Whistleout.Au Australian Identities Sold on Dark Web for as Low as $200
Article Content
- •Stolen Australian identities sell for as low as $200 on the dark web.
- •A 'fullz' package includes critical personal information like tax file numbers.
- •Australians lost over $2.18 billion to scams in 2025, highlighting the urgency of data protection.
Research from cybersecurity firms NordVPN and NordStellar reveals that stolen Australian identities are being sold on the dark web for prices starting at $200. A 'fullz' package, which includes an individual's tax file number, date of birth, and address, can be purchased for around $200, while individual payment card details are available for as little as $10. The analysis covered approximately 75,000 listings on various dark web marketplaces. Criminals can easily acquire enough personal information to commit identity theft or file fraudulent tax returns. The findings indicate that Australian data is relatively more valuable compared to other countries, with a full package costing six times more than similar data from the US. Cybersecurity experts emphasize the importance of awareness and protective measures, as Australians lost over $2.18 billion to scams in 2025. Tools like NordVPN's Dark Web Monitor can help individuals check for data breaches. The report highlights the growing concern over the accessibility of personal data on the dark web.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (6)
Continue Reading
Critical BeyondTrust 9.3 Vulnerability Actively Exploited by Threat Actor A critical vulnerability (CVE-2026-102764) in BeyondTrust Remote Support has been discovered and is actively being exploited by the threat group ARMORY CASTLE, reportedly linked to China. The vulnerability, which has a CVSS score of 9.3, allows unauthenticated attackers to upload files and potentially compromise host…
Lazarus APT Launches Operation FlashHole Using AI and Post-Quantum Cryptography Kaspersky has identified a cyberespionage campaign, dubbed Operation FlashHole, attributed to the Lazarus APT group, active since July 2025. The campaign has targeted at least three organizations in South Korea's construction, software, and wire-communication sectors. Attack methods include spear-phishing emails…