Digital Shadows launches validation for exposed credentials alerting, enabling organizations to find out instantly if breached login details are a current risk

New service leverages database of 15 billion breached credentials to remove the time spent triaging invalid or duplicate entries London and San Francisco, July 15, 2020 – Digital Shadows, the leader in digital risk protection, has today announced… Continue reading Digital Shadows launches validation for exposed credentials alerting, enabling organizations to find out instantly if breached login details are a current risk

15 billion usernames and passwords for internet services including bank and social media accounts on offer to cyber criminals, finds new research from Digital Shadows

300% increase in stolen credentials from over 100,000 data breaches in two years leave treasure trove of account details available on dark web criminal marketplaces London and San Francisco, July 8, 2020 – Digital Shadows, the leader in digital r… Continue reading 15 billion usernames and passwords for internet services including bank and social media accounts on offer to cyber criminals, finds new research from Digital Shadows

Affordable phishing services help make email fraud the most profitable form of cybercrime

There has never been a better time to invest in email fraud techniques. Cybercriminal forums are bursting with advertisements from scammers who are selling pre-made tools necessary for carrying out phishing attacks. The average cost of a tutorial that includes instructions on how to carry out a scam is under $25, while templates for malicious websites meant to dupe victims out of their usernames and passwords are typically worth $3 apiece. The numbers are included in research published Tuesday by Digital Shadows, a threat intelligence firm which monitors illicit web forums for criminal activity. The sales figures, if not always surprising, help illustrate how business email compromise (BEC) attacks, which sometimes begin with compromised accounts, caused more than $1.7 billion in cybercrime-related losses reported to the FBI last year. “As long as you have the money to buy a template, you don’t need to be a sophisticated threat actor to […]

The post Affordable phishing services help make email fraud the most profitable form of cybercrime appeared first on CyberScoop.

Continue reading Affordable phishing services help make email fraud the most profitable form of cybercrime

Joker’s Stash, once a forum for credit data, grows as breaches yield more stolen data

If it’s possible to describe a cybercriminal marketplace as “reputable” while maintaining a straight face, then Joker’s Stash fits the description as well as any other. The site has emerged in recent years as a destination for scammers who buy and sell credit card information stolen after data breaches from victims including the Hy-Vee supermarket chain, Sonic Drive-In and others. Now, the site has expanded to include an array of personal information on high-value targets, including members of the Trump administration, as part of an evolution toward making illicit transactions more user friendly, according to research published Thursday by threat intelligence firm Recorded Future. It’s also available without the use of Tor, the well-known anonymity software that unlocks websites not accessible with mainstream web browsers. Researchers who explored Joker’s Stash following reports that information stolen from Hy-Vee had been made available also found a new section dedicated entirely to Social Security […]

The post Joker’s Stash, once a forum for credit data, grows as breaches yield more stolen data appeared first on CyberScoop.

Continue reading Joker’s Stash, once a forum for credit data, grows as breaches yield more stolen data

Hacking forums survive cybercrime dragnet as feds prioritize drug-market busts

It might be more difficult these days to conduct an anonymous drug deal on the dark web, but not every online criminal enterprise is feeling the pinch of international law enforcement. New research shows that as the FBI and other crime-fighting agencies have gone after dark web markets, cybercrime communities have avoided the heat. Stolen financial information, access to hacked social media accounts and malicious software tools are still widely available on forums accessible on the open web, without using the Tor anonymity software. Among those still operating are the prominent Russian-language marketplace Exploit.in, the “carding” forum Joker’s Stash and Hackforums, which offers guidance on how to become a hacker. Exploit, in particular, has gained nearly 1,000 new accounts over the past six weeks, with current membership at 44,433 user accounts as of May 13, according to research conducted by Digital Shadows exclusively for CyberScoop. The site is “fully gated,” meaning outsiders must pay $100 for […]

The post Hacking forums survive cybercrime dragnet as feds prioritize drug-market busts appeared first on CyberScoop.

Continue reading Hacking forums survive cybercrime dragnet as feds prioritize drug-market busts

Dark web intelligence competition escalates as Terbium raises $2 million from Omidyar Network

The Omidyar Network, an investment firm created by eBay and First Look Media founder Pierre Omidyar, has invested $2 million in Terbium Labs, the dark web intelligence company announced Monday. Terbium has raised $19 million from sources including Glasswing Ventures, which invested $6 million in 2017, and .406 Ventures, the company said in a statement Monday. The $2 million investment from the Omidyar Network comes as competition among dark web vendors has intensified, with competitors like Recorded Future, Digital Shadows and Flashpoint also scouring hidden sections of the internet for client information. Terbium utilizes artificial intelligence algorithms to model the dark web, locate new sites and predict where stolen information is most likely to go up for sale next, the company said. More than 10,000 users including Mastercard and Thomson Reuters use Matchlight, Terbium’s dark web search system, according to  Terbium. The company also relies on a fuzzy hashing protocol that […]

The post Dark web intelligence competition escalates as Terbium raises $2 million from Omidyar Network appeared first on CyberScoop.

Continue reading Dark web intelligence competition escalates as Terbium raises $2 million from Omidyar Network

Criminal groups promising salaries averaging $360,000 per year to accomplices

New research from Digital Shadows reveals that criminal groups are promising salaries averaging the equivalent of $360,000 per year to accomplices who can help them target high-worth individuals, such as company executives, lawyers and doctors with ext… Continue reading Criminal groups promising salaries averaging $360,000 per year to accomplices