The underground marketplace where cybercriminals sell their goods and services is expanding to the point where it is little different from legitimate markets. Hackers are promoting their abilities and products to potential customers by providing details of their skills, experience, and how 'honest' they are. They even boast of their long working hours, 24/7 customer service, and the courses they provide that teach people hacking skills.
The information comes from the third annual Underground Hacker Market Report by Dell SecureWorks, the cyber-security arm of Dell. It was put together by two intelligence analysts from the company’s CISO INTEL Team, who monitored various hacking forums from across the globe, paying particular attention to the Russian underground and English-speaking markets.
"Like any other market in a capitalist system, the business of cybercrime is guided by the supply and demand for various goods and services," wrote the report's authors. "Unfortunately for the law-abiding public, both sides of that equation remain strong, with everything from credit cards to hacker-for-hire services being sold online."
The report uncovered the average price someone could expect to pay when hiring a hacker’s services. Stealing emails from accounts such as Gmail, Yahoo, and Hotmail cost around $129, and hacking into corporate email accounts is priced at $500 per mailbox. It’s cheaper to go after Russian emails, which costs between $65 to $105, and hacking an IP address is just $90.
Many of the services offer to hack into social media accounts such as Facebook and Twitter. Unlike email hacking, it’s cheaper to break into the US-based sites ($129) than the Russian ones like VR.ru and Ok.ru, which costs $194.
When it came to purchasing other products and hacks, the report found Remote Access Trojans (RAT) for between $5 and $10, and Angler Exploit kits for between $100 and $135. DDoS attacks were charged by hourly, daily, or weekly rates, ranging from $5 to $555, and Doxing cost $20. The team even found ATM skimmers for sale, priced at $1775.
Cybercriminals were also found to be selling company dossiers, bank account credentials, and airline and hotel points.
Ultimately, the report shows what booming market cybercrime has become, and it looks as if it’s only going to get bigger.