Cyber Security
April 8, 2021

How Do Hackers Sell Stolen Credit Card Details In The Dark Web?

Stolen credit card details are of immense importance and profitable for those who buy them from the darknet and for the hackers who acquire them and sell them on the various dark web websites. The process of acquiring stolen card details is called carding, which has been growing massively with each passing day.

The hackers are pro in conducting carding procedures. They use specific tools and methods to give carding a justification. They would need - a computer, SOCKS, MAC Address Changer, CCleaner, RDP, and Credit Card (CC). A computer helps to line up everything and utilize a premium VPN to have an anonymous connection. The CCleaner will clean up the browser history, cookies, and flash cookies. The MAC address changer enables you to spoof the MAC address of the network interface card (NIC) instantly. So basically, it will bypass the actual NIC and alter it with a new MAC address.

Next, they own legit credit cards like Mastercard or VISA cards. AMEX cards are mainly used because of high limits. It comes in the following format:

Card Number | Exp Date | CVV2 code | Name on the cardboard | Address | City | State | Country | code | Phone # (sometimes excluded depending on where you get your Master/Visa Card from)|

Then the hackers would implement SOCKS, a protocol exchanging network packets between a server and a client using a Proxy server. After this, they employ the Remote Desktop Protocol or RDP to geolocate the card holder's PC. Often carding is done via any other computer, and the hackers generally do not use their own systems.

After the hackers conduct carding and create a solid database of the carded details, they upload it on various dark web markets, vendor shops, and hacking forums. The price of the carded details depends on the limits and expiration. The higher the limit of the card and expiry date, the higher will be the price.