Hackers selling 1.5 million social networking accounts
Cyber criminals are selling on data from social networking accounts to help the spread of malware and money scams.


Social networking accounts are a favoured target for cyber criminals, and a report released today has shown the crime is going global.
iDefense, the cyber security intelligence division of VeriSign, has discovered that more than 1.5 million account details are being put up for sale by hackers on just one online forum called "kirllos" as the black market for personal data continues to explode.
"The trend for harvesting information from social networking sites has been around for some time now, however cyber criminals typically limited their attacks to social media sites within their own geography," said Rick Howard, director of intelligence at iDefense.
"However the increasing exploitation of users of popular international platforms is important as it signifies that criminals are becoming more and more internationalised these sites provide a convenient platform for criminals to expand their trade around the globe."
Prices for the data can vary depending on how many contacts the user has on their account, ranging from $25 (16) per 1,000 accounts with 10 contacts or less to $45 for accounts with over 10 online friends.
Even accounts where the user has no contacts are still popular sellers as they can help with the spread of malware through friend finder tools and friend requests.
The data stolen can then enable criminals to commit money scams and data mining as well as start malware or spam campaigns.
Get the ITPro daily newsletter
Sign up today and you will receive a free copy of our Future Focus 2025 report - the leading guidance on AI, cybersecurity and other IT challenges as per 700+ senior executives
Howard warned users of social networking sites to be vigilant with their privacy measures and to immediately report any unusual activity to the website in question.
Jennifer Scott is a former freelance journalist and currently political reporter for Sky News. She has a varied writing history, having started her career at Dennis Publishing, working in various roles across its business technology titles, including ITPro. Jennifer has specialised in a number of areas over the years and has produced a wealth of content for ITPro, focusing largely on data storage, networking, cloud computing, and telecommunications.
Most recently Jennifer has turned her skills to the political sphere and broadcast journalism, where she has worked for the BBC as a political reporter, before moving to Sky News.
-
Asus ZenScreen Fold OLED MQ17QH review
Reviews A stunning foldable 17.3in OLED display – but it's too expensive to be anything more than a thrilling tech demo
By Sasha Muller
-
How the UK MoJ achieved secure networks for prisons and offices with Palo Alto Networks
Case study Adopting zero trust is a necessity when your own users are trying to launch cyber attacks
By Rory Bathgate
-
What is your digital footprint?
In-depth Your digital footprint is always growing – so we explore how you can keep it under control
By Maggie Holland
-
Nine top GDPR tips for email marketing strategies
In-depth It's not all doom and gloom – here's how you can make GDPR work for you
By Zach Cooper
-
Why GDPR creates a "vicious circle" for marketers
News Customers will control the forthcoming trust economy, predicts Aprimo
By Rene Millman
-
Facebook will allow adverts to target users based on beliefs
News The company will also give users opt-ins to use facial recognition to prevent impersonation
By Rabbil Sikdar
-
Malicious WordPress plugin installed backdoor on thousands of websites
News Widget plugin spewed spam to unsuspecting victims
By Rene Millman
-
711 million data records revealed in spambot dump
News The data contains email addresses, passwords and server information too
By Zach Marzouk
-
Tim Berners-Lee: How we can win back the web
News The public must reject misinformation and keep control of their own data
By Clare Hopping
-
Security experts uncover Tinder porn site spam scheme
News Chatbots use verification offers to lure in victims
By Adam Shepherd