Honor among cyber thieves, the professional side of the dark web

guest · Jul 22, 2022

July 21, 2022

Much like the legitimate eCommerce world, trust and reputation have become essential parts of the cybercriminal trade. New research by HP Wolf Security finds 77 percent of cybercriminal marketplaces analyzed require a vendor bond -- a license to sell -- which can cost up to $3,000.

In other evidence of a professional approach, 85 percent of these sites use escrow payments, and 92 percent have a third-party dispute resolution service. Every marketplace provides vendor feedback scores too. Cybercriminals also try to stay a step ahead of law enforcement by transferring reputations between websites -- as the average lifespan of a dark net website is only 55 days.
Click to expand...

The findings show that malware is easily available and cheap. Over three quarters (76 percent) of malware advertisements listed, and 91 percent of exploits retail for under $10, while the average cost of compromised Remote Desktop Protocol credentials is just $5.

"Unfortunately, it's never been easier to be a cybercriminal. Complex attacks previously required serious skills, knowledge and resource. Now the technology and training is available for the price of a gallon of gas. And whether it's having your company ad customer data exposed, deliveries delayed or even a hospital appointment cancelled, the explosion in cybercrime affects us all," says report author Alex Holland, senior malware analyst at HP.
Click to expand...

HP Wolf Security: The Evolution of Cybercrime: Why the Dark Web is Supercharging the Threat Landscape and How to Fight Back

Cybercrime is booming. Between 2008 and 2021, the FBI recorded a 207% increase in cybercrime reports, with losses hitting almost $7bn last year. This is being driven by an increasingly professionalized, specialized and collaborative underground supply chain that is harming individuals and businesses alike. Our latest HP Wolf Security report – The Evolution of Cybercrime: Why the Dark Web is Supercharging the Threat Landscape and How to Fight Back – traces the key cybercrime moments and trends over the last 30 years, detailing the dynamics of underground markets today and where they might be headed, and what organizations can do to bolster their defenses.
Click to expand...

KEY FINDINGS

Cybercrime goods and services are cheap and plentiful – Over three-quarters of advertisements (76%) for malware and 91% for exploits are listed for under $10. The average cost of compromised Remote Desktop Protocol credentials is just $5. Vendors are selling products in bundles, with “plug and play” malware kits, malware as a service, tutorials and mentoring services all reducing the need for technical skills and experience to conduct attacks – in fact, few threat actors today are advanced coders.

The irony of ‘honor amongst cyber-thieves’ – Much like the legitimate online retail world, trust underpins cybercriminal commerce between buyers and sellers. 77% of cybercriminal marketplaces analyzed require a vendor bond – a license to sell – which can cost up to $3,000. 85% of these marketplaces use escrow payments, and 92% offer dispute resolution services. Every marketplace analyzed provide vendor feedback scores. Given the risk of law enforcement takedowns and disruption by rivals, cybercriminals can stay a step ahead by transferring reputation between marketplaces – as the average lifespan of a dark web website is only 55 days.

Click to expand...

Vulnerabilities in popular software are giving cybercriminals a foot in the door – Cybercriminals are focusing on exploiting known bugs in popular software that will allow them to get a foothold and take control of systems. Examples include the Windows operating system, Microsoft Office, web content management systems, and web and mail servers. Niche exploits of specialized systems command higher prices (typically from $1,000-$4,000) on markets. Zero days (vulnerabilities that are not yet publicly known) are retailing at 10s of thousands of dollars on markets, but much of the trade of high-end exploits occurs in private channels on the ‘invisible net’.

Click to expand...

HP Wolf Security Report:
(PDF): https://threatresearch.ext.hp.com/wp-content/uploads/2022/07/HP-Wolf-Security-Evolution-of-Cybercrime-Report.pdf

By providing an anonymous online environment in which cybercriminals can collaborate, organize, hone their skills and establish illicit shops, the dark web has allowed cybercrime to evolve into a multi-faceted, reputation-sensitive service industry.
Click to expand...

Log in or Sign up

Honor among cyber thieves, the professional side of the dark web

guest Guest

Log in or Sign up

Honor among cyber thieves, the professional side of the dark web

guest Guest

Useful Searches