Original URL: http://www.theregister.co.uk/2006/12/12/cybercrook_xmas_wish_list/

Inside a cyber-crook's Xmas wish list

Trojan flea market thrives online

By John Leyden

Posted in Security, 12th December 2006 18:36 GMT

Most people will be looking forward to receiving digital cameras, games and the like - as well as the inevitable pair of socks - this Christmas. But cybercrooks can take the opportunity to splash out, angling for things such as credit card numbers and their corresponding PINs, the trade in which is booming online.

Some items are more valuable than others, according to Raimund Genes, CTO of net security firm Trend Micro, which has compiled what it reckons an average cyber crook’s Christmas list might look like:

Trend derived its data from prices on underground bulletin boards and online forums.

Genes said that malware threats are increasingly created for the purpose of financial gain, with attack techniques becoming more sophisticated. More common activities include trying to steal bank account or credit card numbers and passwords through phishing and keylogging malware. The information gathered can then be sold on the web. Internet Relay Chat (IRC) channels, for example, are a common "flea market" for stolen personal data. ®