Styx Market Offers Stolen Data and Services for Financial Crime, DarkOwl Finds

Summary

DarkOwl researchers examined Styx Market, documenting listings for stolen data, account access, fraud and money-laundering services, plus vendors’ use of Telegram. They describe the marketplace as geared toward experienced cybercriminals.

Key points

• Styx Market, which officially opened in January 2023 after darknet chatter began in 2020, sells stolen data and services linked to fraud, money laundering and cybercrime.
• Listings include personal information, credentials, financial-account access, identity documents, lookup services and stealer-related offerings.
• The researchers found services and listings focused on financial crime, including cash-out and money-laundering offers with high fees and minimum transaction amounts.
• The marketplace uses an escrow payment system and connects buyers with sellers through on-site chat or Telegram channels.
• DarkOwl traced three vendors’ apparent activity across darknet sites and Telegram, while noting that matching usernames do not confirm the same individual is behind the accounts.
• The researchers assess that the marketplace’s offerings could support multiple stages of financial fraud, including reconnaissance, identity verification and laundering illicit funds.