KnowYour Enemy - A Profile

Returns URLs of sites known to be vulnerable to credit card fraud from a … Obtains a credit card number from a database forwarded through the IRC …

THE HONEYNET PROJECT & THE HONEYNET RESEARCH ALLIANCE

Know Your Enemy - A Profile
Profile: Automated Credit
Card Fraud
Assessment Date: 6 June, 2003
EXECUTIVE SUMMARY
Automation of Credit Card Fraud
For several years the Honeynet Project and
Alliance members have been monitoring
individuals using the Internet to trade or deal
in stolen credit card information. In the past,
these individuals (commonly called “carders”)
typically acted on their own without significant
organization or automation. Recently, the
Project has identified an organized exchange
for stolen credit card information linking
hundreds of carders worldwide through
specialized IRC channels and related web
sites. This network provides far greater
automation of a number of illicit activities
contributing to credit card fraud and identity
theft, including: compromising merchant sites,
validating and verifying stolen credit card
information, and the sale or exchange of
stolen information. As with the automation
and dissemination of exploit code in the
vulnerability cycle, this implies a significant
capacity for increased criminal activity.
WHAT IS HAPPENING
Stolen credit cards and related identity
information (name, address, phone, etc.) have
long been a popular form of illicit “currency”
among cyber-criminals and within the blackhat
community. However, the skill.

http://old.honeynet.org/papers/profiles/cc-fraud.pdf