Last week, the D3Lab team of analysts spotted an underground forum called ‘AllWorld Cards’ on the deep web where a file containing one million credit cardholder records was shared for free.
The cards were stolen between 2018 and 2019.
The threat actor states that a random sampling of 98 cards showed approximately 27% of the cards were still active.
However, a report by Italian security firm D3Labs shows that 50% are still valid, a far more significant amount than initially indicated.
“At present, the feedback returned to our analysis team is still limited, but they are showing an incidence close to 50% of cards still operational, not yet identified as compromised,” reported D3Lab in a blog post about the leak.
The carding site started in May 2021 and has an inventory of 2,634,615 credit cards. The country with the most cards is the United States, with 1,167,616 cards for sale.
Cards range in price between $0.30 and $14.40, with 73% of the cards costing between $3.00 and $5.00.
