What is the dark web?
Summary: Cisco Talos explains that the dark web is a small, intentionally hidden portion of the deep web, reachable only through anonymizing software such as Tor, I2P, Freenet or ZeroNet. Tor routes traffic through three random relays and hosts .onion sites, and Talos says the resulting anonymity draws marketplaces and forums trading malware and stolen credentials, which its teams monitor.
What you should know: The same anonymity that lets the BBC and New York Times publish on Tor also makes it harder for law enforcement to trace transactions to a physical location, which is why stolen credentials and malware change hands on marketplaces your threat intelligence has to watch.
Read the original at Cisco Talos ↗
- Topics
- Threat Actors & Nation-State
- Related
- University of Texas at Arlington warns personal information stolen during cyberattack Cyber Risks · Nov 13, 2026Hackers Exploit PHP2Shell Flaws in Check Point Gateways to Deploy TSGA Backdoor and Wipe ESXi Files Cyber Risks · Nov 13, 2026Hackers compromise 4,800 GitHub accounts to steal cloud credentials Cyber Risks · Nov 12, 2026