Hi all,
Let’s start with some good news to start the day on blogging. After not feeling well for a few days, i’m now feeling much better, trying to prepare for the security box, as well as get sone blogging done from the past while.
Yes, I have plenty still from last year I definitely want to cover, and I need to move forward with this year as it is still young.
There are two articles in regards to the apparent closing of the Joker Stash, a public web site that was once the king of credit card selling for underground shops.When putting in Jokers stash, you’ll definitely find a public domain that anyone can go to, but you need to log in to be able to do anything with.
I wanted to see what the web site was just so I can make sure i am giving accurate information, and I can say that at least for now, there is an active domain.
Krebs on Security does a great job in introducing people who have never heard of these guys to what they were up to. He writes:
The Russian and English language carding store first opened in October 2014, and quickly became a major source of “dumps” — information stolen from compromised
payment cards that thieves can buy and use to create physical counterfeit copies of the cards.
Krebs continues to write that 2020 was probably the worse year for the card shop, and apparently, the closure is coming from the card shop owner himself. I am not even going to speculate whether the person responsible for the Joker’s Stash had or didn’t have Covid-19, the major virus that has swept the world since March of last year. According to the article from Mr. Krebs, this web site was always good on making sure there were fresh cards to sell, and if the case was that he had Covid-19, it definitely didn’t help anything as buyers were complaining about the lack of fresh data.
Late last year according to this article, notices on several domains ran by the group displayed notices of seizures by the government. The shop moved to other infrustructure afterword and they were told things were OK.
What the Cyberscoop article didn’t cover and that Krebs on Security does, are some of the major breaches of companies that they got card data from.
Gemini estimates that Joker’s Stash generated more than a billion dollars in revenue over the past several years. Much of that revenue came from high-profile
breaches, including tens of millions of payment card records stolen from major merchants including Saks Fifth Avenue, Lord and Taylor, Bebe Stores, Hilton Hotels, Jason’s Deli, Whole Foods, Chipotle, Wawa, Sonic Drive-In, the Hy-Vee supermarket chain, Buca Di Beppo, and Dickey’s BBQ.
All of these are links within the linked article we’ll be linking to.
Those who got in early will be able to cash out, according to Krebs, most will not. Spend by February 15th it says or forfit the earnings.
Joker’s Stash Carding Market to Call it Quits Krebs on Security
The second article, written around the same time starts out by stating:
An administrator of a notorious forum for stolen payment data and illicitly obtained personal information says they will shutter the site in 30 days.
It goes in to detail on who they were, and what happened with law enforcement actions. I don’t know if both articles state this, but the Cyberscoop article indicated that there were over 3 million credit numbers under a claim.
I don’t know if Krebs covered this, but another section of the web site > indicated that there were social security numbers and other personally identifiable information. This would be information such as name, birth date, and location just to name a few that was able to be searched by someone using the site.
Joker’s Stash, a forum for stolen data, says it will shut down within 30 days Cyberscoop
This has got to be the biggest news in recent memory of one of the biggest carding shops potentially closing. I’d love to link to the web site I found, but it is bearbones, a log in page with nothing to see. So long, Joker, hope you find something else to do. Its been fun.