Credit card
Web portals are promoting the exchange of fraudulent card data

Stolen credit card portal uncovered

Organised trading floor offers guarantees and volume discounts

Written by Robert Jaques

The level of sophistication acts as a clear warning to anyone who thinks that card fraud is a containable problem

Yuval Ben-Itzhak Chief technology officer, Finjan

Security experts have discovered an underground exchange promoting the sale of fraudulent credit card data with guarantees and volume discounts for large-scale fraudsters.

The SellCVV2 site appears to use Google's Blogspot service as its host and is typical of a number of portals promoting the exchange of fraudulent card data, according to security firm Finjan.

Yuval Ben-Itzhak, chief technology officer at Finjan, noted that the SellCVV2 site has a high level of commercialisation of the traders involved.

"Prices are segmented depending on whether a card is a Classic Visa or MasterCard, a premium account such as a Gold, Platinum or Business/Corporate card and its country of issue," he said.

"Prices typically range from $38 per set of card data for premium card accounts in small volumes, going down to $10 for Classic card data in volumes of 100 or more.

"Customers are also being offered a trial set of data, as well as a guarantee on account details that do not work."

Ben-Itzhak believes that the offer of trial card data, guarantees and volume discounts is symptomatic of the organised criminals who are probably behind this and other sites that Finjan's research team has discovered.

"If further proof were needed that there is a very serious problem facing the card acceptance and processing industry, this is it," he said.

"The level of sophistication shown on the site acts as a clear warning to anyone who thinks that card fraud is a containable problem."

Further reading

McAfee steps up online safety education drive

Firm offers ebook for families and a quiz for teens   More...

IT pros expect fraud in the enterprise

Enron-scale fraud likely in the UK, claims poll   More...

Online banking fraud on the decline

But credit card fraud abroad pushing up overall losses   More...

Brits worth billions to online fraudsters

Average person has over £10,000 that could be accessed by cyber-crooks   More...

Related articles

Hackers turn to new genre of evasive attacks

Finjan report warns of malicious code 'affiliation networks'   More...

Hackers turn to drive-by downloads

Organised crime exploiting browser vulnerabilities   More...

Hackers set up stolen FTP account trading floor

Database discovered containing more than 8,700 harvested FTP account details   More...

Hackers unleash 'insidious' crimeware attack

Trusted websites turned into traps   More...

Do you agree?

Advertisement

Job of the week

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Hiring now on ComputingCareers:

Related IT jobs

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Advertisement

Watch

09 May 2008

2.51 MBWiMax muddle, Google tactics and asteroid bunkum More...

08 May 2008

3.26 MBBroadband Anywhere, phone-free transport and Web 3.0 More...

07 May 2008

3.19 MBUK success, a paucity of IT women and robot wars More...

Poll

DATA ENCRYPTION

DATA ENCRYPTION

Should encryption be mandatory for all personal data held by companies and governments?

Previous poll results

Newsletter signup

Sign up for our range of FREE newsletters:

Existing User

Newsletter user login:

Enter email address to edit your newsletter preferences

Spotlight

Ofcom

Ofcom outlines future wireless vision

Wi-Fi healthcare and intelligent car brakes in the pipeline   More...

HP

HP Labs opens doors to academia

Innovation Research Program invites proposals related to current research   More...

Advertisement

Asteroid

Nasa plans manned mission to asteroid

Bruce Willis thankfully not going   More...

MySpace

MySpace offers opt-in data sharing

Deals signed with Photobucket, Twitter, eBay and Yahoo   More...

Advertisement