Security Experts:

Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Cybercrime

Stolen Identity Business Going Strong

The market for stolen identities is thriving.

But it’s not just individual pieces of information that are selling. According to research from Dell SecureWorks, cybercriminals are also hawking complete kits of information. For example, a scan of a working social security card, name and address can go for $250. Another $100 will get a buyer a utility bill for additional identity verification.

The market for stolen identities is thriving.

But it’s not just individual pieces of information that are selling. According to research from Dell SecureWorks, cybercriminals are also hawking complete kits of information. For example, a scan of a working social security card, name and address can go for $250. Another $100 will get a buyer a utility bill for additional identity verification.

According to the research, hackers are monetizing all kinds of data, and utility companies are right alongside banks, retailers and healthcare providers as sources of personally-identifiable information (PII).

“The new identity kits were for U.S. residents only, and you could choose an identity for a person living in a specific state,” said David Shear, network security analyst at Dell SecureWorks. “The prices mentioned are just for American identities because they also come with a corresponding utility bill if you want.”

Counterfeit non-U.S. passports cost between $200 and $500.

“For this price, you can provide your own specifications: name, address, place of birth, age, etc. and then you will receive a scan of the passport,” according to the report. “Most businesses will accept a scan of a passport as proof of one’s identity, and it is easier for the scammer to produce. This form of identification can be used to assist in fraud:  credit card fraud, check fraud, government assistance fraud, etc.”

U.S. passports were not widely available on the underground hacker markets the researchers analyzed. However, U.S.-based drivers’ licenses cost between $100 and $150 each, and could be customized to include any name, street address or state.

“The hackers are also imitating actual holograms on the licenses,” the report noted. “Of course, if you want to purchase them in bulk the price per license goes down. A fake driver’s license can be used to assist in many types of fraud, including check and credit card fraud.”

According to Shear, there are five to 10 popular markets that get a lot of traffic because the hackers behind the market have good reputations.

“I was surprised so many 100 percent satisfaction guarantees along with the goods,” Shear said. “There are a lot of competition with the stolen payment cards for example and these sellers want the buyers to come back to them so they have to offer something extra , plus they have a lot of inventory to pull from.”

Written By

Click to comment

Expert Insights

Related Content

Cybercrime

Zendesk is informing customers about a data breach that started with an SMS phishing campaign targeting the company’s employees.

Cybercrime

The release of OpenAI’s ChatGPT in late 2022 has demonstrated the potential of AI for both good and bad.

Cybercrime

A new study by McAfee and the Center for Strategic and International Studies (CSIS) named a staggering figure as the true annual cost of...

Cybercrime

The FBI dismantled the network of the prolific Hive ransomware gang and seized infrastructure in Los Angeles that was used for the operation.

Cybercrime

Video games developer Riot Games says source code was stolen from its development environment in a ransomware attack

Cybercrime

CISA, NSA, and MS-ISAC issued an alert on the malicious use of RMM software to steal money from bank accounts.

Cybercrime

Chinese threat actor DragonSpark has been using the SparkRAT open source backdoor in attacks targeting East Asian organizations.

Application Security

PayPal is alerting roughly 35,000 individuals that their accounts have been targeted in a credential stuffing campaign.