glennhall@discoverfinancial.com wrote:
It makes me feel both happy and very uneasy when Discover Card is not on
the list. Just to clarify, when you say stolen cards, you really mean
stolen card data, correct? In addition, in your analysis of the carder
forums, can you tell if the majority of the card data is obtained by the
carders via phishing and pharming, hackings, or both?
We are getting a more determination through thorough analysis of this
group, but the majority obtained is through phishing and botnets.
Thanks.
(Embedded image moved to file: pic29711.jpg)
Lance James
<phishing@secures
cience.net> To
"Malicious Activity Awareness &
05/26/2006 12:56 Response Discussions"
AM <general-discussion@mal-aware.org>,
Phish-Net <phish-net@ncfta.net>,
Apwg <apwg@antiphishing.kavi.com>,
phishing@securityfocus.com,
bugtraq@securityfocus.com,
"full-disclosure@lists.grok.org.uk"
<full-disclosure@lists.grok.org.uk>
cc
Subject
[apwg] Graph analysis of stolen
credit cards
Hi all,
We took one sample of one carding/phishing forum that our Global
Surveillance Center was monitoring and sampled the set into a graph that
lists the top 10 banks and the losses over the last month. As you can
see, it's obvious who the top credit card companies are out there, but
at the same time, we can see an ever increasing on the top targets but
not necessarily an increase on the lower tiers over the entire three
months, but in the first two we see a significant increase in success
with stolen credit cards in general. In this case, the loss that we
captured (which probably isn't nearly the number captured by this forum)
was a little over 21,000 credit cards.
Thought this might interest some, and if this is interesting, we are
going to be providing a graph of the losses of top targets with malware
in the upcoming weeks.
Attached is the chart.
--
Best Regards,
Lance James
Secure Science Corporation
www.securescience.net
Author of 'Phishing Exposed'
http://securescience.net/home/news/phishingexposed.html
**********************************************
* New IntelliFound Service 2 weeks free *
* Real-Time Identity Surveillance Service *
* https://slam.securescience.com/signup.cgi *
**********************************************
(Embedded image moved to file: pic09317.gif)
------------------------------------------------------------------------
------------------------------------------------------------------------
--
Best Regards,
Lance James
Secure Science Corporation
www.securescience.net
Author of 'Phishing Exposed'
http://securescience.net/home/news/phishingexposed.html
**********************************************
* New IntelliFound Service 2 weeks free *
* Real-Time Identity Surveillance Service *
* https://slam.securescience.com/signup.cgi *
**********************************************
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/
