There has long been a market for stolen credentials, with sophisticated e-commerce websites that provide all the information needed by cyber criminals looking to hack into online accounts. The crooks running the websites are making a handsome living and there is no end in sight for the supply and demand of user ids and passwords. It is time to consider using a password manager and 2-factor authentication (2FA). And do not re-user passwords.
The Market for Stolen Account Credentials Past stories here have explored the myriad criminal uses of a hacked computer, the various ways that your inbox can be spliced and diced to help cybercrooks ply their trade, and the value of a hacked company. Today’s post looks at the price of stolen credentials for just about any e-commerce, bank site or popular online service, and provides a glimpse into the fortunes that an enterprising credential thief can earn selling these accounts on consignment.