VeriSign, an Internet security services vendor, has revealed that criminals are offering for sale 1.5 million compromised Facebook accounts to buyers for pries ranging from $15 to $45 per 1000 accounts, The higher prices are for accounts with more contacts. As Facebook has about 300 million to 400 million users, 1.5 million accounts represents about 0.375% to 0.5% of their user base. But the true impact may be far larger, possibly affecting tens of millions of Facebook users.
While 0.375% to 0.5% is seemingly a tiny percentage, consider that part of the magic of a Facebook account is that it lets you see semi-confidential information from your friends. You can learn who their friends are, obtain photos of them, find out where they spend time, learn the names of their family members, employers, favorite stores, and more. Many of these compromised accounts are linked to other users as friends and therefore can gain access to information that may not be widely available. Even if you speculate that each compromised account only has around 10 to 20 unique friends associated with it, it might mean that 4% to 8% of the user base of Facebook could be affected by this one criminal offering. That’s about 12 million to 32 million people, far more significant than at first glance.
(from 1.5 million Facebook accounts offered for sale – FAQ)
On Feb. 10, 2010, (cybercriminal) stated that he or she is selling 1.5 million compromised Facebook accounts, in bulk quantities, belonging to users in various countries. The price per 1,000 accounts varies based upon the number of friends and contacts that each account possesses. For a purchase of compromised accounts containing 10 contacts or fewer, a buyer must pay $25 per 1,000 accounts. A purchase of compromised accounts containing 10 or more contacts requires a buyer to pay $45 per 1,000 accounts. Accounts containing zero contacts are also available for bulk purchasing from (cybercriminal), at the cost of $15 per 1,000 accounts. The prices of these accounts are presumably in USD or the equivalent amount in some form of electronic currency.
While nobody knows if the claims are true, it raises questions how so many accounts could be compromised. Speculation is that phishing or malware might be involved.
If you’re a user of Facebook or other social networks, now might be a good time to both update or install malware protection software and to change your passwords for your email and social networking accounts. That way, even if your account is one of those compromised, you might be able to lock the criminals out of it before they can do any damage to your and your family and friends.
Further Reading
1.5 million Facebook accounts offered for sale – FAQ
Facebook Doesn’t Remove Deleted Pictures and Videos
Virus and Malware Protection On The Cheap Via Microsoft Security Essentials
