Researchers from iZOOlogic recently discovered that the clearnet website of All World Cards (https://allworld(dot)cards/), an underground market for compromised bank cards, had been offline and was inaccessible for its clients until further notice.
Despite the website’s outage, All World Cards has its Tor website to remain accessible for clients to reach out to and purchase compromised bank cards.
The Namecheap domain registrar has taken action and updated the All World Cards underground market’s status on major domain checker websites, such as WhoIs. With ‘clientHold’ status, they temporarily deactivated their client’s domain DNS records for a particular undisclosed reason, and the ‘clientTransferProhibited’ status means that their domain is currently locked and is not allowed to be transferred or moved away without consent.
Established last May 2021, the data dump marketplace rose to popularity as a notorious market for compromised bank cards after they released over a million worth of victims’ compromised bank cards, which are made available free of charge. As an obvious promotional tactic for the marketplace, the free bank cards were dumped in different dark web forums last August 2021 for interested threat actors to indulge in.
The published compromised bank cards were shared in a password-protected ZIP file during All World Cards’ promotional period. The ZIP file included cardholder names, credit card numbers, CVVs, card expiry dates, email addresses, and more.
Some cyber-criminals who acquired the free compromised cards from All World Cards said they were impressed because they found most of it functioning. Since then, the card marketplace has gained a positive reputation within the cybercrime landscape and currently lists over 2.7 million compromised bank cards on its website.
Based on recent feedback about the underground market after initially gaining positive reactions from the cybercrime world, many forum members commented that All World Cards needs to improve their website further, coming from their experience of how slow the system and support are. The negative feedback, though, does not affect the card marketplace’s reputation regarding the quality of its products.
iZOOlogic security experts will continue to monitor and provide up-to-date news regarding All World Cards and their status in the cybercrime scene.
