Shutterstock
People looking to buy stolen account credentials no longer need to scavenge through the dark corners of the Internet or pay with digital currencies.
Sellers on the online marketplace PayIvy are selling hacked logins for Netflix, Hulu, Spotify and other websites and are accepting PayPal payments, according to Brian Krebs, who runs a prominent cybersecurity blog. (You can also buy stolen PayPal credentials.) In some cases, the accounts are sold for just $1.
PayIvy did not immediately return a request for comment as to how it is handling merchants who sell stolen accounts, thus turning the platform into a tradepost for criminals. But it sent a message to its sellers Wednesday morning, saying it was banning Netflix accounts and that “If you are still selling these accounts, we advice [sic] you to stop as your paypal account will be limited as part of PayPal [Accepted Use Policies].”
Jack Christin Jr., associate general counsel at PayPal, told MarketWatch that the company investigates any suspected criminal activity.
“While we cannot comment on actions taken on specific accounts under our privacy policy, we continually review merchants utilizing the Paylvy platform and shut down accounts that are found to be violating our rules,” he says.
The scenario shows how the market for stolen credentials is growing and making it increasingly easy to buy peoples’ personal information. For cybercriminals, hijacked email and social accounts can yield far more than stolen credit card numbers. The accounts can be used to spam an individual’s network with messages that include malware, through which an attacker can compromise hundreds or even thousands of other users to harvest financial credentials and more.
http://www.marketwatch.com/story/heres-where-your-stolen-online-accounts-are-sold-via-paypal-2015-05-06
No comments:
Post a Comment