For $14, you could easily become a whole new person -- or at least have their credit card number. 

Identity thieves are offering a person’s credit-card number, date of birth and other sensitive information for as little as US$14 over the Internet, said a new report on online threats released Monday.

The data is sold on so-called “underground economy servers,” used by criminal organizations to hawk information they’ve captured through hacking, Symantec said in its Internet Security Threat Report, which tracked online trends from June to December 2006. The information can then be used for identity scams such as opening a bank account in a false name.

“U.S.-based credit cards with a card verification number were available for between US$1 to $6, while an identity — including a U.S. bank account, credit card, date of birth and government-issued identification number — was available for between $14 to $18,” the report said.

Some 51 percent of the servers hosting the information were in the U.S., in part because the growth in broadband Internet access in the U.S. has created new opportunities for criminals, Symantec said. About 86 percent of the credit and debit card numbers available on those servers were issued by U.S. banks, it said.

One way that criminals have gained access to computers is by exploiting zero-day vulnerabilities, or software flaws that are being exploited as soon as they are revealed and before a patch has been released.

Symantec documented 12 zero-day vulnerabilities in the period from June to December 2006. Only one was found in its two prior six-month reporting periods, the company said.

Trackback URL for this post: