Kirllos, a hacker has a rare deal for anyone who wants to spam, steal or scam on Facebook: an unprecedented number of user accounts offered at rock-bottom prices. Researchers at VeriSign’s iDefense group recently spotted Kirllos selling Facebook user names & passwords in an underground hacker forum, but what really caught their attention was the volume of credentials he had for sale: 1.5 million accounts. IDefense doesn’t know if Kirllos’ accounts are legitimate, and Facebook didn’t respond to messages. If they’re legitimate, he has the account information of about one in every 300 Facebook users. His asking price varies from $25 to $45 per 1,000 accounts, depending on number of contacts each user has. To date, Kirllos seems to have sold close to 700,000 accounts, according to VeriSign Director of Cyber Intelligence Rick Howard. Kirllos’ Facebook prices are extremely cheap compared to what others are charging. In its most recent Internet Security Threat Report, Symantec found that e-mail usernames & passwords typically went for between $1 to $20 per account — Kirllos wants as little as $0.025 per Facebook account. More coveted credit card or bank account details can go for much more, ranging between $0.85 to $30 for credit card numbers to $15 to $850 for top-quality online bank accounts.