Yet more credit cards for sale online
Security service provider Finjan has reported a web site offering bulk credit card details for sale. Entries by "Anonymous" on the sellcvv2.tk blog site dated 16 January 2008 offered "... a large quantity of cc info-s for very small ammount of money!", but the site has since been cleared of content. The tk country code top level domain (ccTLD) offers short-lived free domain names redirected by DNS servers in Tokelau, New Zealand, so sites that use it are relatively difficult to trace to their owners.
Prices on the site ranged from $110 for European or Asiam Visa Gold or Platinum cards to $15 for American MasterCard. The "goods" are described in the "terms and conditions" as "dumps", but it is not clear how many cards come for the quoted price. It is clearly stated that PINs are not included, but "Cvvs" – the "security code" on the back of the card – are mentioned. This suggests that the purchasers would be interested in card not present fraud, which is currently the biggest proportion of overall card fraud.
Over the last year prices typically fell from £1 ($2) to around 25p (50¢) per unit, so on the assumption that they are offered in hundreds, which is typical, the card details offered on sellcvv2 seem quite costly. Close examination of the "terms and conditions" suggests that the poster is a lone individual – "... I don't accept PayPal" – and English is clearly not their first language. No contact details are apparent in the screen dumps provided to heise Online by Finjan.