BlackPass

Active Since

May 2017

Dark Web or Clear Web

Dark web and clean web

BlackPass specializes in stolen login details needed to hijack e-commerce accounts – which often have associated payment data – rather than the card details directly.

While all listings include at least the credentials required to log into accounts for sites like Amazon, Venmo, and Instagram, some accounts have PII associated with them such as the victim’s full name, country, ZIP code, bank and card details, and phone number.

BlackPass closely resembles Slilpp, another popular credential autoshop disrupted in a June 2021 multinational law enforcement operation.

Related Content

Podcasts

Dark Web Marketplaces

The Dark Web Hub

RussianMarket

RussianMarket specializes in the sale of “logs”, CVVs, dumps and RDP access. Unsurprisingly, it is suspected to be of Russian origin.

The Dark Web Hub

Genesis [offline]

On April 5 2023, the Genesis market was seized as part of the international law enforcement crackdown dubbed “Operation Cookie Monster". The site had specialized in the sale of “browser fingerprints”.

The Dark Web Hub

2easy

2Easy specializes in the sale of “logs” - data that is stored in the web browser, such as site credentials, cookies, and autofill form data - which can be used to digitally impersonate an individual.

The Dark Web Hub

BidenCash

BidenCash specializes in the sale of payment card data. In spite of the use of his name and image, it is highly unlikely to be associated with the President of the United States.

BlackPass

Active Since

May 2017

Dark Web or Clear Web

Dark web and clean web

BlackPass specializes in stolen login details needed to hijack e-commerce accounts – which often have associated payment data – rather than the card details directly.

The Beacon Newsletter

Get news, insights & intelligence straight to your inbox