hello world a dark web marketplace leaks
1 million credit card numbers on purpose
as part of some bizarre marketing
campaign and apple responds to criticism
of their newly hatched plan to
automatically scan the photos on your
ios devices for illegal material that's
in today's episode of the week web where
we break down and dissect
cybersecurity-related tech news
[Music]
a criminal marketplace has intentionally
leaked one million credit card numbers
for free that's not one million dollars
worth of credit cards no they've
literally published a txt file
containing one million different
individual credit cards the perp here or
world cards is a relatively new illegal
carding marketplace having launched just
a few months ago it would seem this leak
is part of some bizarre marketing
campaign just like a new coffee brand
might give out free samples in shopping
centers this is essentially the same
thing what better way to attract
attention in the criminal underworld
than shower people with a million free
credit cards the credit cards are
accompanied with expiration dates cvvs
names countries states cities addresses
and so on basically all the information
and miss greens would need in order to
commit fraud the marketplace all
world.cards is so new that the clearnet
site is still active it even uses
cloudflare according to who is their
domain was registered as recently as in
may this provides an alternative portal
to their site rather than through their
dark web link the site quite literally
sells credit card numbers which have
likely been plundered via an array of
means malware hidden in e-commerce sites
point-of-sale card skimmers phishing
emails and so on bleeping computer
reports all worlds sell these cards
individually for between 30 cents and 14
assuming an average price of five
dollars the leaked database is worth a
staggering 5 million us dollars this
business model might not make much sense
why sell credit cards when you can use
them yourself after all you're going to
be able to extract much more than just
14 from a credit card the reason is
liability cashing out one of these cards
comes with risk cashing out thousands of
millions of these cards comes with so
much risk it's not even worth doing all
world and other such sites sell this
risk onto others at a fraction of the
true value of the card in the footer of
their website all worlds make it clear
that all information posted to violate
the law seemingly poking fun at just how
ridiculously illegal their website is
albeit in broken english i explore the
site a bit whilst researching for this
video and it's fraught with issues
firstly i tried searching for uk based
cards the site returns a long list of
cards apparently registered in the uk to
english banks though the attached
addresses were based in america with
californian zip codes either this is
indicative of really badly put together
fake data or simply a bad database query
the buy button also didn't work a forum
posted by all worlds claims just 27 of
the leaked cards were active however
they seem to have sold themselves short
as according to research from d3 labs 50
of the credit card numbers are currently
active the concept of stolen credit card
marketplaces isn't new at all just a few
months ago the fbi shut down slilp also
a dark web carding site slilp had been
active for almost a decade and is said
to have caused a loss of 200 million us
dollars to american companies alone the
emergence of all world just goes to show
that as soon as one of these sites is
taken down by the fbi another quickly
pops up to fill the void in the market
having leaked a massive 5 million us
dollars worth of card info for free it's
clear all world is trying to make it big
in the cardinal world their goal with
this massive dump is to attract
attention and thereby new customers as a
guest their tactic is working this story
has been quite widely reported no doubt
bad actors are scrambling to take
advantage of what is essentially free
money however cyber security company d3
labs has said that after doing their
analysis they've sent details of the
card numbers to banks to enable them to
carry out the appropriate mitigation
actions before we get to the fallout of
apple's new controversial image scanning
i need to tell you about today's sponsor
lenode vpns are useful and help to keep
you private and secure but they come
with a trove of issues mainly would you
entrust a vpn company with your traffic
over your isp the bottom line is that if
you didn't set up a vpn server yourself
you really can't be sure these vpn
companies won't keep logs sell your data
or monitor your traffic that's why i've
teamed up with lenode to give you the
opportunity to host your own private vpn
for free lenode is a totally
customizable cloud hosting platform with
a whole host of server apps you can
install with one click using their wire
guard or open vpn apps you can spin up a
private vpn controlled wholly by
yourself in a matter of minutes lynode
launched way back in 2003 that's three
years before aws was even a thing
lynnode doesn't spend a second on side
hustles like grocery chains or reading
your bedtime stories cloud computing is
what they do best and is their only
focus lenode is offering all of you guys
100 in free credit just for signing up
use your 100 to instantiate your private
vpn or literally anything else cloud
computing related they have 24 7 phone
support which is a godsend in the world
of servers so you'll never be left out
in the cold go to
lenovo.com or click the link in the
description to claim your free 100
there has been an overwhelmingly
negative backlash to apple's newly
announced plan to scan photos stored on
your ios devices who could have seen
this one coming my previous video which
you should go watch covered apple's new
initiative in detail but for a quick
refresher starting next month a new
feature in an ios update will start
automatically scanning all the photos
you upload to icloud for instances of
abuse images involving children this is
known as csan material the scans are
done against a database of known csam
pictures the process is carried out
locally on your device rather than
centrally on apple servers apple claims
their new system is designed with user
privacy in mind but a lot of people are
worried about what this means for
privacy and truth be told i struggled to
find anyone in support of the new scheme
in fact the response was so vehemently
negative that apple published an faq on
their new strategy directly addressing
people's concerns something they rarely
do imo the most worrisome part of this
image scanning is could governments
force apple to add non-csun images to
the hash list this is something that faq
answers or at least attempts to the
fruity corporation says apple will
refuse such demands they go on to say we
have faced demands to build and deploy
government mandated changes that degrade
the privacy of users before and have
steadfastly refused those demands not
sure i agree with apple's claim there
but before we pick that apart let's put
our cynicism to one side for just a
second apple has at least on one
occasion publicly stood up to law
enforcement the case that comes to mind
is that of the san bernardino shooter's
iphone the fbi wanted apple to create
special software which would allow them
to unlock the shooter's iphone 5c apple
refused not only did apple refuse but
they took a very public stance
publishing an open letter to their
customers the letter explains why
privacy and encryption is so important
and that's that what the fbi is asking
of them in the wrong hands this software
which does not exist today would have
the potential to unlock any iphone this
sounds all well and good the company
received a lot of praise at the time for
taking the stance they did but let's put
our cynical hats back on apple refusing
to unlock the shooter's iphone was never
going to have an impact on their bottom
line it's not like apple's business
model in the us is contingent on keeping
the fbi happy in fact what you find is
that when apple's business model is on
the line they're more than happy to
count out to governments and law
enforcement demands for instance let's
take everyone's favorite example china
when china asked apple to remove all vpn
apps from the chinese app store apple
did so when china asked apple to store
all chinese user data in data centers
effectively owned by the chinese
communist party apple complied there's a
long list of concessions apple has made
to china and i'm not going to list all
of them here the point is that when it's
convenient for business purposes apple
and pretty much most corporations to be
fair seem to cave into pressure from law
enforcement assuming the government
behind them is big enough the
overarching point is that whilst i don't
doubts in the presence this technology
will only be used for detecting csun
material today's plan isn't necessarily
tomorrow's plan we don't know what the
world will look like in the future 10
years down the road we might be involved
in some war which could provide
motivation for western governments to
increase the scope of surveillance on
citizens with the technology of the
likes apple is introducing already
installed on everyone's devices it's
quite easy to imagine pressure on apple
to widen the gamut of materials they
search for on our phones and who knows
where that could take us
i don't believe apple is trying to be
the bad guy here or that they have some
kind of evil plan hidden up their sleeve
i do think on this occasion they are
acting out of altruism but as they say
the road to hell is paved with good
intentions couple that with apple's
juxtaposing actions on the matter of
user privacy one second stating privacy
is a fundamental human right the next
allegedly signing over decryption keys
of user data to the chinese government i
think people are right to at least be a
little concerned if you enjoy this kind
of video make sure to help me out by
tickling the like button of the youtube
ai as well as turning on those sub
notifications if you're looking for
something to watch next go check out my
previous video which explores how
apple's new photo scanning system works
in more detail if you get a lot of value
from this series of videos do consider
becoming a channel member as always
sources will be linked in the video
description stay tuned for more hacking
videos and have a good one