Hacker’s Menu
If you were a hacker looking to sell your ill-gotten gains in an online bazaar, you could be expected to fetch the following prices for your data. This list was compiled by Raimund Genes, CTO of Trend Micro.
From the Reg here:
- $1000 – $5000: Customised Trojan program, which could be used to steal online account information
- $500: Credit Card Number with PIN
- $80-$300: Change of billing data, including account number, billing address, Social Security number, home address and birth date
- $150: Driver s licence
- $150: Birth certificate
- $100: Social Security Card
- $7 – $25: Credit card number with security code and expiration date.
- $7: Paypal account log-on and password
Trend derived its data from prices on underground bulletin boards and online forums.
Genes said that malware threats are increasingly created for the purpose of financial gain, with attack techniques becoming more sophisticated. More common activities include trying to steal bank account or credit card numbers and passwords through phishing and keylogging malware. The information gathered can then be sold on the web. Internet Relay Chat (IRC) channels, for example, are a common “flea market” for stolen personal data.
What is missing from this list are the prices for known good spam lists for phishing use and even more valuable are targeted lists of email addresses for a specific organization, for use in spear phishing. Also missing are the prices of botnets of varying sizes for use in spamming and DDoS activity.
