Holiday shopping apparently already is underway for cybercriminals out picking up the software and data lists they'll need to steal millions of dollars from compromised banking and payment card accounts in the weeks ahead, according to a new report.

The black market includes prices as low as $1.50 per query for hijacked credit card and Social Security numbers, said the just-released August online fraud report from RSA, the Security Division of EMC.

The monthly report contains a shopping list of criminally inclined software and services-including call centers-the company said its FraudAction Intelligence Team found in underground forums.

For about $4,500, a cybercriminal can obtain a credential-stealing Trojan, bulletproof hosting for a month and an e-mail phishing campaign, RSA said.

NOT FOR REPRINT

© Arc, All Rights Reserved. Request academic re-use from www.copyright.com. All other uses, submit a request to TMSalesOperations@arc-network.com. For more information visit Asset & Logo Licensing.