Friday, May 23, 2025
HomeComputer SecurityCybercrime-as-a-Service - DDoS Attack Services Available in Dark Web Markets for $10...

Cybercrime-as-a-Service – DDoS Attack Services Available in Dark Web Markets for $10 per Hour

Published on

SIEM as a Service

Follow Us on Google News

The number of cyberattacks is increasing and cybercriminal evolving with new business models such as Cybercrime-as-a-service. Recent studies indicate cybercrime’s cost to businesses globally as high as hundreds of billions of dollars.

The cybercrime continues to be a big business even after the number of law enforcement and their sophistication makes it difficult to stop the dark web markets.

Researchers from Armor published a report on threat actors activity, the products, and Services in underground markets and forums.

- Advertisement - Google News

Before exploring further let’s see the Layers of web

Surface web:

Everything that indexed by the search engines such as Google, Yahoo, and Bing.

Deep Web:

Part of the website that not indexed by the search engines. Example: Your website database.

Dark Web:

Part of the deep web that hosted in the encrypted network, we need tools such as Tor to access it.

The dark web markets remain as a place for selling stolen credit cards, the underground offers hacker-for-hire services, hacking tools, tutorials and more. These dark web markets are accessible through anonymization services such as Tor or I2P.

Cybercrime-as-a-service

The most profitable business for criminals is selling cybercrime-as-a-service and their services offerings are with flexible plans.

Want to DDoS an organization for an hour? $10. A day? $200. What about remote access to a machine via Remote Desktop Protocol (RDP) for three months? $35.

Cybercriminal selling exploits kits, botnets, hacked accounts in dark web markets to earn money on a regular basis. In some cases, they provide support at an additional cost.

According to Armor “A Microsoft Office exploit builder that targets CVE-2017-1099 was selling for as much as $1,000. Meanwhile, a banking Trojan license could be purchased for $3,000 to $5,000, and a remote access Trojan was seen selling for $200. “

Codesigning certificates that prove the integrity of the application was sold in dark web markets “standard codesigning for $400 & Extended Validation (EV) certificate for $2,500 according to Armor “.

Cybercrime-as-a-service

Stolen credit cards gain the major market share and the Major brands such as Master Card, Visa and American Express all make regular appearances. Armor spotted a seller offered U.S. credit card numbers for $10-$12 and the card information also sold in bundles.

Cybercriminals also offering bank login information as a part of Cybercrime-as-a-Service – including username, passwords, and email address – for prices ranging from $200 to $1,000 depends on the balance in the account.

Cybercrime-as-a-service

Armor said for $40 Cybercriminals offering all the Identity details such as social security numbers, dates of birth and addresses, as well as less sensitive, but no less personal, data like phone numbers, education level, and employment information.

Cybercrime-as-a-service

Also the social media accounts TRU team spotted offered 1,000 Instagram accounts for a price of $15, 2,500 for $25, 5,000 for $40 and 10,000 for $60. Another seller claimed could hack into accounts for Facebook, Netflix, Twitter and other services for $12.99.

Cybercrime-as-a-service

Armor published a paper on their investigation along with tips for security professionals and individuals. You find the detailed report here.

Gurubaran
Gurubaran
Gurubaran is a co-founder of Cyber Security News and GBHackers On Security. He has 10+ years of experience as a Security Consultant, Editor, and Analyst in cybersecurity, technology, and communications.

Latest articles

EU Targets Stark Industries in Cyberattack Sanctions Crackdown

The European Union has escalated its response to Russia’s ongoing campaign of hybrid threats,...

Venice.ai’s Unrestricted Access Sparks Concerns Over AI-Driven Cyber Threats

Venice.ai has rapidly emerged as a disruptive force in the AI landscape, positioning itself...

GenAI Assistant DIANNA Uncovers New Obfuscated Malware

Deep Instinct’s GenAI-powered assistant, DIANNA, has identified a sophisticated new malware strain dubbed BypassERWDirectSyscallShellcodeLoader. This...

Hackers Expose 184 Million User Passwords via Open Directory

A major cybersecurity incident has come to light after researcher Jeremiah Fowler discovered a...

Resilience at Scale

Why Application Security is Non-Negotiable

The resilience of your digital infrastructure directly impacts your ability to scale. And yet, application security remains a critical weak link for most organizations.

Application Security is no longer just a defensive play—it’s the cornerstone of cyber resilience and sustainable growth. In this webinar, Karthik Krishnamoorthy (CTO of Indusface) and Phani Deepak Akella (VP of Marketing – Indusface), will share how AI-powered application security can help organizations build resilience by

Discussion points


Protecting at internet scale using AI and behavioral-based DDoS & bot mitigation.
Autonomously discovering external assets and remediating vulnerabilities within 72 hours, enabling secure, confident scaling.
Ensuring 100% application availability through platforms architected for failure resilience.
Eliminating silos with real-time correlation between attack surface and active threats for rapid, accurate mitigation

More like this

Global Crackdown Nets 270 Dark Web Vendors in Major Arrests

A sweeping international crackdown, codenamed Operation RapTor, has dealt a significant blow to the...

Phishing Campaign Uses Blob URLs to Bypass Email Security and Avoid Detection

Cybersecurity researchers at Cofense Intelligence have identified a sophisticated phishing tactic leveraging Blob URIs...

UK Government to Shift Away from Passwords in New Security Move

UK government has unveiled plans to implement passkey technology across its digital services later...