Crypto and website data at highest risk according to new survey.

Trend Micro today released a new report exploring the thriving black market for stolen personal and professional data. By analyzing the 16 most active variants of infostealer malware on two dark web markets (Russian Market and 2easy.shop), Trend Micro researchers have created a unique risk matrix.

The report focuses on measuring how “at risk” stolen data is when it falls into the hands of cybercriminals or fraudsters

Crypto wallets and website data share the top spot, as it is the type of data that generates the most revenue and is also the easiest to find on secret websites.

Wi-Fi credentials and desktop screenshots are less profitable and harder to sell, placing them in a less risky category. In the middle are more specialized authentication types, such as those for FTP and VPN services.

When it comes to stolen website data, Google.com dominates the top spot in volume, followed by Live.com, Facebook, and Instagram.

Jean Diarbakerli, säkerhetsrådgivare på Trend Micro, betonar vikten av att hantera kryptotillgångar som kontanter och förvara dem i digitala kassaskåp. När det kommer till webbuppgifter kan cyberkriminella utnyttja dem med förödande konsekvenser. Rapporten ger användare och organisationer möjlighet att bättre prioritera sina defensiva åtgärder genom att förstå vilken data som är mest kritisk.

Infostealers pose a growing danger due to the high value of stolen data among cybercriminals, which is then sold to others threat actors.

Common ways to monetize stolen user data include:

• Tömning av plånböcker med kryptovaluta.
• Utilization of user authentication for e-commerce transactions and banking sites.
• Attacking victims' contacts, for example through “stranded traveler” scams.
• Infecting the user's organization via VPN credentials for lateral attacks.

Despite the large number of infostealer variants, Trend Micro that only a few of them have a significant presence on dark web data markets. This means that organizations should focus and prioritize their defensive measures on the most popular info stealers on dark web, which pose the greatest risk.

Take part in the report Your Stolen Data for Sale here.