Hacked Facebook accounts are being sold on the dark web, showing the value of such accounts after the social network revealed 50 million of its users had been compromised in a major hack.
Dozens of listings seen by The Independent feature on underground markets on the dark web – a section of the internet only accessible with specialist software – offering buyers personal data of Facebook users for as little as $3.
If exploited by criminals, security experts warn that the data could be used to commit identity theft or blackmail Facebook users with compromising information.
Listings are available on popular dark web market places like Dream Market, which use a similar rating system to other online retailers like Amazon and eBay to verify its vendors. Those selling Facebook credentials appear to be generally well trusted, suggesting the authenticity of the data.
The hacked accounts are selling for between $3 and $12, though it is only possible to purchase them using semi-anonymous digital currencies like bitcoin and bitcoin cash.
If sold individually at these prices, the value of the stolen data on the black market would be somewhere between $150m and $600m.
Security experts tell The Independent that the value of the data for cyber criminals means that such hacks will continue to be a lucrative business, despite the size and skill of these firm’s security teams.
“Personal information is simply too valuable on the dark web. As long as stolen data continues to fetch high prices and equip perpetrators with the means necessary to carry out attacks, hold victims ransom, extort information or destroy property, organisations must exhaust all measures to diligently detect and protect their networks, devices and users,” said CEO of cyber security firm SonicWall Bill Conner, who has advised both the US and UK government on security matters.
“What an organisation or nation-state can or intends to do with massive amounts of information on a country’s citizens should be taken very seriously.”