Slashdot Mirror

← Back to Stories (view on slashdot.org)

Hackers Are Selling Facebook Credentials on the Dark Web For $3 (nypost.com)

Posted by msmash on from the security-woes dept.

Hackers are selling Facebook logins for just $3 on the dark web, according to new research. From a report: The study by Money Guru found that Facebook logins can be bought for as little as 2.30 Pound ($3), with the report coming just hours after it was revealed that an enormous data breach has left at least 50 million Facebook accounts compromised. The research also found that hacked email logins are also being flogged on dark web marketplaces, which are easily accessible to anyone with the right browser and web addresses. Even financial data is being sold cheaply, with credit card information available for as little as $14 and debit card information for $19.50. The research was looking into the availability of logins for sale for the 26 most commonly used online accounts.

43 comments

  1. Prices all over the place by houghi · · Score: 1

    So what was the price. It was 2.30 GBP. That is 2.98447. It is close enough to 3.00USD that I would think that was the original price and it is calculated back to GBP.

    So where does the 2.60 USD come from?

    --
    Don't fight for your country, if your country does not fight for you.
    1. Re:Prices all over the place by cribb · · Score: 2

      Sales Tax. Woudn't want to be on the wrong side of law now, would you?

      --
      Hostes alienigieni me abduxerunt. Qui annus est?
    2. Re:Prices all over the place by Anonymous Coward · · Score: 0

      if you have to ask how much it costs you can't afford it.

    3. Re:Prices all over the place by Anonymous Coward · · Score: 0

      Crack pipe

    4. Re:Prices all over the place by alex67500 · · Score: 1

      Especially on the DarkWeb!!!!

    5. Re:Prices all over the place by cascadingstylesheet · · Score: 1

      Especially on the DarkWeb!!!!

      Sounds like a cartoon supervillian.

      Or "complex" hero ...

    6. Re:Prices all over the place by Anonymous Coward · · Score: 0

      Does it really matter, it's fucking $.60 difference

    7. Re: Prices all over the place by Anonymous Coward · · Score: 0

      That's a 20% difference.

    8. Re:Prices all over the place by Anonymous Coward · · Score: 0

      The price is likely originally in either GBP or USD but in some crypto (monero or dash?) to make the payment anonymous.

  2. There's a Good Reason it's Cheap by natetheokay · · Score: 5, Informative

    Converting stolen credentials into actual money is hard. Since banks can repudiate and reverse password-enabled transfers you have to have a mule to be left holding the (empty) bag when the bank reverses the transfer. Microsoft had an interesting whitepaper on the topic a few years back: https://www.microsoft.com/en-u...

    1. Re:There's a Good Reason it's Cheap by misnohmer · · Score: 1

      And yet, when I had an insurance company continue to do direct withdrawals from my account without my authorization after I cancelled my insurance policy, my bank told me their responsibility is to tell me who took the money, not to refund it. It was my responsibility to chase after the insurance company. I tried blocking the payments, so the insurance company changed the amount by a penny and it went through again. Bank explained that I have to know the exact amount or they can't block it. I later found out they could have put manual blocks in place, but that's too expensive for a human to check every withdrawal, so they didn't offer it. I closed the checking account, so the bank proceeded to overdraft from my other account, tacking on an additional fee of course. Eventually just closed all accounts with the bank. Insurance company eventually refunded the money they took, but not the overdraft fee I incurred.

      So maybe this guarantee is only if you can prove that the money was stolen because of stolen credentials. If you can't prove it, you don't get this coverage?

  3. Okay, I'll ask the stupid question by Anonymous Coward · · Score: 1

    Since I'm not on Facebook, I have no idea what the heck anyone would really do with a stolen login to the place. Why is a Facebook login worth anything at all? After they log in, then... what?

    1. Re: Okay, I'll ask the stupid question by Anonymous Coward · · Score: 0

      Well, for one, personal data messaged between spouses. Youd be surprised how much people send over messenger.

      I've come across lots of nude pics of female friends of mine that they sent through various social media messages..

    2. Re:Okay, I'll ask the stupid question by Luthair · · Score: 2

      I imagine you could use it for fishing attacks, users are probably a lot more likely to click on a link their friend sent them.

      Also don't forget that the Facebook is also used as a SSO for many sites, so an attacker could use that to access information stored on those sites, or just to spam random sites.

    3. Re: Okay, I'll ask the stupid question by LordWabbit2 · · Score: 4, Informative

      Because a LOT of people use Facebook authentication for OTHER websites, if one of them happens to be an e-commerce site you can then use their saved credit card details to buy stuffs, or stalk them etc.

      --
      There are three kinds of falsehood: the first is a 'fib,' the second is a downright lie, and the third is statistics.
    4. Re:Okay, I'll ask the stupid question by CaptainDork · · Score: 1

      You'd be surprised how many people conveniently log in to other sites using their Facebook account.

      --
      It little behooves the best of us to comment on the rest of us.
    5. Re:Okay, I'll ask the stupid question by Anonymous Coward · · Score: 0

      The whole concept of being "worried" about this is absurd anyway. People give FB 100% of their secrets and then get worried when someone steals them? What?

    6. Re: Okay, I'll ask the stupid question by Anonymous Coward · · Score: 0

      Well, for one, personal data messaged between spouses.

      Or, better yet, mistresses...

    7. Re:Okay, I'll ask the stupid question by Anonymous Coward · · Score: 0

      All those cute cat pictures!

    8. Re:Okay, I'll ask the stupid question by infolation · · Score: 1

      what the heck anyone would really do with a stolen login to the place

      They can try to log in with the wrong IP address, device profile or browser fingerprint for the account, and then be put through a few hours of the game 'do you recognise these dark, grainy, blurry pictures of your friends?'

      Alternatively they could fail the 2FA SMS check.

  4. wow! by Anonymous Coward · · Score: 5, Funny

    Where can I sell my own account myself? I'd honestly rather have 10 chicken mcnuggets than a facebook account anyway.

    1. Re:wow! by Oswald+McWeany · · Score: 2

      Where can I sell my own account myself? I'd honestly rather have 10 chicken mcnuggets than a facebook account anyway.

      This. I will create a facebook account if I can sell it. So far I've not seen any point in making a facebook account- but I will if people pay me for them.

      I will pass on the Chicken McNuggets though, I don't like McDonalds.

      --
      "That's the way to do it" - Punch
    2. Re:wow! by Anonymous Coward · · Score: 0

      it takes a tough man to make a tender chicken

    3. Re:wow! by Gr8Apes · · Score: 1

      I'm pretty sure I can create an account per minute, so this might be more profitable than flipping burgers!

      --
      The cesspool just got a check and balance.
  5. I can make new ones in two minutes by Anonymous Coward · · Score: 1

    So that's what, $90 an hour? brb.

  6. $3 is little money. by Anonymous Coward · · Score: 0

    Why not 1 bitcoin per login?

    --- Ramsonware Intelligence ---

  7. Two Factor Authentication by Anonymous Coward · · Score: 0

    ...be glad if you have it.

  8. At last, now I'll be able to login by clovis · · Score: 4, Funny

    I setup a Facebook account over 10 years ago using a throw-away email account and a phony birthdate. The only real info was my actual name.
    I forgot my password, and Facebook is no help.
    How do I contact these dark web people to get my password? For only $3, it's a bargain.

    1. Re:At last, now I'll be able to login by Anonymous Coward · · Score: 1

      also, try to get the login credentials of your wife. You'd be surprised that your neighbors gardener and your driver is sleeping with her.

    2. Re:At last, now I'll be able to login by Gr8Apes · · Score: 1

      You are not alone. Maybe I should try to login sometime? I have no idea what any of the credentials were though, and the data was all false anyways.

      --
      The cesspool just got a check and balance.
  9. The daily msmash by Anonymous Coward · · Score: 0

    "hackers" this, "hackers" that, and no content.

  10. Two dollars by CrimsonAvenger · · Score: 1
    I'll sell MY Facebook Credentials for just two dollars.

    Of course, you'll have to wait on delivery till I start a Facebook account....

    --

    "I do not agree with what you say, but I will defend to the death your right to say it"
  11. Now I really feel cheap! by Anonymous Coward · · Score: 0

    Only $3? Back in my day you had to pay at least $5!

  12. What a ripoff by magarity · · Score: 1

    Facebook lets you make your own account for free.

    1. Re:What a ripoff by misnohmer · · Score: 1

      It's not necessarily your facebook account they want. Majority of people use the same (or similar enough to guess via automated mutation) password on facebook as they do on their other accounts - bank, ebay, paypal - all accounts which can be monetized faster than a facebook account. If your email password is compromised, most sites passwords can be reset via your email to gain access.

  13. Slashdot login for $ale!! by Anonymous Coward · · Score: 0

    I'll send you the password for the ' Anonymous Coward' account for just $1.75!

  14. Get a life by Anonymous Coward · · Score: 1

    The research was looking into the availability of logins for sale for the 26 most commonly used online accounts.

    If your Facebook account is one of the 26 most active in the world, could I humbly suggest stepping away from the keyboard.

  15. Where can I sell by Anonymous Coward · · Score: 0

    I could use the $3.