Wednesday, April 12, 2017

Shopping Spree with Stolen Credit Cards

While researching a clear web hacker/carder forum, Wapack Labs analysts found a unique domain. Users register for a 15-minute “shopping spree” and are issued a password to their database. The domain has many international cards and boasts over 1 million cards from the U.S.. Once users choose their stolen cards, they add them to a shopping cart, just like a legitimate e-commerce site. The domain filters their database by BIN, Brand, Type, Level, Bank, Country, State, City, ZIP Code, Address, Seller, Base, Load, Expiration Date, Valid, or Sort. All purchases are made via BitCoin.

Wapack Labs has cataloged and reported extensively on carders in the past. An archive of related reporting can be found in the Red Sky Alliance portal.