Tech

Hackers buy personal data and passwords from bots for a handful of euros

Your personal data may currently be on sale for next to nothing. This is according to the latest report from NordVPN, which has tracked down several marketplaces run by bots. Above, hackers can buy “packs” of sensitive information, including passwords, for the trifle of 6 dollars.

cybersecurity network
Credit: artemisdian

It is now common knowledge that almost anyone can buy personal data stolen from Internet users, if you know which site to go to. What is less known, however, is that these marketplaces are sometimes managed automatically by bots, which are responsible for carrying out transactions in complete discretion. In its latest report, NordVPN explains the process used by hackers.

The first step is of course to steal the coveted data. To do this, hackers infect their victim’s device with automated malware responsible for collecting as much information as possible: screenshots, identifiers, passwords, browsing cookies, forms and all other data allowing to know the identity of the targeted person.

Related: This malware created by North Korean hackers scans your PC to steal your data

Here’s how hackers easily buy personal data

Once all this data has been collected, the bot groups it together in a single “package”, which it then publishes on the marketplaces. NordVPN has identified three main ones: the Genesis Market, Russian Market and 2Easy. These sites are freely accessible from any browser. According to the firm, some floors are sold for only 6 dollars. However, at this price, buyers ensure that they have real data that allows them to carry out all kinds of attacks.

On the same subject — TikTok: hackers take advantage of this new challenge to mass distribute dangerous malware

“A hacker can, for example, take control of a victim’s Steam account by changing the password,” explains Marijus Briedis, CTO at NordVPN. “Steam accounts are sold for up to $6,000 per account and can be easy money for a criminal. To protect yourself, use an antivirus at all times. A password manager and file encryption tools can also help ensure that even if a criminal infects your device, there is very little to steal. »

Related Articles