The final actor of the stolen payment data supply chain is the end user. Rather than just selling or reselling payment data, the end user plans on fraudulently monetizing it.

This malicious end user typically buys payment data in limited quantities, since:

1. The price per stolen data greatly increases from when it was originally sold by the source.
2. There’s an unknown amount of time until the financial institution revokes the issued stolen data.

Continue reading Stolen Payment Data: Infected Ecommerce Website to Darknet Markets at Sucuri Blog.

Via Sucuri.net