What do
cybercriminals do with stolen data?
You’ve likely heard the stories of major data breaches that
expose the personal information of millions of people. Perhaps you’ve even been
a victim of this. But what actually happens to exposed data? How do
cybercriminals actually use the data?
They sell it on the dark web. Credit card
numbers, national ID numbers, email addresses, and passwords all fetch certain
prices on the underground economy.
They launch spear phishing campaigns. With
enough information, cybercriminals increase their chances of successful
phishing attacks because they’re able to target specific individuals or
organizations while sounding legitimate.
They pretend to be you. Identity theft is a
top concern. If attackers gain access to your personal info, they can open
accounts in your name, attempt to claim tax refunds, and file insurance claims,
etc.
They attack even more accounts. In the case of
stolen usernames and passwords, criminals use “credential stuffing,” which is
an automated attack using those same usernames and passwords to gain access to
other accounts.
No comments:
Post a Comment