How Credentials and Secrets Are Traded on the Darknet
Summary
DarkOwl describes how credentials, tokens and keys are shared or sold on darknet forums, and how attackers may use them for account abuse or to gain access to corporate networks.
Key points
- The article says exposed tokens and keys from open repositories can be resold or shared on darknet and deep-web forums.
- Some forums use credits that users can earn by sharing breached data or engaging with posts to download other data.
- DarkOwl says prices for offered information range from free to thousands of dollars.
- The article describes a Verizon user-data offering and a TSA No-Fly List offered for forum credits; it does not independently establish the listings' authenticity.
- It says a DoorDash database containing username and password combinations for more than 650,000 people was offered at a $10,000 starting bid in August 2022.
- DarkOwl says discussions about stealing and selling API keys have grown in recent years, and that credentials from open repositories may support supply-chain compromises.
Article Details
- Topic
- Darknet trade and sharing of stolen credentials, API keys, and other sensitive data