Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Tracking & Law Enforcement

Carding Marketplace BidenCash Shut Down by Authorities 

Authorities seized 145 domains associated with BidenCash, a marketplace for stolen credit cards and personal information.

BidenCash takedown

Approximately 145 dark web and clear web domains associated with the BidenCash marketplace have been seized, the US Department of Justice announced.

Operating since March 2022, BidenCash allowed cybercriminals to sell and buy stolen credit cards and personally identifiable information, with the marketplace’s administrators charging a fee for each transaction.

In less than a year after it became operational, BidenCash became one of the top carding marketplaces.

Between October 2022 and February 2023, 3.3 million stolen credit cards were published on BidenCash for free, as means to promote its services.

“The stolen data included credit card numbers, expiration dates, Card Verification Value (CVV) numbers, account holder names, addresses, email addresses, and phone numbers,” the DoJ says.

Even after the card details have expired, threat actors may use the leaked personal information for phishing, identity theft, and various types of scams, security researchers have warned.

Advertisement. Scroll to continue reading.

According to the DoJ, BidenCash had over 117,000 customers, with more than 15 million payment card numbers and associated personal information traded on it. The marketplace generated more than $17 million in revenue throughout its operation.

In addition to seizing the marketplace’s darknet and traditional internet domains, authorities obtained court orders to seize cryptocurrency funds the marketplace generated from the illegal sales.

Following the takedown, visitors to BidenCash marketplace domains will be redirected to a domain controlled by US law enforcement, usssdomainseizure.com, and will see a seizure banner.

The investigation into BidenCash was led by the United States Secret Service and the FBI, with assistance from the Dutch National High Tech Crime Unit, The Shadowserver Foundation, and Searchlight Cyber.

Related: Counter Antivirus Service AVCheck Shut Down by Law Enforcement

Related: DanaBot Botnet Disrupted, 16 Suspects Charged

Related: German Authorities Take Down Crypto Swapping Service eXch

Related: US Announces Botnet Takedown, Charges Against Russian Administrators

Written By

Ionut Arghire is an international correspondent for SecurityWeek.

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing for the latest cybersecurity threats, trends, and expert insights.

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Close the security gaps between pentests. Join this session to explore agentic pentesting and gain a practical framework for continuous exposure validation in your CTEM program.

Register

Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.

Register

People on the Move

Tal Kapulnik has been named CMO at Terra Security.

Cloudflare has appointed Christian Smith as President of Revenue.

Doran Stienike has become CIO at Presidio.

More People On The Move

Expert Insights

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest cybersecurity news, threats, and expert insights. Unsubscribe at any time.