Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Cybercrime

Stolen Identity Business Going Strong

The market for stolen identities is thriving.

But it’s not just individual pieces of information that are selling. According to research from Dell SecureWorks, cybercriminals are also hawking complete kits of information. For example, a scan of a working social security card, name and address can go for $250. Another $100 will get a buyer a utility bill for additional identity verification.

The market for stolen identities is thriving.

But it’s not just individual pieces of information that are selling. According to research from Dell SecureWorks, cybercriminals are also hawking complete kits of information. For example, a scan of a working social security card, name and address can go for $250. Another $100 will get a buyer a utility bill for additional identity verification.

According to the research, hackers are monetizing all kinds of data, and utility companies are right alongside banks, retailers and healthcare providers as sources of personally-identifiable information (PII).

“The new identity kits were for U.S. residents only, and you could choose an identity for a person living in a specific state,” said David Shear, network security analyst at Dell SecureWorks. “The prices mentioned are just for American identities because they also come with a corresponding utility bill if you want.”

Counterfeit non-U.S. passports cost between $200 and $500.

“For this price, you can provide your own specifications: name, address, place of birth, age, etc. and then you will receive a scan of the passport,” according to the report. “Most businesses will accept a scan of a passport as proof of one’s identity, and it is easier for the scammer to produce. This form of identification can be used to assist in fraud:  credit card fraud, check fraud, government assistance fraud, etc.”

U.S. passports were not widely available on the underground hacker markets the researchers analyzed. However, U.S.-based drivers’ licenses cost between $100 and $150 each, and could be customized to include any name, street address or state.

“The hackers are also imitating actual holograms on the licenses,” the report noted. “Of course, if you want to purchase them in bulk the price per license goes down. A fake driver’s license can be used to assist in many types of fraud, including check and credit card fraud.”

Advertisement. Scroll to continue reading.

According to Shear, there are five to 10 popular markets that get a lot of traffic because the hackers behind the market have good reputations.

“I was surprised so many 100 percent satisfaction guarantees along with the goods,” Shear said. “There are a lot of competition with the stolen payment cards for example and these sellers want the buyers to come back to them so they have to offer something extra , plus they have a lot of inventory to pull from.”

Written By

Marketing professional with a background in journalism and a focus on IT security.

Click to comment

Trending

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Join the session as we discuss the challenges and best practices for cybersecurity leaders managing cloud identities.

Register

SecurityWeek’s Ransomware Resilience and Recovery Summit helps businesses to plan, prepare, and recover from a ransomware incident.

Register

Expert Insights

Related Content

Cybercrime

The changing nature of what we still generally call ransomware will continue through 2023, driven by three primary conditions.

Cybercrime

A recently disclosed vBulletin vulnerability, which had a zero-day status for roughly two days last week, was exploited in a hacker attack targeting the...

Cybercrime

As it evolves, web3 will contain and increase all the security issues of web2 – and perhaps add a few more.

Cybercrime

Luxury retailer Neiman Marcus Group informed some customers last week that their online accounts had been breached by hackers.

Cybercrime

Zendesk is informing customers about a data breach that started with an SMS phishing campaign targeting the company’s employees.

Cybercrime

Patch Tuesday: Microsoft calls attention to a series of zero-day remote code execution attacks hitting its Office productivity suite.

Artificial Intelligence

The release of OpenAI’s ChatGPT in late 2022 has demonstrated the potential of AI for both good and bad.

Cybercrime

Satellite TV giant Dish Network confirmed that a recent outage was the result of a cyberattack and admitted that data was stolen.