Feeds

Inside a cyber-crook's Xmas wish list

Trojan flea market thrives online

Next gen security for virtualised datacentres

Most people will be looking forward to receiving digital cameras, games and the like - as well as the inevitable pair of socks - this Christmas. But cybercrooks can take the opportunity to splash out, angling for things such as credit card numbers and their corresponding PINs, the trade in which is booming online.

Some items are more valuable than others, according to Raimund Genes, CTO of net security firm Trend Micro, which has compiled what it reckons an average cyber crook’s Christmas list might look like:

  • $1000 – $5000 (£500 – £2500): Customised Trojan program, which could be used to steal online account information
  • $500 (£250): Credit Card Number with PIN
  • $80-$300 (£40 - £150): Change of billing data, including account number, billing address, Social Security number, home address and birth date
  • $150 (£75): Driver‘s licence
  • $150 (£75): Birth certificate
  • $100 (£50): Social Security Card
  • $7 - $25 (£3 - £12): Credit card number with security code and expiration date.
  • $7 (£3): Paypal account log-on and password

Trend derived its data from prices on underground bulletin boards and online forums.

Genes said that malware threats are increasingly created for the purpose of financial gain, with attack techniques becoming more sophisticated. More common activities include trying to steal bank account or credit card numbers and passwords through phishing and keylogging malware. The information gathered can then be sold on the web. Internet Relay Chat (IRC) channels, for example, are a common "flea market" for stolen personal data. ®

The essential guide to IT transformation

More from The Register

next story
Goog says patch⁵⁰ your Chrome
64-bit browser loads cat vids FIFTEEN PERCENT faster!
e-Borders fiasco: Brits stung for £224m after US IT giant sues UK govt
Defeat to Raytheon branded 'catastrophic result'
Chinese hackers spied on investigators of Flight MH370 - report
Classified data on flight's disappearance pinched
NIST to sysadmins: clean up your SSH mess
Too many keys, too badly managed
Attack flogged through shiny-clicky social media buttons
66,000 users popped by malicious Flash fudging add-on
Think crypto hides you from spooks on Facebook? THINK AGAIN
Traffic fingerprints reveal all, say boffins
prev story

Whitepapers

A new approach to endpoint data protection
What is the best way to ensure comprehensive visibility, management, and control of information on both company-owned and employee-owned devices?
Implementing global e-invoicing with guaranteed legal certainty
Explaining the role local tax compliance plays in successful supply chain management and e-business and how leading global brands are addressing this.
Maximize storage efficiency across the enterprise
The HP StoreOnce backup solution offers highly flexible, centrally managed, and highly efficient data protection for any enterprise.
How modern custom applications can spur business growth
Learn how to create, deploy and manage custom applications without consuming or expanding the need for scarce, expensive IT resources.
Next gen security for virtualised datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.