Dark-Web Vendors Advertise Fraud Services and Stolen Accounts Ahead of Black Friday
Summary
DarkOwl analysts found dark-web offers for hacked accounts, payment-card data and refunding services ahead of Black Friday and Cyber Monday, alongside fraud targeting e-commerce platforms and their customers.
Key points
- Dark-web vendors advertised hacked accounts and payment-card databases, sometimes claiming high validity rates or including personal information.
- Listings offered verified PayPal accounts and tutorials or methods for committing fraud; a Telegram user advertised Amazon refunding services and mentorship.
- Analysts observed hacked Amazon Prime accounts, discounted eBay gift cards, and accounts advertised with logs and additional personal and financial information.
- A forum user claimed to offer Shopify store information, including customer data and revenue, for $5,000; another advertised Shopify stores with claimed sales above €100,000.
- The article describes refund fraud as a common abuse of return processes and says fraud offerings also include stealer logs, credit-card data, gift-card fraud, and seller-store sales.
- DarkOwl expects more dark-web discount advertisements around the holiday shopping period and advises consumers to stay alert to e-commerce fraud.
Article Details
- Event Type
- DarkOwl analysts reported dark-web advertisements for stolen accounts, payment-card data, refund fraud services, gift cards, and other e-commerce fraud offerings ahead of Black Friday and Cyber Monday.
- Impact
- The reported activity exposes consumers and e-commerce businesses to account abuse, payment-card and personal-data theft, refund fraud, and sale of compromised or fraudulent goods and seller accounts. DarkOwl analysts expected these advertisements and related fraud to increase around the holiday shopping period.
Products
AmazonIn this blog, we first take a quick look at some of the “Black Friday” dark web deals followed by an overview of various types of fraud typically perpetrated against e-commerce companies like Amazon, Ebay, and Shopify.EbayIn this blog, we first take a quick look at some of the “Black Friday” dark web deals followed by an overview of various types of fraud typically perpetrated against e-commerce companies like Amazon, Ebay, and Shopify.PaypalThe post states that the vendor is selling verified PayPal accounts, but also offers methodologies and tutorials to teach a prospective threat actor how to engage in this sort of fraud.ShopifyIn this blog, we first take a quick look at some of the “Black Friday” dark web deals followed by an overview of various types of fraud typically perpetrated against e-commerce companies like Amazon, Ebay, and Shopify.SkypeIn another post mentioning eBay on a Telegram fraud group chat, DarkOwl analysts discovered a user advertising hacked accounts with logs and additional PII like SSN and bank accounts, for eBay, PayPal, and Skype.