Most Internet users have heard of the Dark Web. It’s the hidden layer of the Internet where almost anything goes. Cybercriminals use the Dark Web to sell all sorts of illicit products and services.
Paid in fullz
A hot commodity on the Dark Web is called fullz—a full bundle of collected data that includes someone’s name, Social Security number, birth date, account numbers, and more. Fullz information makes it easier for fraudsters to take an unsuspecting victim’s personal and financial information and commit fraud.
Today, Fullz kits containing children’s data are commanding the highest Dark Web marketplace prices. Baby and toddler IDs are attractive because they provide fresh data that’s never been exploited before.
In a chilling story recently released by business technology news site ZDNet, one seller who regularly deals in this information re-emerged in January this year. They claim to have hacked into a pediatrician’s office, offering buyers information on children as young as four years old.
Most identity theft comes from the exploitation of actual adult identities. However, stolen child data is often used to create fabricated synthetic identities. This is where the fraudster uses a combination of fake information, such as a fake name, and real data, like a child’s Social Security number, to create a fabricated account. This type of scheme is harder to detect because, in many cases, the crime won’t be discovered for years. These credentials enable fraudsters to open fake credit accounts, make fraudulent purchases, or file fraudulent tax claims.
Steps to take
No one wants their child’s credit rating to be destroyed. Children are most vulnerable because they don’t know about online risks and often have no say about what data is collected and shared. Therefore, cybersecurity firm TraceSecurity asks parents to get involved in order to protect their children from this type of fraud:
Resources: ZDNet, TraceSecurity, NerdWallet