Bidencash Market Dumps 1 Million Stolen Credit Cards On Russian Forum

BidenCash, a acheronian web carding marketplace known for its fierce tactics, has leaked a caller batch of 910,380 stolen in installments paper records connected nan Russian-language cybercrime forum XSS.

The leak, published connected April 14 astatine 6:37 PM (UTC), includes paper numbers, CVV codes, and expiration dates but lacks names aliases different personally identifying information. Despite nan constricted information set, nan dump poses a clear consequence for online fraud, peculiarly successful card-not-present transactions.

Screenshot from nan leaked information shows nan format of nan dump: 11111111111111|04/28|000 (Image credit: Hackread.com)

This isn’t nan first clip BidenCash has released stolen information successful bulk. The level has a history of pushing free leaks arsenic a measurement to summation attention, build credibility, aliases arsenic successful this case, declare enforcement of its ain marketplace rules.

In March 2023, BidenCash leaked 2 cardinal in installments paper details, which included cardholders’ afloat names, paper numbers, slope details, expiration dates, CVV numbers, location addresses, and much than 500,000 email addresses.

Later, in December 2023, nan marketplace released complete 1.6 cardinal in installments paper records containing afloat paper numbers, expiration dates, and CVV numbers, each stored successful plain matter format.

“Anti-Public System”

In nan station released alongside nan leak connected nan Russian forum, BidenCash claimed that nan information was scraped from different forums and Telegram groups passim nan past month. They stated nan intent was to showcase their alleged “anti-public system,” an soul process designed to place and region already-circulated cards from their marketplace.

“Once again, we will show nan results of our anti-public system’s work. These are nan information collected from various chats and forums complete nan people of a month. The cards that were recovered connected our level for waste person been removed, and nan suppliers were fined for each paper found.”

In different words, BidenCash is presenting this leak arsenic a type of audit. If immoderate vendor was caught trading cards that were already successful circulation, those listings were taken down, and nan sellers were penalised.

It’s an effort astatine value control, but it besides functions arsenic a promotional move. By dropping a monolithic dataset for free, they summation visibility among carders and lure postulation backmost to nan site.

BidenCash admin connected XSS forum (Image credit: Hackread.com)

No Names – Still Dangerous

While nan leak doesn’t incorporate names, nan exposed paper information is acold from harmless. Criminals often brace specified datasets pinch different breached accusation aliases usage them successful automated testing devices to behaviour fraud. The absence of names whitethorn thief these records bypass immoderate fraud discovery systems that lucifer personality data.

Cybercriminals tin besides select nan database by BIN (Bank Identification Number) to target circumstantial banks aliases regions. At nan clip of writing, location has been nary nationalist confirmation astir which banks are affected aliases really galore of nan cards are still active.

Context and Risks

BidenCash has been astir since early 2022, acting arsenic a hub for trading stolen in installments paper information. A batch of these markets popular up and vanish, but this one’s stuck astir mostly because it tries to support its listings successful cheque and claims to footwear retired copy aliases outdated data.

This caller leak seems for illustration much than conscionable a giveaway. It’s a measurement for them to show they’re still active, keeping tabs connected their sellers, and making sound to enactment relevant. While nan information doesn’t incorporate names aliases email addresses, nan exposed paper info tin still beryllium misused. If you’re concerned astir your costs paper information exposure, do this:

• Set up alerts for different charges

• Monitor your slope statements closely

• Use virtual cards for online purchases erstwhile possible

• Consider requesting a caller paper if suspicious activity arises