A Look Inside Dark Web Forums, Marketplaces, and Ransomware Leak Sites
Summary
Huntress researchers explored underground forums and marketplaces, describing their offerings, BreachForums’ reported compromise, ransomware leak-site pressure tactics, and discussions about testing Huntress’ EDR platform.
Key points
- Dark web forums accessible through Tor host markets for malware, exploits, stolen credentials, and access to company environments.
- Huntress describes infostealer logs as credentials that can enable business email compromise and other identity attacks.
- ShinyHunters said BreachForums and its PGP key had been compromised and were being operated by law enforcement; the article says the connection to a recent bounty post is unknown.
- Ransomware leak sites use countdowns and threatened data publication to pressure victims; Play’s site reportedly includes victim FAQs and data-publication status.
- Huntress says researchers observed threat actors discussing a trial of its EDR platform against malware samples.
Article Details
- Topic
- Dark web cybercrime forums, marketplaces, ransomware data leak sites, and underground activity