Security News > 2023 > May > Infamous cybercrime marketplace offers pre-order service for stolen credentials

Infostealer malware, which consist of code that infects devices without the user's knowledge and steals data, remains widely available to buy through underground forums and marketplaces, with the volume of logs, or collections of stolen data, available for sale increasing at alarming rates, according to Secureworks.

"Infostealers are a natural choice for cybercriminals who are looking to rapidly gain access to businesses and then monetize that access," said Don Smith, VP threat research, Secureworks CTU. "They are readily available for purchase, and within as little as 60 seconds of installation on an infected computer will immediately generate a return on investment in the form of stolen credentials and other sensitive information. However, what has really changed the game, as far as infostealers are concerned, is improvements in the various ways that criminals use to trick users into installing them. That, coupled with the development of dedicated marketplaces for the sale and purchase of this stolen data, has really upped the ante," added Smith.

In a period of nearly 2 years the overall growth rate for the number of logs for sale on Russian Market was 670%. Russian Market remains the top seller for infostealer logs.

At the time of this report, Russian Market offers five million logs for sale which is around ten times more that its nearest rival 2easy.

Much like the general cybercrime ecosystem, the successful development and deployment of infostealers relies on individuals with a broad range of skills, roles and responsibilities.

Russian Market now offers users the option to preorder stolen credentials for a specific organization, business, or application, and all that is required is $1,000 deposit into the site escrow system.

News URL

https://www.helpnetsecurity.com/2023/05/17/infostealer-malware-market/