BidenCash market leaks over 2 million stolen bank cards without cost

A carding market generally known as BidenCash has leaked on-line a free database of two,165,700 debit and bank cards in celebration of its first anniversary.

Fairly than protecting it below wraps, the risk actors marketed this huge leak on an underground cybercrime discussion board for extra in depth attain and to draw as a lot consideration as potential.

In line with Cyble researchers who first spotted it, the leaked info is in depth, with particulars on “at the very least 740,858 bank cards, 811,676 debit playing cards, and 293 cost playing cards.”

Out of those, tens of 1000’s had been duplicates, however there are nonetheless 2,141,564 distinctive ones, in accordance with D3Lab’s Head of Menace Intelligence, Andrea Draghetti.

The dataset incorporates personally identifiable info akin to names, emails, telephone numbers, residence addresses, and fee card particulars, together with card expiration dates and CVV codes, with the playing cards’ expiration dates going as far out as 2052.

Draghetti informed BleepingComputer that the huge database additionally consists of roughly 497,000 distinctive e-mail addresses, totaling greater than 28,000 distinctive e-mail domains, which might show priceless as ammunition in future focused phishing scams and different fraud campaigns.

“We’re thrilled to have reached our first yr anniversary as an internet retailer, and we could not have achieved it with out your help! Thanks for selecting our retailer and for trusting us to offer you high quality merchandise and wonderful service,” BidenCash’s announcement learn.

“We’re proud to have you ever as a buyer, and we look ahead to persevering with to serve you within the coming years. Your loyalty and belief are what inspire us to maintain enhancing and rising our enterprise.”

​Whereas the researchers could not inform BleepingComputer how a lot of the data leaked on-line without cost by BidenCash is legitimate, the chance of it being utilized by fraudsters and cybercriminals cannot be underestimated.

“The presence of e-mail addresses and full info (generally known as “Fullz” by cybercriminals) will make the victims of this leak weak to different assaults, akin to phishing, identification theft, and scams, long gone the expiration of their card particulars,” Cyble mentioned.

The carding store has been energetic since February 28, 2022, reaching the fifth spot by complete quantity in a rating created by threat intel firm Flashpoint.

That is additionally not the primary time BidenCash has used free bank card leaks for promotion, seeing that such “advertising and marketing” ways have at all times been part of the carding market world.

In October, the carding store released another free dump of 1,221,551 credit cards, and, simply because it occurred this week, the crooks distributed it by way of a clearnet area and numerous different hacking and carding boards.

Roughly 30% out of a random sampling of the leaked bank cards that had been analyzed D3Lab on the time turned out to be “contemporary” (usable for monetary fraud).

One other carding market, All World Playing cards, equally promoted itself in August 2021 when it leaked 1,000,000 credit cards for free on numerous hacking boards.