Content
Let’s look at how criminals are using the dark web in 2023 and identify dark web trends so that cybersecurity teams can hone our techniques and defend effectively. Before it was shut down in 2013, Silk Road was the most popular darknet market. Others like Agora and Evolution filled the vacuum left by Silk Road after it was shut down through the efforts of the U.S. government, though since then, these have also been shuttered. The months and years after Silk Road’s closure were marked by a greatly increased number of shorter-lived markets as well as semi-regular law enforcement take downs, hacks, scams and voluntary closures. Asian APT groups target various organizations from a multitude of regions and industries. We created this report to provide the cybersecurity community with the best-prepared intelligence data to effectively counteract Asian APT groups.
When Hansa market was shut down by European law enforcement in July 2017, it was revealed that the investigators had actually been operating the market for a number of weeks. Its operators had been arrested in Germany nearly a month previously, but this had been kept quiet so that Dutch police could take over and continue the market’s operations in order to collect further information on Hansa’s users. This had been coordinated with the law enforcement takedown of Alphabay – another market – in order to collect information on individuals who migrated from Alphabay to Hansa. This has fueled paranoia among darknet market users, with many suspecting law enforcement involvement in every market closure. In contrast to the differences observed for counterfeit products seized at borders and offered on dark markets, product origins seem to match better across data sources. For example, between 2014 and 2016, seized goods mainly originated from China (55%) and Hong Kong (26.2%) (EUIPO, 2019; OECD/EUIPO, 2019).
Understanding Dark Web Markets
The dark web markets are a segment of the internet that operates with a degree of anonymity and is often associated with illegal activities. These marketplaces are usually accessible only through specific software, most commonly Tor, which allows users to navigate the web anonymously.
Usually, criminals sell access to exploits and stolen data, but increasingly sites such as 0day.today are releasing more free material, from exploits to data dumps. This is a popular dark web site that peddles software exploits which hackers can use to break into your computer or network. In 2022, the site was focused on getting visitors to BUY exploits, while in 2023 it emphasizes that “Most of the material is completely FREE.” It’s too soon to tell whether this is a short-term marketing tactic or a lasting dark web trend.
What Are Dark Web Markets?
To facilitate the application, we have created seven categories and classified the trust factors into these categories (see Table Table11). In particular, our dataset does not include any attributes related to either users or their Bitcoin transactions, such as, whether the transaction represents an actual purchase or not. Moreover, we do not have information about which users trade with other users on the same DWM.
Dark web markets serve as platforms for buying and selling goods and services that are generally not found on the surface web. They often include a wide range of products, from drugs and counterfeit items to hacking services and stolen personal information.
For most markets, the data range between January 2014 and September 2015, but the data for the market Alphabay extends to January 2017. Evolution and Agora offered the most products, followed by Alphabay, Abraxas, BlackBank Market, and Cloud 9. The remaining markets seem to have offered only a minimal number of products and for shorter periods. Thus, we can only capture a partial picture of overall events, probably leading to underestimating the availability of products on dark markets and their value. AlphaBay’s quick growth—or regrowth—has been fueled in part by what Gray calls “the Great Cyber Resignation.” At least 10 dark web markets have dropped offline for various reasons in the last 18 months.
Subsequently, we (IV) compare dark web counterfeit prices with prices of the same products on the surface web to understand possible profit margins for the various product types identified. We then (V) compare our results to observations made through border seizures, complaint statistics, and activities from authorities to contribute to the overall understanding of the counterfeit economy. Lastly, we (VI) discuss our results in relation to theoretical perspectives to provide future research avenues and possible implications for prevention or intervention approaches for authorities and companies facing counterfeits. Despite demand for legitimacy, the world of darknet markets is rife with shady characters, scams, and instability.
The survey was conducted in the well-protected LimeSurvey data collection, analysis, and evaluation system. The questionnaire was self-administered by respondents, and each of its questions could be skipped; therefore, the system also recorded partially completed questionnaires. By examining the third hypothesis, we will get to know the respondents’ attitudes toward the opportunities available online, and we will be able to tell what proportion of customers would choose to purchase online or offline. Two hypotheses were formulated regarding ranking the above-presented factors, while an additional hypothesis was formulated about a decision to purchase the same substance online or offline.
How Do Dark Web Markets Operate?
Users can navigate dark web markets via special browsers that mask their IP addresses, making it hard to trace their activities. These markets typically utilize cryptocurrency as the main form of payment to ensure further anonymity.
- Most commonly, the darknet marketplaces use a form of cryptocurrency to facilitate payments.
- Alternatively, counterfeits from the US might be more heavily purchased domestically, leading to limited exportation, which would avoid border controls.
- At the same time, the Abacus market, which provides everything from guns and drugs to stolen data, forged documents, and hacker services, had almost perfect customer reviews for its criminal marketplace.
- Cobalt Strike is a popular software emulation environment designed to execute targeted attacks and emulate the post-exploitation actions of advanced threat actors and readily for sale on the darknet.
- Last September, another international police sting, Operation DisrupTor, announced the results of a push to catch drug dealers and other criminals who had used Wall Street Market.
- Registration: Users must usually create an account with a username and password.
- Product Listings: Vendors list their products with images and descriptions.
- Escrow Services: Many markets use escrow systems to protect both buyers and sellers.
- Rating Systems: Users can leave feedback, which helps establish the credibility of vendors.
Hoaxes And Unverified Content
Common Types of Products and Services
The offerings on dark web markets can vary widely, but common categories include:
- Illicit Drugs: A large portion of dark web transactions involve illegal substances.
- Stolen Goods: Items such as stolen credit card information and personal data.
- Counterfeit Items: Fake IDs, money, and luxury goods.
- Hacking Tools: Software and services to exploit vulnerabilities.
Risks and Legal Considerations
Engaging in transactions on dark web markets carries significant risks, including:
- Legal Consequences: Purchasing illegal items can lead to serious legal repercussions.
- Scams: Many vendors may not deliver goods, resulting in financial loss.
- Security Risks: Personal information may be at risk if exchanges go wrong.
FAQs about Dark Web Markets
Q: Are all dark web markets illegal?
A: While many focus on illegal goods and services, some markets may offer legal products.
Q: How can I access dark web markets safely?
A: Use a secure VPN, browse with Tor, and never share personal information.
Q: Can I be tracked while using dark web markets?
A: Although it is challenging, there are methods law enforcement can use to track users.
Conclusion
The realm of dark web markets is complex and fraught with risk. While it offers anonymity and a wide range of products, the potential consequences of engaging in such activities are severe. Understanding the landscape, the risks involved, and the legal implications is essential for anyone considering exploring these markets.
