The value of stolen credit card details and cybercrime tools has increased significantly over the past two years, according to new research conducted by Flashpoint on the dark web. The risk intelligence firm identified some of the most established cybercrime markets on the dark web, across eight categories: from government-issued IDs to DDoS-for-hire services, exploit kits, access to RDP servers , and “fullz.
The price of stolen credit cards has increased by 225%, from $12.44 in 2018 to $26.50 this year. Additionally, fake US passports can cost around $525, while the price increases even further, to $3,500, for UK versions.
As for DDoS-for-hire services, their price has almost quadrupled since 2017, reaching $165 for a fully managed attack or provider-specific options that can reach $250.
According to Flashpoint, the “as-a-service” model has become increasingly popular in recent years because it allows service providers to make on-the-fly adjustments to improve success rates in response to increased mitigation deployed by the defender.
As Infosecurity Magazine reports, access to RDP servers is often combined with online payment accounts to facilitate quick and easy fraud – the price tag of which is upwards of $575. US bank account and routing numbers can also cost hundreds of dollars. Additionally, phishing kits with drivers cost $35, while exploit kits targeting Office 365 cost $125.
Flashpoint also pointed out that the price of stolen data and cybercrime tools increased in 2020, due to the fact that online activity has increased significantly, particularly with the outbreak of the COVID-19.
Flashpoint's chief information officer, Tom Hoffman, said the company's pricing analysis "sheds light" on some of the unique market dynamics and trends observed in dark web markets - such as the long-term effects of the global pandemic and changes in buying and selling behavior stemming from the rise of remote working and online shopping.
