Massive Data Breach: 2.3 Million Credit and Debit Cards Leaked on Dark Web

Q: What is the most common type of malware used in these attacks?

The most prevalent malware was Redline , responsible for 34% of infections in 2024. Another fast-growing threat is Risepro , which increased its infection rate from 1.4% in 2023 to almost 23% in 2024.

Data Breach: A major cybersecurity threat has surfaced as millions of debit and credit cards have been leaked on the dark web, following a surge in data-stealing malware infections. According to cybersecurity firm Kaspersky, the breach has compromised at least 2.3 million bank cards between 2023 and 2024, putting millions of users at risk of financial fraud and identity theft.

Alarming Rise in Infostealer Malware

Over the same period, infostealer malware has infected approximately 26 million devices running Windows, with bank card details being extracted in every 14th infection. Kaspersky cybersecurity expert Sergey Shcherbel warns that the actual number of infected devices may be even higher than reported.

“Cybercriminals often leak stolen data months or even years after the initial infection, meaning compromised credentials can continue surfacing on the dark web over time,” said Shcherbel.

The Most Widespread Malware Threats

Kaspersky has identified Redline as the most prevalent data-stealing malware, responsible for 34% of total infections in 2024. Another major culprit, Risepro, has seen a dramatic increase in infections, growing from 1.4% in 2023 to nearly 23% in 2024.

Risepro primarily targets banking credentials, passwords, and cryptocurrency wallets. It spreads through software cracks, game modifications, and key generators, often deceiving unsuspecting users into downloading malware-laden programs.

Protecting Yourself Against Infostealer Malware

With cyber threats escalating, Kaspersky urges individuals and organizations to take proactive security measures, including:

Monitoring bank notifications for unauthorized transactions.
Enabling two-factor authentication (2FA) for added security.
Running full security scans on all devices to detect and remove malware.
Avoiding cracked software and unverified downloads, which are common infection sources.

The Growing Cybersecurity Challenge

The leak of 2.3 million credit and debit cards is just one example of the increasing dangers posed by cybercriminals. As malware continues to evolve, both individuals and organizations must remain vigilant to prevent financial losses and data breaches. Cybersecurity experts emphasize that regular security updates and responsible online behavior are crucial in defending against these ever-growing threats.

FAQ

What caused the leak of 2.3 million credit and debit cards?

The leak was caused by infostealer malware, which infected millions of devices and stole sensitive banking information before posting it on the dark web.

How many devices were infected by this malware?

According to Kaspersky, 26 million Windows devices were infected with infostealer malware between 2023 and 2024.

What is the most common type of malware used in these attacks?

The most prevalent malware was Redline, responsible for 34% of infections in 2024. Another fast-growing threat is Risepro, which increased its infection rate from 1.4% in 2023 to almost 23% in 2024.

How does infostealer malware spread?

Infostealers like Risepro spread through:
1. Software cracks
2. Game modifications (mods)
3. Key generators (used to unlock pirated software)

What can I do to protect myself from infostealer malware?

To minimize your risk, follow these cybersecurity best practices:
1. Monitor your bank statements for unauthorized transactions.
2. Enable two-factor authentication (2FA) on banking and online accounts.
3. Avoid downloading software cracks or unverified game mods.
4 .Run full security scans on all devices regularly.
5. Use reputable antivirus software like Kaspersky or other trusted cybersecurity tools.

Is my personal information at risk if my device was infected?

Yes, if your device was compromised, cybercriminals could have stolen not just your banking details but also your passwords, emails, and even cryptocurrency wallet data.

What should I do if I suspect my data has been stolen?

If you think your information has been leaked, take these steps immediately:
1. Contact your bank to freeze or replace your compromised card.
2. Change all passwords, especially for financial accounts.
3. Enable fraud alerts on your credit reports.
4. Scan your devices with updated antivirus software.