Cyber Risks · Krebs on Security

Incognito Darknet Market Mass-Extorts Buyers, Sellers

Summary: Incognito Market, a darknet narcotics bazaar, began extorting its vendors and buyers by threatening to publish 557,000 orders and 862,000 cryptocurrency transaction IDs at the end of May unless users pay fees ranging from $100 for Level 1 vendors to $20,000 for Level 5 vendors. The mass extortion came days after administrators reportedly pulled an exit scam, leaving users unable to withdraw funds, and the site's 'auto-encrypt' messages were allegedly stored in plain text rather than deleted after expiry.

Bottom line: The operators claim to hold private messages and order details for 557,000 orders, and users who relied on the site's auto-encrypt feature had their shipping information readable by the market itself - a reminder that convenience encryption is not encryption.

Read the original at Krebs on Security ↗

Topics
Cybercrime & Law Enforcement
Related