How do hackers monetize lists of username/passwords?

L

lionshades

Newbie

Oct 22, 2011

42

8

• Oct 28, 2012

• #1

I see hackers paste these huge hacked username/password databases on sites like pastebin etc.

I know this is highly illegal and would never risk doing something like this, but theoretically speaking, how can such database be monetized?

Do they fake CPA submissions somehow? Or sell the db (useless if its published...?)

 

Indiigo007

Junior Member

Nov 11, 2009

189

191

• Oct 28, 2012

• #2

They use bots to send spam FROM the users account (from email/facebook/twitter...wherever the accounts are from).

 

dumdum4gumgum

Power Member

Oct 16, 2008

596

345

• Oct 28, 2012

• #3

Depending on the types of accounts they are sold

 

S

skulquake

Registered Member

Oct 6, 2010

77

10

• Oct 28, 2012

• #4

Good question I've been curious myself.

 

Checkmate

BANNED

Aug 9, 2010

1,658

687

• Oct 28, 2012

• #5

Indiigo007 is right.

They would do the same thing as you would do if you where phishing accounts.

 

G

gossapril

Junior Member

Aug 10, 2010

134

152

• Oct 28, 2012

• #6

If they have emails and passwords, they'll use them to test login with paypal.

 

P

pj413

Regular Member

Mar 5, 2009

227

53

• Oct 29, 2012

• #7

Yeah, they'll often test your logins across different accounts. A lot of people have the same passwords on their email, Facebook, PayPal, online bank, etc. Hackers can use it to transfer money, figure out your social security number (which is worth money,) figure out your Amazon account to place orders, use email access to send trojans, etc.