Carding Site BidenCash Releases Credit Card Data for Free

Researchers have uncovered a new carding site, BidenCash, whose operators are trying to gain publicity by posting credit card details and cardholder information for free or almost free.

Bleeping Computer journalists write that the new resource appeared in April 2022, but for a long time it was not ready for large-scale operations. Now, BidenCash operators have decided to distribute a CSV file containing names, addresses, phone numbers, email addresses and bank card numbers to everyone for free, and thus advertise their platform.

In total, the file contains about eight million lines, but not all of them are map data. So, according to the Italian company D3Lab, in this dump you can find data on 6600 bank cards. The researchers estimate that about 1,300 of them are new and valid cards, most of which are issued by VISA and belong to individuals from the United States.

In addition, analysts write that more than three million unique email addresses can be found in the dump, which can be used by attackers to phish and take over other people’s accounts.

As with other similar sites, BidenCash publishes a validity rating for new lots, and this rating is set after a random sample of 20 cards has been evaluated. Every week, new checks are made on all listings, and if the rating is very different from the previous rating, the sale is closed.

BidenCash also has a filtering system that allows attackers to find stolen cards that are suitable for their campaigns. You can search by specific criteria: countries, banks, or only records that have the required data, such as CVV, email address, physical address, card type, and owner name. A test conducted by Bleeping Computer journalists showed that hackers can buy data on suitable cards for as little as 15 cents apiece.