A dark web site known as “BidenCash,” which is actually a carding marketplace, has published a massive database of 1,221,551 credit cards to promote its services. The site allows anyone to download them for free and use them as they wish.
Carding is the handling and use of credit cards stolen through point-of-sale malware, magecart attacks on websites, or malware .
The BidenCash market became more well-known in June 2022, when it leaked a few thousand cards.
See also: Intel: The source code for the BIOS of Alder Lake CPUs has been leaked and is authentic
Now, however, the malicious users behind the creation of this dark web marketplace have decided to promote the site by giving away a huge number of credit cards. Something similar was done in August 2021 by the 'All World Cards' platform.
The threat actors announced the release of the stolen credit cards a few days ago. To ensure greater exposure, they are distributing the collection via a clearnet domain and other hacking and carding forums.
The credit card file circulating on the BidenCash market and other forums contains mostly new cards that expire between 2023 and 2026.The cards belong to users from all over the world, but most entries appear to be from the United States.
The data exposed by the credit card leak includes:
- Card number
- Expiry date
- CVV number
- Cardholder name
- Bank name
- Card type, status
- Address, state and ZIP
- Email address
- SSN
- Phone number
This information has been leaked in its entirety, but not all of the above details are available for all 1.2 million listings. Unfortunately, most cards include most of this information.
See also: Fake adult websites push data wipers disguised as ransomware
The stolen credit cards leaked on the BidenCash market are being examined by Italian security researchers from D3Lab , who monitor carding sites on the dark web. According to the researchers, these credit cards mainly come from web skimmers , which are malicious scripts that are inserted into the checkout pages of compromised e-commerce websites and steal submitted credit card information and customer information .
Are the leaked data authentic?
Many times, offers of this magnitude are scams. That could be the case in this case as well. BleepingComputer has discussed the authenticity with analysts at D3Lab, who have confirmed with several Italian banks that the data is real. Therefore, the entries correspond to real cards and cardholders.
From the data examined by D3Labs so far, about 30% appears to be new, so if this holds for the entire file, roughly at least 350,000 cards will be valid.
Of the Italian cards, around 50% have already been blocked due to the issuing banks having detected fraudulent activity.
BidenCash market: Evolution
During 2021, the sale and purchase of payment cards was greatly facilitated by many stores such as Yale Lodge, Vendetta and many others. However, the takedown of the largest payment card store “Joker Stash” in early 2021 and the action of law enforcement authorities on other stores such as “Ferum Shop”, “UAS” and “Trump Dump”, created a huge void on the dark web. Since then, many new sites have emerged for the sale of stolen debit and credit cards.
See also: 5 Tips for Handling Consumer Privacy Concerns
The “BidenCash” established its presence on the dark web in April 2022 and was known as a relatively low‑profile credit card shop. However, it gradually became more popular.
In June 2022, the BidenCash market published a large amount of payment card data.
Source: www.bleepingcomputer.com
