In a significant development in the cybercriminal underworld, B1ack’s Stash, a notorious dark web carding marketplace, has announced plans to release 4 million stolen credit card details for free.
This move, set to occur on February 19, 2025, marks a substantial escalation in the platform’s illicit activities and poses a severe threat to global financial security.

Darknet Marketplace Escalates Cybercriminal Activities
B1ack’s Stash, which emerged on April 30, 2024, quickly gained notoriety by initially releasing 1 million stolen payment card details at no cost.
This strategy aimed to attract cybercriminals to its platform and establish credibility within the underground community.
The marketplace specializes in the distribution of stolen credit and debit card information, operating across various dark web forums including XSS, Exploit, Verified, Club2CRD, WWH Club, and ASCarding.

Comprehensive Data Breach Raises Alarm
The impending data dump is expected to encompass a wide array of sensitive information, including Primary Account Numbers (PANs), expiration dates, CVV2 codes, cardholders’ personal details, email addresses, IP addresses, and User-Agent strings.
Security experts warn that the release of such comprehensive data significantly increases the risk of financial fraud and identity theft.
Cybersecurity researchers at SOCRadar have emphasized the potential for this data to enable various criminal activities, including fraud perpetration, credential resale, and facilitation of identity theft.
The incident underscores the persistent and evolving threat posed by dark web marketplaces like B1ack’s Stash.
B1ack’s Stash has maintained an active presence on multiple platforms, including a Telegram channel with 2,755 subscribers.

According to DarkOwl Report, the marketplace communicates in both English and Russian, indicating a global reach.
While some dark web users question the legitimacy of B1ack’s Stash, others, including the cyber threat intelligence platform Dark Web Informer, have referred to it as a “legitimate” fraud site.
As B1ack’s Stash continues to grow and evolve, cybersecurity experts stress the urgent need for enhanced protective measures.

Organizations are advised to proactively monitor for compromised credentials, implement robust fraud detection systems, and educate users about the risks associated with stolen payment information.
The incident serves as a stark reminder of the ongoing challenges in combating cybercrime and protecting sensitive financial data in an increasingly interconnected digital landscape.
Find this Story Interesting! Follow us on LinkedIn, and X to Get More Instant Updates