Carding / fraud actor

KIRARA CC

KIRARA CC is a carding marketplace ecosystem with a public web login surface and a Telegram channel that advertises marketplace inventory, sellers, checkers, shop/bot availability, drops and vendor onboarding. Public channel analytics preserve posts referencing CVV inventory, country-specific or validity-labeled products, seller names, prices, refundability claims, card checking, bot/shop availability and marketplace access through kirara.cc.

This actor belongs to the Telegram-centric payment-fraud and carding ecosystem. The main intelligence value is not classic intrusion attribution, but characterization of how illicit financial material is packaged, advertised, validated, monetized and moved through channel-based trust networks.

Analytical priority: track material type, claimed validity, channel structure, seller references, shop/bot/checker availability, monetization model, and relationship to adjacent carding or log-distribution communities.

Created by iQBlack CTI Team
Contributors 1
Last updated 2026-08-19

ATT&CK

MITRE ATT&CK

T1078Valid Accounts
T1110Brute Force
T1583.006Web Services
T1588.002Tool
T1589Gather Victim Identity Information
T1591Gather Victim Org Information
T1656Impersonation

Research

Selected OSINT