Podcasts
Bahira
Active Since
March 2022
Dark Web or Clear Web?
Dark Web and Clear Web
Fraudsters began recommending Bahira Finance on dark web forums in early 2022.
The name, which is shared by a Christian monk in Islamic theology, was likely selected due to its meaning of “tested” or “approved” in the Syriac language. Fittingly, Bahira offers numerous validity and balance checkers for the card details it sells, which is important to its customers who often bemoan the common experience of purchasing “dead” cards.
Bahira has generated buzz in both Russian and English-speaking dark web spaces and boasts the sale of both card details and dumps (the information encoded onto a card’s magnetic stripe and used to make physical clones). Unlike some autoshops, users can apply for vendor accounts on the site, rather than being part of a closed group or selling card databases behind the scenes.
Related Content
The Dark Web Hub
BidenCash
BidenCash specializes in the sale of payment card data. In spite of the use of his name and image, it is highly unlikely to be associated with the President of the United States.
The Dark Web Hub
BlackPass
BlackPass specializes in stolen login details needed to hijack e-commerce accounts rather than card details. Some accounts have PII associated with them such as the victim’s name, country, ZIP code, and phone number.
The Dark Web Hub
Genesis [offline]
On April 5 2023, the Genesis market was seized as part of the international law enforcement crackdown dubbed “Operation Cookie Monster". The site had specialized in the sale of “browser fingerprints”.
The Dark Web Hub
RussianMarket
RussianMarket specializes in the sale of “logs”, CVVs, dumps and RDP access. Unsurprisingly, it is suspected to be of Russian origin.
The Dark Web Hub
2easy
2Easy specializes in the sale of “logs” - data that is stored in the web browser, such as site credentials, cookies, and autofill form data - which can be used to digitally impersonate an individual.
