Consumers are getting better at protecting basic credit card and bank information, and cyber criminals know it.
So the hottest thing on the dark web these days? Accounts you might not give a second thought to.
“Cyber criminals are definitely still going after bank accounts, tax documents, but they're also going after accounts that maybe you wouldn't think of as vulnerable,” said Kat Weinberger, an analyst at security firm Flashpoint.
That includes things like ride-sharing or food-ordering apps, even retail cards and dating site accounts.
Weinberger said sometimes thieves just want to use the accounts to order whatever product or service is offered, but sometimes bad guys are playing a long game.
“These apps don't necessarily have a full credit card statement in them, but they can give cyber criminals information about you, for example, that can be used in phishing schemes," Weinberger said.
Weinberger said criminals can take the information in the account -- like name, address, email and account activity -- and use it to contact you to get you to give over the credit card linked to the account.
“You're going to end up trusting people who appear to know more about you and are coming from a position of authority,” she said.
Once thieves steal some of the accounts, they can resell them on the black market, in shops complete with pricing and shopping carts. Some sites even have dropdowns where you can search by seller, domain, even locations.
“They really want to make the experience similar to shopping at an online retail shop," Weinberger said.
Cybercrime is expected to cost the world $6 trillion annually by 2021.
To protect yourself, Weinberger suggested using multiple layers of authentication, and, of course, complex passwords.
As far as smaller accounts go, Weinberger said you need to keep an eye on things.
“A lot of people treat them as these throw away things of, 'Oh, if I get locked out it's fine; they can't get out my credit card number.' But it's really necessary for people to monitor their own accounts," Weinberger said.
Experts said another reason criminals are targeting smaller accounts is because they try to sneak in fraudulent activity without setting off the anti-fraud red flags that often come with credit cards.