Hacked PayPal accounts for sale
1 March 2013
More than 1,500 credentials for PayPal accounts are on sale in an eShop-style website set up by cybercriminals.
The site, discovered by Webroot's Danco Danchev, is selling 1,543 PayPal account details, 14 of which belong to UK customers of the eBay-owned direct payment service.
Prices to ‘buy' access to credentials through a proxy server run by the hackers seem to be linked to amounts of money already resting in the accounts. So an account with $300 (£197) is worth $20 (£13), while an empty account is worth just $3.
Danchev notes that, as a business model, it would obviously make more sense for the hacker to simply cash-out from all the PayPal accounts rather than sell them at such a heavy loss, but that this method helps them "monetise the fraudulently obtained data as soon as possible" while keeping security tighter to maintain the pirates' future successes in hacking and selling more accounts.
Read more: http://www.computing.co.uk/ctg/news/2249665/1-500-paypal-credentials-for-sale-in-pirate-eshop#ixzz2NQ18Rg3A