On February 15, 2021, after nearly 6.5 decades in business, the prolific card go shopping Joker?s Stash shut its doorways. Those behind the go shopping, which have been a pillar of the cybercriminal underground for a long time, announced that they were retiring, reminding their fellow fraudsters within their farewell message that ?probably the most truly valuable items in this life are no cost.?
While card shops have been a staple of the underground for years, few have managed to achieve the level of prominence that Joker?s Stash appreciated. The go shopping was frequented by clients from around the world ? the site was available in English and was marketed seriously on many Russian-language discussion boards ? and cultivated ties with well-known cybercriminal gangs such as FIN7 and Anunak (generally known as Carbanak), which supplied the store?s inventory.
The past year was not an easy one for the crew behind Joker?s Stash, on the other hand. In October, an associate of the gang posted they had recently been hospitalized with COVID-19, and in December the go shopping?s blockchain DNS domains temporarily displayed a law enforcement seizure notice, an incident that is still somewhat unexplained. To top it off, many criminals had been complaining in regards to a decline in the quality of cards given by Joker?s Stash over the past several months.
On January 15, 2021, Joker?s fe-shop Stash announced their imminent closure on various underground channels. The website?s administrators opted to give their clients a 30-day time notice so that you can spend any remaining balance they could have on the webpage. On February 15, 2021, the lights switched off and the gang went home.
In this website, Blueliv analysts investigate the existing card shop ecosystem, from effective shops that could grow in the vacuum kept by Joker?s Stash?s withdrawal as well as other recently shuttered card shops.
FERum Shop ? sometimes also referred to as FE Shop ? can be an English-language card shop which has both a clear net domain and an onion domain. So as to access information regarding the shop, such as for example updates and card details, one needs to log into the site. Developing a new account is relatively simple, though it can require contact information such as for example Jabber ID and ICQ range to register.
In accordance with metrics shared by the site itself, FERum Shop has information on millions of compromised cards. The website regularly advertises the truth that new compromised files has been added and is available for sale.
FERum Shop allows prospective clients to browse the millions of CVVs available on the site. CVVs, also referred to as ?cards? on the underground, happen to be compromised card information commonly stolen from online sources such as phishing web pages or Magecart skimming tactics.