Hackers are selling off user information at rates of $1,000 per record, researchers at Dell have found.
The company's SecureWorks subsidiary said that as hackers collect vital information on users, a trade in other data has emerged among cyber criminals.
Hackers are not only harvesting account credentials but are now looking to bundle information as full packages, referrred to by hackers as “fullz”.
The kits are said to include multiple forms of user identification, including social security numbers.
SecureWorks said in its report: “A number of these marketplaces are serving as a one-stop shop for identity theft and fraud. Not only are they selling the stolen credentials, but they also sell the supporting (counterfeit) documentation or 'dox' for an extra charge.”
According to the researchers, the kits include user information ranging from social security and health insurance data to driving licence information, addresses and social security numbers. Such packages have been sold between hackers for prices of up to $500.
Meanwhile, data drops, which include online gaming accounts, have been sold for even higher prices, fetching costs of up to $1,000 when online gaming accounts such as PlayStation Network and Xbox Live credentials have been included.
Dell SecureWorks counter threat unit researcher Don Jackson said: “Our CTU researchers discover caches of stolen data frequently, and we have found that the hackers will steal anything they think they can sell on the underground.
“Health insurance credentials continue to rise in value as we see the cost of health insurance and the cost of medical services continues to rise.”
HP ZBook x2 offers 32GB RAM, M.2 SSD with up to 2TB storage and Nvidia Quadro GPU
Laptops should be able to offer true all-day working, and some
CGN has created an "online capability gap" between cyber criminals and law enforcement, says Europol
ISPs use Carrier Grade NAT to share IP addresses amongst multiple users
Attack revealed bugs and potential security flaws that were later exploited in real-world cyber attacks