Genesis Marketplace recommendations and invite code by GenesisMarketInvite: The Genesis Marketplace, available both on the dark web and the public internet provides an avenue for attackers to buy digital fingerprints. The site features a wiki, a news page, a rolling ticker of how many bots are available for sale, and a ticketing system. The Genesis Marketplace user experience is professional, much like what one would expect to see on any ecommerce site. The search feature, lets a user search for specific brands, credentials from a particular website, or specific data types like a credit card. Discover additional information at Genesis market.
5 Things You Should Know About the Genesis Marketplace
The Genesis Market is an automated online store that sells credentials, fingerprints, web platform vulnerabilities, cookies, and various sensitive data that assist cybercriminal hackers in gaining initial access into the targeted victim network. Security researchers forewarn that with hundreds of thousands of digital identities listed, the Genesis Marketplace has become a go-to shop for threat actors planning to perform various cyber-attack techniques. Below we have listed five significant facts to know about this underground market.
Unknown Risk: Bypassing MFA Mechanisms with Stolen Browser Cookies It’s not only stolen credentials but also browser cookies for sale that poses a massive account takeover risk. Multi-factor Authentication (MFA) is a layered method to improve account security on the web, VPN, remote desktop sessions, and almost any virtual environment. By introducing additional control mechanisms into the login procedure like a code delivered through SMS, users can improve their access to online accounts, thus stopping a considerable portion of impersonation attacks.
Multi-factor authentication can be bypassed with stolen browser cookies sold on Genesis Marketplace. For most digital businesses, user experience is prioritized. Browser cookies reduce the friction after a user has logged in to the application so that users do not need to reauthenticate often. Thanks to cookies, user sessions are usually valid for a longer time. However, threat actors have workarounds to evade this mechanism through stolen browser cookies. In bypassing attacks, a threat actor can use a stolen session cookie to authenticate web applications, bypassing MFA because the session is already authenticated.
The cookies purchased on the Genesis Blackmarket can then be imported into a control browser. Meaning they can use the online app for as long as the cookie remains active, potentially giving them sufficient time to move around laterally and access confidential data performing other actions as the victim. Current Statistics: More than 430 thousand bots are currently put up for sale on the Genesis Market. These bots are available in almost all countries. The figure below illustrates bot numbers available on the market for different countries.
Prices Vary by Country: Bots that automatically collect cookies and digital fingerprints are open on Genesis Marketplace for numerous countries, including Italy, the United States, Singapore, France, Australia, and the United Kingdom. Each bot has a multiplicity of accounts related to a compromised host. The Genesis bots’ prices range from $0.60 to the most expensive at $103.2.
Stealer Logs for Sale Automation: Cybercriminals use different attack methods such as the rainbow table, brute-force, and credential stuffing to capture passwords. However, more tech-savvy cybercriminals leverage the capabilities of info stealer malware families like Raccoon, AZORult, and RedLine. This malware can be distributed through mail phishing campaigns, malicious mobile applications, or a browser extension. After getting infected, the victim system becomes a part of the botnet. The bot owner has access to logs, files, images, system configuration, IP address, browser history, cookies, and other functionality such as taking random screenshots. The stolen data is automatically uploaded to Genesis Market, available to threat actors.
Among the raft of personal data (hacked from some of the world’s largest commercial sites, including Target, Marriott and Equifax) available for sale on the invite-only shop, the most popular are stolen cookies and device fingerprints. These digital profiles, planted on your machine after you log into a website or app, contain passwords and other personal information for services such as Gmail, Facebook, Netflix, Spotify and others.
There Are Competitors to the Genesis Marketplace: 2easy and Russian Market: The Genesis Market is not the only place where threat actors can automatically obtain cookies, web fingerprints, and vulnerabilities. Genesis Market has different competitors like 2easy and Russian Market. 2easy is a relatively new and reputable market, where the data sold appears to have been legitimately stolen, and the buyers are assured that data has not been previously sold. The Russian Market is also online market cybercriminals can use to collect attack instruments and sensitive data. See even more details on https://genesismarketinvite.com/.