October 28, 2024 at 11:55AM
Criminals are openly selling stolen financial information, including credit card details, on Meta’s Threads. Security experts highlight inadequate moderation, with some accounts remaining active for months. This trend coincides with Telegram’s crackdown on illicit activity, leading criminals to shift their operations to Threads while still using Telegram for sales.
### Meeting Takeaways
1. **Criminal Activity on Meta’s Platforms**:
– Reports indicate that exclusive groups are selling stolen financial information on Meta’s Threads and Instagram, posting sensitive data including full credit card details, personal identification information (PII), and other credentials.
2. **Lack of Moderation**:
– Security researchers, including Kyla Cardona and Aurora Johnson, express concerns about the apparent lack of active moderation on these platforms. Accounts with thousands of followers continue to post illicit content without significant oversight from Meta.
3. **Detailed Nature of Posts**:
– The content shared includes comprehensive financial details necessary for identity theft and fraud, such as cardholder names, credit card numbers, CVV codes, social security numbers, and other personal data.
4. **Engagement Tactics**:
– Some posts utilize polls to engage users, asking whether stolen cards have successfully worked, indicating a community around these illegal transactions.
5. **Telegram Connection**:
– Many criminals are redirecting potential buyers to Telegram accounts for the complete purchase of stolen information due to increased crackdowns on criminal activities on Telegram.
6. **Pricing and Trends**:
– The stolen financial information is being advertised at prices ranging from $3.50 to $65, with the release of new accounts on Threads seemingly related to recent changes in Telegram’s content moderation policies.
7. **Threats to Public Safety**:
– The shared data poses significant risks, potentially enabling cyberstalking, social engineering attacks, and the broader consequences of identity theft.
8. **Calls for Action**:
– There are calls for Meta to enhance its moderation practices and implement automated detection capabilities to address the growing issue of financial information fraud on its platforms.
### Recommendations
– Urgent review and enhancement of content moderation tools by Meta.
– Implementation of automated solutions like Optical Character Recognition (OCR) to detect sensitive information in posts promptly.
– Increased collaboration between security researchers and Meta to identify and address these criminal activities effectively.