Security researchers with Group-IB are warning that threat actors have begun selling a staggering 1.3 million payment cards on Joker’s Stash, the largest underground market place for payment card data. Most of the data belongs to Indian cardholders. The cards are being sold for $100 a piece.
While Group-IB has not finished its investigation into the data dump, the information may have been harvested via malware on ATMs or PoS systems, since it includes data that is normally stored on the magnetic strip of payment cards. Group-IB announced that an analysis of over 550,000 cards from the database showed that “more than 98% belong to Indian banks, 1% to Colombian” banks, while “more than 18% of the 550K cards that have been analyzed so far belong to a single Indian bank.”
Read more: Details for 1.3 million Indian payment cards put up for sale on Joker’s Stash