On February 15, 2021, after almost 6.5 yrs running a business, the prolific card store Joker?s Stash closed its doorways. Those behind the shop, which were a pillar of the cybercriminal underground for a long time, announced that they have been retiring, reminding their fellow fraudsters within their farewell message that ?essentially the most truly valuable ferum shop products Fe-acc18 in this life are free of charge.?
While card shops have already been a staple of the underground for a long period, few have managed to achieve the amount of prominence that Joker?s Stash liked. The retailer was frequented by clients from all over the world ? the site was obtainable in English and was marketed heavily on many Russian-language discussion boards ? and cultivated ties with popular cybercriminal gangs such as for example FIN7 and Anunak (generally known as Carbanak), which supplied the shop?s inventory.
The past year had not been a straightforward one for the crew behind Joker?s Stash, on the other hand. In October, an associate of the gang posted that they had been recently hospitalized with COVID-19, and in December the go shopping?s blockchain DNS domains temporarily shown a law enforcement seizure find, an incident that?s still somewhat unexplained. To top rated it off, many criminals have been complaining in regards to a decline in the quality of cards given by Joker?s Stash in the last several months.
On January 15, 2021, Joker?s Stash announced their imminent closure on numerous underground channels. The website?s administrators opted to supply their clients a 30-working day notice in an effort to spend any remaining balance they might have on the site. On February 15, 2021, the lights powered down and the gang went residence.
In this website, Blueliv analysts investigate the current card shop ecosystem, from dynamic shops that could grow in the vacuum quit by Joker?s Stash?s withdrawal along with other recently shuttered card shops.
FERum Shop ? sometimes referred to as FE Shop ? can be an English-language card shop which includes both a clear internet domain and an onion domain. So that you could access information regarding the shop, such as for example updates and card details, one particular must log in to the site. Creating a new account is relatively simple, though it could require contact information such as Jabber ID and ICQ total register.
In accordance with metrics shared by the web site itself, FERum Shop has home elevators millions of compromised cards. The web site regularly advertises the idea that new compromised data has been added and may be acquired for sale.
FERum Shop allows prospective customers to see the millions of CVVs available on the site. CVVs, often known as ?cards? on the underground, will undoubtedly be compromised card information normally stolen from online sources such as phishing webpages or Magecart skimming strategies.