Joker’s Stash received data for 1.3 million payment cards and is asking $100 per card in this fresh card drop that hit the dark web on October 28:
“On October 28, the compromised details of more than 1.3 million payments cards were put up for sale on the notorious dark market site, with an asking price of $100 (£78) per card. Yes, you did read that right; if the cybercriminals trading the payment card data sell the lot then that’s an incredible $130 million (£101 million) payday. The security researchers who detected the card drop, thought that the card collection, courtesy of it containing magnetic stripe “track 2 data,” was created by a network of ATM cash machine or point of sale skimming devices. The vast majority appear to be from customers of Indian banks.”
Networks and issuers will get samples of the card data and analyze them in an effort to determine which ATMs or merchants were compromised. If these can be identified then issuers can identify all the other cards used in those sites during the same time frame and either increase the fraud monitoring or disable and replace the cards believed to be compromised (an expensive proposition).
Overview by Tim Sloane, VP, Payments Innovation at Mercator Advisory Group