Online fraudsters steal billions

All the criminals are happy to work together to steal money from credit cards and bank accounts. This is because card numbers stolen in one country can only be 'cashed out' in their home nation - necessitating contact across borders

Hi-tech thieves who specialise in card fraud have a credit line in excess of $5bn, research suggests.

Security firm Symantec calculated the figure to quantify the scale of fraud it found during a year-long look at the net's underground economy.
Credit card numbers are the most popular item on sale and made up 31 percent of all the goods on offer.

Coming in second are bank details which made up 20 percent of the items being offered on criminal chat channels.

The $5.3bn figure was reached by multiplying the average amount of fraud perpetrated on a stolen card, $350 by the many millions Symantec observed being offered for sale.

Similarly, the report said, "if hi-tech thieves plundered all the bank accounts offered for sale they could net up to $1.7bn."

Symantec said, "these figures are indicative of the value of the underground economy and the potential worth of the market."

"Credit card numbers have proved so popular among hi-tech thieves because they are easy to obtain and use for fraudulent purposes," it added.

Many of the methods favoured by cyber criminals, such as database attacks and magnetic strip skimmers, are designed to steal credit card information.

The existence of a ready market for any stolen data and the growing use of credit cards also helped maintain their popularity, it said.

"High frequency use and the range of available methods for capturing credit card data would generate more opportunities for theft and compromise and, thus, lead to an increased supply on underground economy servers," said the report.

The price card thieves can expect for the numbers they offer for sale also varied by the country of origin. US card numbers are the cheapest because they are so ubiquitous – 74 percent of all cards offered for sale were from the US.

By contrast numbers from cards issued in Europe and the Middle East commanded a premium because they were relatively rare.

The year-long look at the underground economy confirmed to Symantec how serious and organised cyber thieves have become.

Via the covert chat channels and invitation-only discussion forums hi-tech thieves form loose alliances, contact those who specialise in one technique or find individuals who can extract cash from particular credit cards .

Russian and Eastern European gangs seem to be among the most well-organised, said the report. But, it said, all the criminals are happy to work together to steal money from credit cards and bank accounts. This is because card numbers stolen in one country can only be 'cashed out' in their home nation - necessitating contact across borders.

"Symantec research indicates that there is a certain amount of collaboration and organisation occurring on these forums, especially at the administrative level," it said.

"Moreover, considerable evidence exists that organised crime is involved in many cases."