2,300,000 Credit and Debit Cards Leaked on Dark Web As Hackers Infect Millions of Devices, Drain Bank Accounts: Report

Millions of debit and credit cards have been leaked on the dark web amid an explosion in the number of devices infected by data-stealing malware, according to cybersecurity and anti-virus firm Kaspersky.

Kaspersky says that from 2023 to 2024, at least 2.3 million bank cards were exposed via infostealer malware and posted on the dark web.

Over the same period, infostealer malware infected 26 million devices running Windows. The cybersecurity firm says bank card information is stolen in every 14th infection by this type of malware.

According to Kaspersky expert Sergey Shcherbel, the actual number of devices infected by infostealers is most likely higher.

“Cybercriminals often leak stolen data in the form of log files months or even years after the initial infection, and compromised credentials and other information continue to surface on the dark web over time. Therefore, the more time passes, the more infections from previous years we observe.”

The cybersecurity firm says the infostealer malware known as Redline was the most prevalent of the data-thieving malware, accounting for 34% of the total infections in 2024. Risepro, which primarily focuses on stealing banking card details and passwords, is another fast-spreading infostealer.

“The most significant surge in 2024 was in infections caused by Risepro, whose share of total infections increased from 1.4% in 2023 to almost 23% in 2024.”

According to Kaspersky, the Risepro infostealer, which is also targeting cryptocurrency wallet data, is spreading through software cracks, game mods and key generators.

Kaspersky advises individuals and organizations monitor bank notifications, enable two-factor authentication and run full security scans on all devices to remain vigilant against these types of malware threats.

Generated Image: Midjourney