Around five million people globally have had their data stolen and sold on the bot market till date, of which 600,000 are from India, according to VPN service provider NordVPN.
The stolen data included user logins, cookies, digital fingerprints, screenshots and other information, with the average price for the digital identity of a person pegged at 490 Indian rupees ($5.95).
NordVPN tracked data for the past four years, ever since bot markets were launched in 2018.
NordVPN’s study looked into three major bot markets – the Genesis market, the Russian Market, and 2Easy – and found stolen logins including those from Google, Microsoft and Facebook accounts.
Stolen logins found on bot markets
Google
|
720,676
|
Microsoft
|
654,444
|
Facebook
|
647,574
|
Amazon
|
226,264
|
Netflix
|
223,173
|
PayPal
|
201,649
|
Instagram
|
196,904
|
Steam
|
180,581
|
Ebay
|
123,955
|
EA Network
|
115,807
|
Roblox
|
112,050
|
LinkedIn
|
108,789
|
Yahoo
|
105,944
|
Dropbox
|
105,918
|
Ali Express
|
100,690
|
Twitch
|
93,678
|
Apple Store
|
90,068
|
Twitter
|
89,469
|
Sony Entertainment
|
89,421
|
Spotify
|
75,941
|
Riot Games
|
75,242
|
Epic Games
|
72,673
|
MEGAnz
|
61,150
|
“What makes bot markets different from other dark web markets is that they are able to get large amounts of data about one person in one place,” said Marijus Briedis, chief technology officer at NordVPN.
“And after the bot is sold, they guarantee the buyer that the victim’s information will be updated as long as their device is infected by the bot.”
Researchers of NordVPN found 667 million cookies, 81,000 digital fingerprints, 538,000 auto-fill forms, numerous device screenshots, and webcam snaps in their study.