Prominent Carding Marketplace UniCC announced it’s shutting down

One of the biggest underground carding marketplaces, UniCC, announced it’s shutting down its operations.

UniCC, one of the biggest underground carding marketplaces announced it is shutting down. The site was launched in 2013 and according to the Elliptic Threat Intel about $358 million (across Bitcoin, Litecoin, Ether and Dash) in purchases were made through the platform.

“Hundreds of millions of payment card details have been stolen from online retailers, banks and payments companies before being sold for cryptocurrency on online marketplaces such as UniCC.” reads the analysis published by Elliptic Threat Intel. “These stolen cards have value because they can be used to purchase high-value items or gift cards, which can then be resold for cash. This process is known as “carding”, and it has become a key part of the cybercriminal’s playbook. ”

UniCC reached a 30% market share after the takedown of the popular carding platform Joker’s Stash in January.

The news of the shutdown was announced by the UniCC administrators on underground carding sites in both English and Russian, they are giving 10 days to their members to spend their balances.

“Don’t build any conspiracy theories about us leaving, it is (a) weighted decision, we are not young and our health do not allow to work like this any longer.” reads the message. “We ask you to be smart and not follow any fakes tied to our comeback and other things,”.

According to Elliptic Threat Intel team, after the shutdown of the UniCC marketplace other carding platforms will attempt to fill the gap in a market that overall surpassed more than $1.4 billion in sales with Bitcoin alone.

On the other side, the operators behind UniCC will be seeking to cash out their millionair profits. 

But in recent months, Elliptic pointed out that other underground marketplaces appear to be hanging up the towel. The White House Market announced it was shutting down in October; and by November, Cannazon went dark. In December it was Torrez’ turn. By early January, Monopoly Market was unexpectedly inaccessible, the report added.

“In July 2021 stolen credentials market Slilpp was seized by the FBI in collaboration with numerous European agencies after making almost $22 million in Bitcoin.” concludes the report. “Nevertheless, the carding market has also seen numerous new entrants  – most notably All World Cards in June 2021, which made headlines by offering nearly three million cards for free in an early publicity stunt.”

Follow me on Twitter: @securityaffairs and Facebook

[adrotate banner=”9″][adrotate banner=”12″]

Pierluigi Paganini

(SecurityAffairs – hacking, REvil ransomware)

[adrotate banner=”5″]

[adrotate banner=”13″]

Pierluigi Paganini

Pierluigi Paganini is member of the ENISA (European Union Agency for Network and Information Security) Threat Landscape Stakeholder Group and Cyber G7 Group, he is also a Security Evangelist, Security Analyst and Freelance Writer. Editor-in-Chief at "Cyber Defense Magazine", Pierluigi is a cyber security expert with over 20 years experience in the field, he is Certified Ethical Hacker at EC Council in London. The passion for writing and a strong belief that security is founded on sharing and awareness led Pierluigi to find the security blog "Security Affairs" recently named a Top National Security Resource for US. Pierluigi is a member of the "The Hacker News" team and he is a writer for some major publications in the field such as Cyber War Zone, ICTTF, Infosec Island, Infosec Institute, The Hacker News Magazine and for many other Security magazines. Author of the Books "The Deep Dark Web" and “Digital Virtual Currency and Bitcoin”.

Recent Posts

Russia-linked group APT29 is targeting Zimbra and JetBrains TeamCity servers on a large scale

U.S. and U.K. cyber agencies warn that Russia-linked group APT29 is targeting vulnerable Zimbra and…

6 hours ago

A cyber attack hit Iranian government sites and nuclear facilities

As Middle East tensions rise, cyberattacks hit Iran’s government branches and nuclear facilities, following Israel's…

20 hours ago

Ransomware operators exploited Veeam Backup & Replication flaw CVE-2024-40711 in recent attacks

Sophos reports ransomware operators are exploiting a critical code execution flaw in Veeam Backup &…

1 day ago

GitLab fixed a critical flaw that could allow arbitrary CI/CD pipeline execution

GitLab issued updates for CE and EE to address multiple flaws, including a critical bug…

2 days ago

Iran and China-linked actors used ChatGPT for preparing attacks

OpenAI disrupted 20 cyber and influence operations in 2023, revealing Iran and China-linked actors used…

2 days ago

Internet Archive data breach impacted 31M users

The Internet Archive disclosed a data breach, the security incident impacted more than 31 million…

2 days ago

This website uses cookies.