Sunday, July 14, 2024

Cybercrime-as-a-Service – DDoS Attack Services Available in Dark Web Markets for $10 per Hour

The number of cyberattacks is increasing and cybercriminal evolving with new business models such as Cybercrime-as-a-service. Recent studies indicate cybercrime’s cost to businesses globally as high as hundreds of billions of dollars.

The cybercrime continues to be a big business even after the number of law enforcement and their sophistication makes it difficult to stop the dark web markets.

Researchers from Armor published a report on threat actors activity, the products, and Services in underground markets and forums.

Before exploring further let’s see the Layers of web

Surface web:

Everything that indexed by the search engines such as Google, Yahoo, and Bing.

Deep Web:

Part of the website that not indexed by the search engines. Example: Your website database.

Dark Web:

Part of the deep web that hosted in the encrypted network, we need tools such as Tor to access it.

The dark web markets remain as a place for selling stolen credit cards, the underground offers hacker-for-hire services, hacking tools, tutorials and more. These dark web markets are accessible through anonymization services such as Tor or I2P.


The most profitable business for criminals is selling cybercrime-as-a-service and their services offerings are with flexible plans.

Want to DDoS an organization for an hour? $10. A day? $200. What about remote access to a machine via Remote Desktop Protocol (RDP) for three months? $35.

Cybercriminal selling exploits kits, botnets, hacked accounts in dark web markets to earn money on a regular basis. In some cases, they provide support at an additional cost.

According to Armor “A Microsoft Office exploit builder that targets CVE-2017-1099 was selling for as much as $1,000. Meanwhile, a banking Trojan license could be purchased for $3,000 to $5,000, and a remote access Trojan was seen selling for $200. “

Codesigning certificates that prove the integrity of the application was sold in dark web markets “standard codesigning for $400 & Extended Validation (EV) certificate for $2,500 according to Armor “.


Stolen credit cards gain the major market share and the Major brands such as Master Card, Visa and American Express all make regular appearances. Armor spotted a seller offered U.S. credit card numbers for $10-$12 and the card information also sold in bundles.

Cybercriminals also offering bank login information as a part of Cybercrime-as-a-Service – including username, passwords, and email address – for prices ranging from $200 to $1,000 depends on the balance in the account.


Armor said for $40 Cybercriminals offering all the Identity details such as social security numbers, dates of birth and addresses, as well as less sensitive, but no less personal, data like phone numbers, education level, and employment information.


Also the social media accounts TRU team spotted offered 1,000 Instagram accounts for a price of $15, 2,500 for $25, 5,000 for $40 and 10,000 for $60. Another seller claimed could hack into accounts for Facebook, Netflix, Twitter and other services for $12.99.


Armor published a paper on their investigation along with tips for security professionals and individuals. You find the detailed report here.


Latest articles

mSpy Data Breach: Millions of Customers’ Data Exposed

mSpy, a widely used phone spyware application, has suffered a significant data breach, exposing...

Advance Auto Parts Cyber Attack: Over 2 Million Users Data Exposed

RALEIGH, NC—Advance Stores Company, Incorporated, a prominent commercial entity in the automotive industry, has...

Hackers Using ClickFix Social Engineering Tactics to Deploy Malware

Cybersecurity researchers at McAfee Labs have uncovered a sophisticated new method of malware delivery,...

Coyote Banking Trojan Attacking Windows Users To Steal Login Details

Hackers use Banking Trojans to steal sensitive financial information. These Trojans can also intercept...

Hackers Created 700+ Fake Domains to Sell Olympic Games Tickets

As the world eagerly anticipates the Olympic Games Paris 2024, a cybersecurity threat has...

Japanese Space Agency Spotted zero-day via Microsoft 365 Services

The Japan Aerospace Exploration Agency (JAXA) has revealed details of a cybersecurity incident that...

Top 10 Active Directory Management Tools – 2024

Active Directory Management Tools are essential for IT administrators to manage and secure Active...
Guru baran
Guru baran
Gurubaran is a co-founder of Cyber Security News and GBHackers On Security. He has 10+ years of experience as a Security Consultant, Editor, and Analyst in cybersecurity, technology, and communications.

Free Webinar

Low Rate DDoS Attack

9 of 10 sites on the AppTrana network have faced a DDoS attack in the last 30 days.
Some DDoS attacks could readily be blocked by rate-limiting, IP reputation checks and other basic mitigation methods.
More than 50% of the DDoS attacks are employing botnets to send slow DDoS attacks where millions of IPs are being employed to send one or two requests per minute..
Key takeaways include:

  • The mechanics of a low-DDoS attack
  • Fundamentals of behavioural AI and rate-limiting
  • Surgical mitigation actions to minimize false positives
  • Role of managed services in DDoS monitoring

Related Articles