The number of cyberattacks is increasing and cybercriminal evolving with new business models such as Cybercrime-as-a-service. Recent studies indicate cybercrime’s cost to businesses globally as high as hundreds of billions of dollars.
The cybercrime continues to be a big business even after the number of law enforcement and their sophistication makes it difficult to stop the dark web markets.
Researchers from Armor published a report on threat actors activity, the products, and Services in underground markets and forums.
Before exploring further let’s see the Layers of web
Surface web:
Everything that indexed by the search engines such as Google, Yahoo, and Bing.
Deep Web:
Part of the website that not indexed by the search engines. Example: Your website database.
Dark Web:
Part of the deep web that hosted in the encrypted network, we need tools such as Tor to access it.
The dark web markets remain as a place for selling stolen credit cards, the underground offers hacker-for-hire services, hacking tools, tutorials and more. These dark web markets are accessible through anonymization services such as Tor or I2P.
The most profitable business for criminals is selling cybercrime-as-a-service and their services offerings are with flexible plans.
Want to DDoS an organization for an hour? $10. A day? $200. What about remote access to a machine via Remote Desktop Protocol (RDP) for three months? $35.
Cybercriminal selling exploits kits, botnets, hacked accounts in dark web markets to earn money on a regular basis. In some cases, they provide support at an additional cost.
According to Armor “A Microsoft Office exploit builder that targets CVE-2017-1099 was selling for as much as $1,000. Meanwhile, a banking Trojan license could be purchased for $3,000 to $5,000, and a remote access Trojan was seen selling for $200. “
Codesigning certificates that prove the integrity of the application was sold in dark web markets “standard codesigning for $400 & Extended Validation (EV) certificate for $2,500 according to Armor “.
Stolen credit cards gain the major market share and the Major brands such as Master Card, Visa and American Express all make regular appearances. Armor spotted a seller offered U.S. credit card numbers for $10-$12 and the card information also sold in bundles.
Cybercriminals also offering bank login information as a part of Cybercrime-as-a-Service – including username, passwords, and email address – for prices ranging from $200 to $1,000 depends on the balance in the account.
Armor said for $40 Cybercriminals offering all the Identity details such as social security numbers, dates of birth and addresses, as well as less sensitive, but no less personal, data like phone numbers, education level, and employment information.
Also the social media accounts TRU team spotted offered 1,000 Instagram accounts for a price of $15, 2,500 for $25, 5,000 for $40 and 10,000 for $60. Another seller claimed could hack into accounts for Facebook, Netflix, Twitter and other services for $12.99.
Armor published a paper on their investigation along with tips for security professionals and individuals. You find the detailed report here.
