The name BriansClub occupies an unusual place in cybersecurity history. It was not a legitimate technology company, financial service, or ordinary online marketplace. It was an underground operation associated with the sale of stolen payment-card information and its eventual exposure gave researchers an unusually detailed look at the economics of