how the stolen credit card black market works
DESCRIPTION
With the Target data breach, many are wondering how criminals can profit from the use of the stolen credit cards. The card holders themselves will not be responsible for any of the charges, so how is it that criminals are able to make money from stolen credit cards? I have been involved with several cases where organized crime rings have been unveiled, many of these have had connections to Russian and Eastern European groups. These groups generate a significant profit through stolen property acquired through burglaries, shoplifting, identity theft, credit card skimming and carding. Many underestimate the complexity of some of these networks and the revenue they generate. In this talk I will discuss the stolen credit card market, how it fuels the exploit black market, online retail fraud and other nefarious activities.TRANSCRIPT
![Page 2: How the Stolen Credit Card Black Market Works](https://reader034.vdocuments.mx/reader034/viewer/2022052505/55579732d8b42ad4278b53af/html5/thumbnails/2.jpg)
I Have Put People In Jail
![Page 3: How the Stolen Credit Card Black Market Works](https://reader034.vdocuments.mx/reader034/viewer/2022052505/55579732d8b42ad4278b53af/html5/thumbnails/3.jpg)
![Page 4: How the Stolen Credit Card Black Market Works](https://reader034.vdocuments.mx/reader034/viewer/2022052505/55579732d8b42ad4278b53af/html5/thumbnails/4.jpg)
!SME!
Specialized !!
Brokers!Vendors!
General!members!(buyers)!Mules!(wi<ng!&!unwi<ng)!
Exploit & Malware Devs Technical
Money Mule ServicesService Providers
Money Mule ServicesService Providers
Evasion, anonymity, distance from crime
![Page 5: How the Stolen Credit Card Black Market Works](https://reader034.vdocuments.mx/reader034/viewer/2022052505/55579732d8b42ad4278b53af/html5/thumbnails/5.jpg)
![Page 6: How the Stolen Credit Card Black Market Works](https://reader034.vdocuments.mx/reader034/viewer/2022052505/55579732d8b42ad4278b53af/html5/thumbnails/6.jpg)
Roman Valerevich Seleznev
- Arrested Satruday on charges of hacking U.S. retailers 2009-2011 - Accused of stealing 200K credit card numbers - Generated $2M in profit
![Page 7: How the Stolen Credit Card Black Market Works](https://reader034.vdocuments.mx/reader034/viewer/2022052505/55579732d8b42ad4278b53af/html5/thumbnails/7.jpg)
Source: The Nilson Report, BI Intelligence
Credit Card Fraud Losses Bi
llions
0
7
14
2009 2010 2011 2012 2013
6.8
6.2
5.4
43.7 7.1
5.54.8
3.63.2
United States Rest of World
![Page 8: How the Stolen Credit Card Black Market Works](https://reader034.vdocuments.mx/reader034/viewer/2022052505/55579732d8b42ad4278b53af/html5/thumbnails/8.jpg)
Job Security for Credit Card Fraudsters Through 2015
EMV IN THE U.S.
201520132011 2012
August 2011 April 1, 2013
October 15, 2015
Liability for fraudulent transactions that have
not installed chip terminal goes to
merchant
Visa announces EMV initiatives through!TIP (Technology
Innovation Program)
Mastercard announces EMV
initiative & liability hierarchy
U.S. acquirers and processors must be able to support chip
transactions with dynamic auth
February 2012
October, 107
EMV liability shift for gasoline merchants
![Page 9: How the Stolen Credit Card Black Market Works](https://reader034.vdocuments.mx/reader034/viewer/2022052505/55579732d8b42ad4278b53af/html5/thumbnails/9.jpg)
EMV WON’T STOP CREDIT CARD FRAUD
0
100
200
300
400
2000 2001 2002 2003 2004 2005 2006 2007 2008 2009 2010
Card-not-present Counterfeit Lost/Stolen Card ID Theft Mail Non Receipt
ANNUAL FRAUD LOSSES ON U.K.-ISSUED CARDS IN £MILLIONS, 1999-2010
EMV Adopted
Cross-border counterfeit
![Page 10: How the Stolen Credit Card Black Market Works](https://reader034.vdocuments.mx/reader034/viewer/2022052505/55579732d8b42ad4278b53af/html5/thumbnails/10.jpg)
UK Credit Card Fraud 2001-2012
![Page 11: How the Stolen Credit Card Black Market Works](https://reader034.vdocuments.mx/reader034/viewer/2022052505/55579732d8b42ad4278b53af/html5/thumbnails/11.jpg)
Australia Credit Card Fraud 2001-2012
![Page 12: How the Stolen Credit Card Black Market Works](https://reader034.vdocuments.mx/reader034/viewer/2022052505/55579732d8b42ad4278b53af/html5/thumbnails/12.jpg)
- EMV would not have stopped Target breach
- But would decrease the value of the breached data
![Page 13: How the Stolen Credit Card Black Market Works](https://reader034.vdocuments.mx/reader034/viewer/2022052505/55579732d8b42ad4278b53af/html5/thumbnails/13.jpg)
STOLEN CREDIT CARD ECONOMY
Malware'Authors'
Network''Intruder'
Stolen'Credit'Cards'
Carding'
Stolen'Property'
Reshipping'
OrganizedCriminal
Syndicate
Malware/Tool
Authors
Stolen Credit Cards
& Data
Black POS: $1,800 - $2,300Citadel Trojan: $2,399 - $3,391
![Page 14: How the Stolen Credit Card Black Market Works](https://reader034.vdocuments.mx/reader034/viewer/2022052505/55579732d8b42ad4278b53af/html5/thumbnails/14.jpg)
![Page 15: How the Stolen Credit Card Black Market Works](https://reader034.vdocuments.mx/reader034/viewer/2022052505/55579732d8b42ad4278b53af/html5/thumbnails/15.jpg)
Initial Access Tools - Deliver payloads - Automate exploitation
- Exploit kit - Zero day
Payload Parts & Features - Create, customize,package & enhance payloads
- Botnet - Packers, Crypters - Obfuscation/Evasion
PayloadsMalicious behavior, destruction, denial,
degradation, deception, disruption, or data exfiltration
- Botnet for lease/sale
Enabling ServicesAssist finding targets to use an initial access tool and/or payload; attack vectors etc
- Phishing services - Watering holes
Full Services Provide full attack life cycle for hire
Hackers for hire, Doxing, Botnets for rent, DDoS
MALWARE & SERVICES
![Page 16: How the Stolen Credit Card Black Market Works](https://reader034.vdocuments.mx/reader034/viewer/2022052505/55579732d8b42ad4278b53af/html5/thumbnails/16.jpg)
![Page 17: How the Stolen Credit Card Black Market Works](https://reader034.vdocuments.mx/reader034/viewer/2022052505/55579732d8b42ad4278b53af/html5/thumbnails/17.jpg)
BLACK HOLE EXPLOIT KIT
“Paunch” Dmitry Evegeny Fedotov
- 1,000 customers - $500-$700 month fee - $50K month income - Purchased zero day exploits - $10K/month exploit kit - Paunch arrested Oct 2013
with 13 others
![Page 18: How the Stolen Credit Card Black Market Works](https://reader034.vdocuments.mx/reader034/viewer/2022052505/55579732d8b42ad4278b53af/html5/thumbnails/18.jpg)
STOLEN CREDIT CARD ECONOMY
Stolen Credit Card
OrganizedCriminal
Syndicate
Malware/Tool
Authors
Brokers Stolen
Credit Cards & Data
![Page 19: How the Stolen Credit Card Black Market Works](https://reader034.vdocuments.mx/reader034/viewer/2022052505/55579732d8b42ad4278b53af/html5/thumbnails/19.jpg)
RESCATOR
- 2.8 Million Cards @ $8-28 each
Andrey Hodirevski Source: http://krebsonsecurity.com/2013/12/whos-selling-credit-cards-from-target/
![Page 20: How the Stolen Credit Card Black Market Works](https://reader034.vdocuments.mx/reader034/viewer/2022052505/55579732d8b42ad4278b53af/html5/thumbnails/20.jpg)
![Page 21: How the Stolen Credit Card Black Market Works](https://reader034.vdocuments.mx/reader034/viewer/2022052505/55579732d8b42ad4278b53af/html5/thumbnails/21.jpg)
http://carding2bil6j7ja.onion/login
![Page 22: How the Stolen Credit Card Black Market Works](https://reader034.vdocuments.mx/reader034/viewer/2022052505/55579732d8b42ad4278b53af/html5/thumbnails/22.jpg)
STOLEN CREDIT CARD ECONOMY
Malware'Authors'
Network''Intruder'
Stolen'Credit'Cards'
Carding'
Stolen'Property'
Reshipping'
Stolen Credit Card
Gift Cards
Fence Goods
OrganizedCriminal
Syndicate
Malware/Tool
Authors
Brokers Stolen
Credit Cards & Data
![Page 23: How the Stolen Credit Card Black Market Works](https://reader034.vdocuments.mx/reader034/viewer/2022052505/55579732d8b42ad4278b53af/html5/thumbnails/23.jpg)
Card encoder Embossing machine Tipping machine
COUNTERFEIT CARD TOOLS
![Page 24: How the Stolen Credit Card Black Market Works](https://reader034.vdocuments.mx/reader034/viewer/2022052505/55579732d8b42ad4278b53af/html5/thumbnails/24.jpg)
![Page 25: How the Stolen Credit Card Black Market Works](https://reader034.vdocuments.mx/reader034/viewer/2022052505/55579732d8b42ad4278b53af/html5/thumbnails/25.jpg)
- 69K counterfeit cards - 35K holographic stickers - 30K drivers licenses w/overlays - 36K shipments to “customers”
COUNTERFEIT eCOMMERCE
![Page 26: How the Stolen Credit Card Black Market Works](https://reader034.vdocuments.mx/reader034/viewer/2022052505/55579732d8b42ad4278b53af/html5/thumbnails/26.jpg)
STOLEN CREDIT CARD ECONOMY
Malware'Authors'
Network''Intruder'
Stolen'Credit'Cards'
Carding'
Stolen'Property'
Reshipping'
Stolen Credit Card
Gift Cards
Purchased & Stolen Property
OrganizedCriminal
Syndicate
Malware/Tool
Authors
Brokers Stolen
Credit Cards & Data
Reshipping
Black Market Deep Web
Pawn Shops Craigslist
eBay
![Page 27: How the Stolen Credit Card Black Market Works](https://reader034.vdocuments.mx/reader034/viewer/2022052505/55579732d8b42ad4278b53af/html5/thumbnails/27.jpg)
CREDIT CARD THEFT PART OF LARGER ECONOMY
![Page 28: How the Stolen Credit Card Black Market Works](https://reader034.vdocuments.mx/reader034/viewer/2022052505/55579732d8b42ad4278b53af/html5/thumbnails/28.jpg)
http://cstoreav7i44h2lr.onion/
![Page 29: How the Stolen Credit Card Black Market Works](https://reader034.vdocuments.mx/reader034/viewer/2022052505/55579732d8b42ad4278b53af/html5/thumbnails/29.jpg)
http://mhsaby5zjddolddv.onion
![Page 30: How the Stolen Credit Card Black Market Works](https://reader034.vdocuments.mx/reader034/viewer/2022052505/55579732d8b42ad4278b53af/html5/thumbnails/30.jpg)
Malware'Authors'
Network''Intruder'
Stolen'Credit'Cards'
Carding'
Stolen'Property'
Reshipping'
Stolen Credit Card
Gift Cards
Purchased & Stolen Property
OrganizedCriminal
Syndicate
Malware/Tool
Authors
Brokers Stolen
Credit Cards & Data
Reshipping
Black Market Deep Web
Pawn Shops Craigslist
eBay
STOLEN CREDIT CARD ECONOMY
![Page 31: How the Stolen Credit Card Black Market Works](https://reader034.vdocuments.mx/reader034/viewer/2022052505/55579732d8b42ad4278b53af/html5/thumbnails/31.jpg)
![Page 33: How the Stolen Credit Card Black Market Works](https://reader034.vdocuments.mx/reader034/viewer/2022052505/55579732d8b42ad4278b53af/html5/thumbnails/33.jpg)