Some are using Instagram, Facebook's photo and video sharing platform, as a one-stop shop that offers access to botnets and stolen Fortnite and Spotify accounts, according to a report by Motherboard's Joseph Cox.
Instagram wouldn't be the first place you'd think of buying a stolen account or renting a botnet for some DDoS attacks, but cybercriminals have made it their new home since there is less content control compared to other social networks.
Another reason is that not everyone who wants to buy stolen virtual goods is informed enough to buy them on the dark web.
Cox found that some Instagram users are advertising both stolen accounts for games and online services like Fortnite and Spotify and access to botnets that their vendors promote as being powered by infected IoT devices created using Mirai strains.
Although many of them sell the botnets as is, some of them also provide rental services with monthly subscriptions ranging from $5 to $80, presumably depending on the number of devices they are made of or their DDoS.
The hackers who now call Instagram home have also moved on to other profitable businesses and, as mentioned above, are taking advantage of the ever-growing popularity of the Fortnite battle royale game to sell stolen accounts with rare in-game options and upgrades.
As revealed by Cox, most Instagram users selling botnets and stolen accounts follow each other and are “organized” as a hacking community.
This may be good for businesses, but since Instagram's terms of service say that users of their platform cannot "do anything unlawful, deceptive, or fraudulent or for an illegal or unauthorized purpose," it will also make it much easier for the social network to look into the issue and take the necessary steps to stop them.
