Exploring the Cybercrime Underground: Part 4 - Darknet Markets
Summary: Unit 42's fourth cybercrime-underground report describes darknet markets as Tor-hosted hidden services, addressed by 16-character .onion names, where criminals trade stolen credit cards, PII, identity documents, credentials, malware and exploit kits. It details the Silk Road-style payment model, in which buyers fund accounts with Bitcoin and the market holds payment in escrow until an order completes, and gives prices including $1 to $25 per credit card, $50 for a credit report scoring 750+, and $20 to $100 per editable document template.
Why it matters: Credit cards sell for as little as $1 each and forged document templates for $20 to $100, so the data your organization holds is cheap to convert into fraud once it leaks. The report also notes insider theft reaching these markets, illustrated by a former Australian police officer arrested in November 2016 for selling fake police IDs and security passes.
Read the original at Unit 42 Palo Alto Networks ↗
- Topics
- Malware
- Related
- ARTEX and beyond: AI-enabled penetration testing platforms Cyber Risks · Nov 13, 2026Fake GTA 6 download goes after Steam logins and crypto wallet data Cyber Risks · Nov 13, 2026Operation Endgame Takes Down Gootloader, CastleRAT and StealC Servers, Seizes 6.4M Stolen Logins Cyber Risks · Nov 13, 2026