Researchers at VeriSign's iDefense have discovered a single hacker selling 1.5 million stolen Facebook account credentials on an underground market. The stolen credentials were put up for sale by a hacker with the handle "kirllos" who is believed to be from Eastern Europe. The hacker is selling batches of 1,000 accounts with 10 Facebook "friends" for $25 and 1,000 accounts with more than 10 "friends" for up to $45. It is estimated that 700,000 accounts have already been purchased. Compromised Facebook accounts can be used by cybercriminals to spread malware, send spam or attempt to defraud a user's "friends." — AM