Digital Shadows Analysts countedthat at the present time on the black market (hacker forums, underground marketplaces, paste-sites, file sharing and so on) you can find more than 15 billion stolen logins and passwords, including more than 5 billion unique credentials.
For more than a year, the company has been collecting data from the above sources, and researchers note that most of these usernames and passwords are offered and published free of charge, and the actual amount of compromised credentials should be even higher. The fact is that nowadays attacks on account hijacking are simple and cheap as never before, and many specialized hacker tools can be bought for about $ 4.
If we talk about the cost of credentials, the average price of one account on trading floors on the darknet and the Internet is $ 15.43. Moreover, the data of many compromised accounts can be found in various sources, and the information will be relevant, which suggests that their owners do not even suspect a hack.
The most expensive ones are predictably considered bank and other financial accounts: their average price is approximately $ 71, although some of these accounts can be priced at $ 500 or more.
Interestingly, anti-virus accounts cost a little over $ 20, while other types of accounts most often sell for less than $ 10 (including social networks, VPN, streaming, education, music, file sharing, video games and adult content). Researchers explain that the same principle works here because of which stolen accounts of streaming services sell well on the black market: many buyers just do not want to pay the full price for an antivirus subscription.
Also often on the black market you can come across assumptions about the sale of access to critical systems of companies and organizations. So, access with domain administrator privileges can cost about $ 120,000, with an average price of just over $ 3,100. Pricing in this case depends on the particular attacked industry, in particular, municipal authorities and the financial sector are usually the most expensive.
Digital Shadows notes that accounting usernames are also in high demand, especially accounts containing words such as “invoice”.