybersecurity updates

Gurubaran
Gurubaran
Gurubaran is a co-founder of Cyber Security News and GBHackers On Security. He has 10+ years of experience as a Security Consultant, Editor, and Analyst in cybersecurity, technology, and communications.

Latest articles

ManageEngine Analytics Vulnerability Enables User Account Takeover

A significant security vulnerability has been identified in ManageEngine's Analytics Plus on-premise solution, affecting...

Jaguar Land Rover Hit by HELLCAT Ransomware Using Stolen Jira Credentials

The HELLCAT ransomware group has claimed responsibility for a significant data breach at Jaguar...

Hackers Exploit Tomcat Vulnerability to Hijack Apache Servers

A recent and significant cybersecurity threat has emerged involving a critical vulnerability in Apache...

European Cyber Report 2025: 137% More DDoS Attacks Than Last Year – What Companies Need to Know

Cyberattacks are no longer an abstract threat - they dominate risk planning for companies...

Supply Chain Attack Prevention

Free Webinar - Supply Chain Attack Prevention

Recent attacks like Polyfill[.]io show how compromised third-party components become backdoors for hackers. PCI DSS 4.0’s Requirement 6.4.3 mandates stricter browser script controls, while Requirement 12.8 focuses on securing third-party providers.

Join Vivekanand Gopalan (VP of Products – Indusface) and Phani Deepak Akella (VP of Marketing – Indusface) as they break down these compliance requirements and share strategies to protect your applications from supply chain attacks.

Discussion points

Meeting PCI DSS 4.0 mandates.
Blocking malicious components and unauthorized JavaScript execution.
PIdentifying attack surfaces from third-party dependencies.
Preventing man-in-the-browser attacks with proactive monitoring.

More like this

ManageEngine Analytics Vulnerability Enables User Account Takeover

A significant security vulnerability has been identified in ManageEngine's Analytics Plus on-premise solution, affecting...

Jaguar Land Rover Hit by HELLCAT Ransomware Using Stolen Jira Credentials

The HELLCAT ransomware group has claimed responsibility for a significant data breach at Jaguar...

Hackers Exploit Tomcat Vulnerability to Hijack Apache Servers

A recent and significant cybersecurity threat has emerged involving a critical vulnerability in Apache...