Security News > 2024 > August > Russian man who sold logins to nearly 3,000 accounts gets 40 months in jail
A Russian national is taking a trip to prison in the US after being found guilty of peddling stolen credentials on a popular dark web marketplace.
According to the original indictment [PDF], the credentials sold by Kavzharadze included those for five different banks and went on to be abused in fraudulent transactions exceeding $5 million in value.
The Russian sold more than 297,300 credentials on Slilpp and listed more than 626,000 over the course of his five-year tenure on the site, which also included running themed discount events such as Cyber Monday sales.
Feds said "Related PII" was sold alongside the logins for "Online payment accounts, bank accounts, and other accounts." The people who purchased those login credentials used those credentials to steal money from victim accounts.
It had been operating for nearly a decade by that point, and authorities said more than 80 million credentials were sold during that time, racking up estimated damages to the tune of more than $200 million.
Credentials for more than 1,400 different account providers were listed during Slilpp's time and authorities likened it to Amazon and eBay for selling credentials.