The murkiest denziens of the dark net - and how to escape their grasp
2 AUGUST 2016 • 3:23PM
in drugs and stolen data on the Dark Net is growing CREDIT: -/-
Earlier this week it was revealed that the 18-year-old man who murdered nine and injured 35 in Munich did so . The dark net, technically called ‘Tor Hidden Services’, is a network of hidden sites which are difficult to censor and accessed with an anonymous web browser. Whistleblowers and political activists rely on its privacy enhancing features, : the most popular and common use of the dark net are its two dozen or so anonymous markets, which look and feel like Amazon, and where more or less anything can be bought and sold, including a Glock 9mm.
For all the understandable worry about the weapons trade (Angela Merkel herself has promised ), there are not that many known cases of firearms being traded there: this may have been the first time a murder weapon was acquired this way. True, there are plenty for sale, but it’s difficult for a journalist to know if it’s legitimate or a scam designed to make off with some gullible buyer’s bitcoin. (I was once asked by a foreign television show to buy an AK-47 live on air, which I politely declined).
A Glock 9mm for sale on a Dark Net market - is it a scam or a genuine offer? CREDIT:ALPHABAY
By contrast, – according to the 10 per cent of drug takers have got drugs from there – because they are easy to mail in the post, possession won’t always land you in jail, and there are hundreds of vendors selling all sorts of exotic drugs, which makes for a very competitive, consumer-centric market place.
Guns are more difficult to mail, more expensive, and illegal possession a more serious crime. It’s a far smaller trade, which means the competition and choice which characterises the drugs market doesn’t exist. That in turn makes scams (or law enforcement sting operations) more likely. The dark net sale of weapons will likely continue to grow, but remain small – at least relative to the offline trade.
You have been warned - the trade in stolen data is going to get worse before it gets better
The same cannot be said of the escalating online trade in stolen data. The BBC's Victoria Derbyshire show that O2 customer data was being sold on a dark net market. An ethical hacker - someone who hacks into systems and then suggests how to fix the weakness - from company Insinia Security spotted a vendor claiming to have access to thousands of users O2 accounts. Yours for just $4.50 per user (which is pretty expensive in fact - but the vendor was offering a "buy 5 and get 2 free" deal).
7 hacked O2 accounts for the price of 5 CREDIT: -/-
It wasn’t actually O2’s fault. It looks like those user names and passwords were stolen from the gaming website XSplit three years ago. Because we’re all pretty lazy, hackers tried them on different websites, including O2. When they matched, hackers then accessed that user’s O2 account and pulled out dates of birth, phone numbers and so on. This game of snap is known as ‘credential stuffing’.
You have been warned - the trade in stolen data is going to get worse before it gets better. It’s a highly professional industry. In the last few months alone the following have been reported:
All of us leave personal data scattered all over the web, and in the right hands it’s worth something. (There’s a handy site to check if you’ve been hacked without knowing,). Take that stolen 02 data. A less ethical hacker could try to “credential stuff” from Amazon, or Gumtree, lock a user out of their account, and start making deliveries to a new address. One victim of the XSplit hack found cars for sale on his eBay account. More sophisticated uses include identity theft, and credit card fraud.
I was away from home when eBay contacted me to say there was some suspicious activity... I checked and it looked like there were cars for sale on my account. I am considering using a password manager and two-step authentication, although nothing is foolproofHasnain Shaw, hacked O2 account holder
This stuff is sold in staggering volumes; and there are secondary and tertiary markets where stolen data is repackaged and resold like dodgy mortgage bonds. It doesn’t even need to be put in a parcel. The O2 data, for example, is just delivered via email.
As I’ve argued elsewhere, these dark markets are efficient, creative, and professionally run. When they’re shut down, as sometimes happens, they tend to pop up again, even more secure.
New services and scams show up all the time, and will continue to. One of the fastest growing trades on dark net sites – insiders reckon it’s worth millions of dollars a year – is . A user’s computer is infected with malware which encrypts the entire hard drive.
Ransomware - a new invasive service on offer from the Dark Web CREDIT: -/-
That user is then asked to pay a ransom fee to get it unlocked again. It’s awful stuff, but a very creative way to make money.
A decade ago, you needed some technical know-how to make money from being a criminal computer hacker. The barriers to entry are lowering. You can just hire someone to do it for you, or download software, or buy stolen data and start credential stuffing.
The bad guys, through the use of the Internet, have shrunk the worldFBI director James Comey
Estimates of the cost of cybercrime to UK firms and individuals vary wildly, although it’s certainly billions of pound a year. Most of that’s not on the dark net of course, but I reckon a growing proportion of it is. Ironically, the answer might be there too. You know what dark net data vendors definitely do not do? Re-use the same password for every account and click links they don’t trust.
What’s more, last week , using the privacy and security this network offers to host your “smart home” services – your fridge, toaster, heater – which are increasingly becoming internet enabled and spewing out more data about you. The point? To stop hackers being able to access your personal data.
Another Special Announcement - Tune in to my radio interview, on Rider University's station, www.1077thebronc.com I discuss my recent book, above on "Your Career Is Calling", hosted by Wanda Ellett.In addition to this blog, Netiquette IQ has a website with great assets which are being added to on a regular basis. I have authored the premiere book on Netiquette, “Netiquette IQ - A Comprehensive Guide to Improve, Enhance and Add Power to Your Email". My new book, “You’re Hired! Super Charge Your Email Skills in 60 Minutes. . . And Get That Job!” has just been published and will be followed by a trilogy of books on Netiquette for young people. You can view my profile, reviews of the book and content excerpts at:
In addition to this blog, I maintain a radio show on BlogtalkRadio online newsletter via paper.li.I have established Netiquette discussion groups with Linkedin and Yahooa member of the International Business Etiquette and Protocol Group and Minding Manners among others. I regularly consult for the Gerson Lehrman Group, a worldwide network of subject matter experts and I have been contributing to the blogs Everything Email and emailmonday . My work has appeared in numerous publications and I have presented to groups such as The Breakfast Club of NJ and PSG of Mercer County, NJ.
I am the president of Tabula Rosa Systems, a “best of breed” reseller of products for communications, email, network management software, security products and professional services. Also, I am the president of Netiquette IQ. We are currently developing an email IQ rating system, Netiquette IQ, which promotes the fundamentals outlined in my book.
Over the past twenty-five years, I have enjoyed a dynamic and successful career and have attained an extensive background in IT and electronic communications by selling and marketing within the information technology marketplace.Anyone who would like to review the book and have it posted on my blog or website, please contact me email@example.com.