Hundreds of Stolen Data Dumps Found (Washington Post)

[DrewWilson]

A comprehensive new study that peers into huge troves of financial data stolen by cyber thieves confirms what experts have surmised from looking at much smaller, isolated caches of digital loot: That criminals can make hundreds, even thousands, of dollars a day selling data stolen with the help of widely available software toolkits.

Recent reports by security firms Finjan, RSA, SecureWorks and Symantec have shown that stolen identities, bank accounts and credit card numbers are sold in bulk every day in shadowy online forums, often for pennies on the dollar. In its analysis, Symantec found in 2007 that the going rate for the keys to assuming someone else's identity was between $14 and $18 per victim.

Those reports either presented conclusions based on examining a single cache of stolen data, or by observations based on watching transactions between cyber thieves. But a report released today by researchers at the University of Mannheim, Germany, offers a disturbing glimpse at the sheer abundance of this stolen data.

The researchers used "honeynets," or distributed network of dummy computers that were set up to be hacked, so that they could gather intelligence about the attack patterns and methods used by cyber criminals.

More... (http://voices.washingtonpost.com/securityfix/2008/12/hundreds_of_stolen_data_dumps.html)

Interesting.

[mountain_rage]

A comprehensive new study that peers into huge troves of financial data stolen by cyber thieves confirms what experts have surmised from looking at much smaller, isolated caches of digital loot: That criminals can make hundreds, even thousands, of dollars a day selling data stolen with the help of widely available software toolkits.

Recent reports by security firms Finjan, RSA, SecureWorks and Symantec have shown that stolen identities, bank accounts and credit card numbers are sold in bulk every day in shadowy online forums, often for pennies on the dollar. In its analysis, Symantec found in 2007 that the going rate for the keys to assuming someone else's identity was between $14 and $18 per victim.

Those reports either presented conclusions based on examining a single cache of stolen data, or by observations based on watching transactions between cyber thieves. But a report released today by researchers at the University of Mannheim, Germany, offers a disturbing glimpse at the sheer abundance of this stolen data.

The researchers used "honeynets," or distributed network of dummy computers that were set up to be hacked, so that they could gather intelligence about the attack patterns and methods used by cyber criminals.

More... (http://voices.washingtonpost.com/securityfix/2008/12/hundreds_of_stolen_data_dumps.html)

Interesting.

Its the banks fault, yet consumers are being made to take allot of the blunt from these attacks. It seriously pisses me off that I can't lock down my online banking to only do specific tasks unless I make changes at the bank in person. It also pisses me off that banks and credit card companies don't have tighter security for identity fraud. Most of the information used to fake your identity requires what is public knowledge, its about time they banks, credit card companies and such are made legally responsible for opening accounts under false pretenses. If someone pretends to be me and opens an account, I should be able to sue the bank that allowed it.

[Feather]

I totally agree. (posted in rant)I just had $2500 stolen out of my account by a forged check card. The bank officer says these things happen but we can fix your account in 14 days.

[SteveKiel]

I agree there should be higher responsibilities on part of banks, and other financial establishments, but really they are doing us a the favor. And they often take good care of us, although you had 2500USD stolen from you Feather, they are giving it back to you. Thats their loss, and I'm sure some insurance pays for it, and interest on loans, but for how bad the banks are doing, I am just glad they are still open and taking care of the customers.

[YWD67]

I agree there should be higher responsibilities on part of banks, and other financial establishments, but really they are doing us a the favor. And they often take good care of us, although you had 2500USD stolen from you Feather, they are giving it back to you. Thats their loss, and I'm sure some insurance pays for it, and interest on loans, but for how bad the banks are doing, I am just glad they are still open and taking care of the customers.

I bet you did not type that post with straight face.
Either that or you work for Bank of America and you believe your own BS propoganda.

[Feather]

Yes I did get my money back. The benefit of having visa platinum check card.
MHO let the ones fail that have made poor decisions and let the prosperous ones gobble them up.
The free market will fix itself when left to its own measures.

[SteveKiel]

I bet you did not type that post with straight face.
Either that or you work for Bank of America and you believe your own BS propoganda.

haha, no, I just have confidence in our banking system and government.

[Signa]

haha, no, I just have confidence in our banking system and government.

Now, I can agree with the banking system because I can't say I've experienced much of their short comings (bailout not-withstanding), but the government?!? C'mon dude, pull your head out of your ass! Have you ever considered the number of laws and ordinances that have been made by politicians that you, or anyone would have ever said were ok? We were made as a government for the people, by the people, and yet, the government is all in it for itself.

All the evidence you need was in last years election. BOTH candidates were chosen based on their likelihood of being elected and NOT their ability to lead a country. No longer is it about how well a politician can help people, but who (dems of GOP) controls the whitehouse. It's apparently more important who gets the bragging rights of that title than how well the country is run.