Cybercriminals don't need to spend much to buy the tools they need to steal millions of dollars from compromised banking and payment card accounts in the weeks ahead, according to a new report.
The black market for this global business includes prices as low as $1.50 per query for hijacked credit card and Social Security numbers, said the just-released August online fraud report from RSA, the Security Division of EMC.
The monthly report contains a shopping list of criminally inclined software and services--including call centers--the company said its FraudAction Intelligence Team found in underground forums.
For about $4,500, a cybercriminal can obtain a credential-stealing Trojan, bulletproof hosting for a month and an e-mail phishing campaign that could have "limitless credential harvesting potential," RSA said.
