BidenCash market leaks over 2 million stolen bank cards at no cost

A carding market often known as BidenCash has leaked on-line a free database of two,165,700 debit and bank cards in celebration of its first anniversary.

Rather than retaining it beneath wraps, the risk actors marketed this huge leak on an underground cybercrime discussion board for extra intensive attain and to draw as a lot consideration as potential.

According to Cyble researchers who first noticed it, the leaked data is intensive, with particulars on “at the very least 740,858 bank cards, 811,676 debit playing cards, and 293 cost playing cards.”

Out of those, tens of hundreds have been duplicates, however there are nonetheless 2,141,564 distinctive ones, based on D3Lab’s Head of Threat Intelligence, Andrea Draghetti.

The dataset accommodates personally identifiable data comparable to names, emails, telephone numbers, house addresses, and fee card particulars, together with card expiration dates and CVV codes, with the playing cards’ expiration dates going as far out as 2052.

Draghetti informed BleepingComputer that the huge database additionally consists of roughly 497,000 distinctive electronic mail addresses, totaling greater than 28,000 distinctive electronic mail domains, which might show priceless as ammunition in future focused phishing scams and different fraud campaigns.

“We are thrilled to have reached our first yr anniversary as a web-based retailer, and we could not have completed it with out your assist! Thank you for selecting our retailer and for trusting us to offer you high quality merchandise and glorious service,” BidenCash’s announcement learn.

“We are proud to have you ever as a buyer, and we sit up for persevering with to serve you within the coming years. Your loyalty and belief are what encourage us to maintain enhancing and rising our enterprise.”

​While the researchers could not inform BleepingComputer how a lot of the knowledge leaked on-line at no cost by BidenCash is legitimate, the chance of it being utilized by fraudsters and cybercriminals cannot be underestimated.

“The presence of electronic mail addresses and full data (generally known as “Fullz” by cybercriminals) will make the victims of this leak susceptible to different assaults, comparable to phishing, id theft, and scams, gone the expiration of their card particulars,” Cyble mentioned.

The carding store has been energetic since February 28, 2022, reaching the fifth spot by whole quantity in a rating created by risk intel agency Flashpoint.

This can also be not the primary time BidenCash has used free bank card leaks for promotion, seeing that such “advertising and marketing” ways have all the time been part of the carding market world.

In October, the carding store launched one other free dump of 1,221,551 bank cards, and, simply because it occurred this week, the crooks distributed it through a clearnet area and varied different hacking and carding boards.

Roughly 30% out of a random sampling of the leaked bank cards that have been analyzed D3Lab on the time turned out to be “recent” (usable for monetary fraud).

Another carding market, All World Cards, equally promoted itself in August 2021 when it leaked 1,000,000 bank cards at no cost on varied hacking boards.