DarkBay Marketplace Advertises Stolen Data, Malware and Illicit Services

Summary

DarkOwl analysts profile DarkBay, a Tor-accessible marketplace advertising illicit goods, stolen financial data, malware and account-hacking services. Listings are extensive, but seller claims and legitimacy remain difficult to verify.

Key points

• DarkBay is accessible through Tor and advertises illicit goods and services, including narcotics, stolen financial data, counterfeit documents, malware and account hacking.
• The marketplace had 109,136 product listings in early June 2026, according to the article.
• DarkOwl observed an average of about 500 listings per month, with a sharp increase in January 2026 linked to one vendor posting more than 2,000 listings.
• The Hacking section includes database leaks, services claiming unauthorized account access and alleged malware; the analysts could not verify sellers’ claims.
• Some listings appear to offer credit cards with spending limits and instructions for withdrawals, while vendors also advertise counterfeit currency and identification documents.
• The marketplace lacks user reviews or comments, making seller credibility and the authenticity of listed products difficult to assess.

Products

Countries