The operators of the carder site BidenCash decided to celebrate the anniversary of their resource on a grand scale. In honor of the anniversary, the administration posted a file on the XSS hack forum containing information about 2.1 million compromised bank cards for free.
Let me remind you that the BidenCash website was launched in the spring of 2022 and almost immediately announced itself with a similar action: then BidenCash operators decided to distribute a CSV file containing names, addresses, phone numbers, email addresses and bank card numbers to everyone for free, and thus advertise their platform. Then experts reported that in the dump you can find data about 6,600 bank cards, and about 1,300 of them are new and valid cards.
The administration of the Karder resource held another free distribution of cards in the fall of 2022. Then, as part of an advertising campaign aimed at attracting new users, a new free dump with cards was published. According to analysts at Cyble, the total dump contained information about 1.2 million cards from around the world, with a validity period between 2023 and 2026.
Most of the card data was obtained from web skimmers: malicious scripts that hackers inject into checkout pages in online stores. Such scripts steal information about bank cards and other user data.
As Flashpoint experts now report, the new "anniversary" dump also includes the name and address of the cardholder, as well as personal financial data: the full card number, its validity period, CVV number and bank name.
Analysts estimate that about 70% of "merged" cards will expire in 2023. 50% of the cards belong to individuals or legal entities from the United States, and about 5% were stolen from users from China and the United Kingdom.
Researchers say that BidenCash is currently among the top 5 card stores in terms of the number of cards, but their quality ("viability" of cards) is always more important than quantity.
This free BidenCash dump is one of the largest in the last year (usually no more than 40,000 stolen cards appear in the public domain at a time). However, the researchers believe that it is likely that most of the published cards will soon expire, or that financial institutions are already aware of the fraud associated with them.
(c) https://xakep.ru/2023/03/03/bidencash-free-cards/
Let me remind you that the BidenCash website was launched in the spring of 2022 and almost immediately announced itself with a similar action: then BidenCash operators decided to distribute a CSV file containing names, addresses, phone numbers, email addresses and bank card numbers to everyone for free, and thus advertise their platform. Then experts reported that in the dump you can find data about 6,600 bank cards, and about 1,300 of them are new and valid cards.
The administration of the Karder resource held another free distribution of cards in the fall of 2022. Then, as part of an advertising campaign aimed at attracting new users, a new free dump with cards was published. According to analysts at Cyble, the total dump contained information about 1.2 million cards from around the world, with a validity period between 2023 and 2026.
Most of the card data was obtained from web skimmers: malicious scripts that hackers inject into checkout pages in online stores. Such scripts steal information about bank cards and other user data.
As Flashpoint experts now report, the new "anniversary" dump also includes the name and address of the cardholder, as well as personal financial data: the full card number, its validity period, CVV number and bank name.
Analysts estimate that about 70% of "merged" cards will expire in 2023. 50% of the cards belong to individuals or legal entities from the United States, and about 5% were stolen from users from China and the United Kingdom.
Researchers say that BidenCash is currently among the top 5 card stores in terms of the number of cards, but their quality ("viability" of cards) is always more important than quantity.
This free BidenCash dump is one of the largest in the last year (usually no more than 40,000 stolen cards appear in the public domain at a time). However, the researchers believe that it is likely that most of the published cards will soon expire, or that financial institutions are already aware of the fraud associated with them.
(c) https://xakep.ru/2023/03/03/bidencash-free-cards/
