{"id":38808,"date":"2020-12-18T17:30:09","date_gmt":"2020-12-18T17:30:09","guid":{"rendered":"http:\/\/d810fa83-c8e7-4f15-905a-a2a7a763d87c"},"modified":"2020-12-18T17:30:09","modified_gmt":"2020-12-18T17:30:09","slug":"fbi-interpol-disrupt-jokers-stash-the-internets-largest-carding-marketplace","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/fbi-interpol-disrupt-jokers-stash-the-internets-largest-carding-marketplace\/","title":{"rendered":"FBI & Interpol disrupt Joker’s Stash, the internet’s largest carding marketplace"},"content":{"rendered":"
\"joker-stash-seized.jpg\"<\/span>
<\/span> Image: ZDNet <\/span><\/figcaption><\/figure>\n

Officials from the US Federal Bureau of Investigation and Interpol have seized a small number of servers used by Joker’s Stash, the internet’s largest marketplace for buying & selling stolen cards, temporarily disrupting the site’s activity.<\/p>\n

In an email this week, Interpol described the server seizures as an ongoing “coordinated police operational activity” but declined to elaborate further.<\/p>\n

Seizure banners appeared on four Joker’s Stash sites, at jstash.bazar, jstash.lib, jstash.emc, and jstash.coin.<\/p>\n

These are websites that use top-level domains (TLDs) managed by Emercoin, a blockchain company. Records for these domains are stored inside a blockchain and cannot be transferred to anyone else without the domain owner’s cryptographic signature.<\/p>\n

In a message posted on an underground forum brought to ZDNet’s attention by Irina Nesterovsky, Chief Research Officer at threat intel firm KELA<\/a>, one of the Joker Stash administrators confirmed the disruptions but said that law enforcement only seized the servers hosting the four domains, which only acted as proxies, redirecting users to the actual Joker’s Stash portal.<\/p>\n

The Joker’s Stash operator said the domains would be restored on new servers “in a few days.”<\/p>\n

\"jokerstash-message.png\"<\/span>