July 28, 2015 at 23:14Cybercriminals revived Darkode forum
Recently, we wrote about the closure by law enforcement agencies of a well-known underground forum of cybercriminals called Darkode. In addition to closing the forum itself, many of its users, who are famous cybercriminals, have been arrested. Many, but not all, as one of the Darkode administrators under the nickname "Sp3cial1st" escaped arrest and restarted the forum at a new address.
According to the famous malware / cybercrime researcher MalwareTech, security measures have been significantly strengthened for the new forum reincarnation: users can access the forum through Tor, and authentication is carried out using a special Blockchain API.
Fig. Start page of the new Darkode
The following Darkode users have been arrested.
The initial story of the closure of Darkode received an unexpected continuation when it turned out that one of the arrested Darkode members, the author of the Dendroid Trojan, worked for the well-known American security company FireEye.
Cybercriminals use Darkode to trade malware, botnets, and to sell and buy other cyber-attack services there. It is also used to buy and sell confidential information stolen from users, such as credit card numbers.
According to the famous malware / cybercrime researcher MalwareTech, security measures have been significantly strengthened for the new forum reincarnation: users can access the forum through Tor, and authentication is carried out using a special Blockchain API.
Fig. Start page of the new Darkode
The following Darkode users have been arrested.
- h0tsh0t
- Mafi AKA Crim AKA Synthet! C (one of the Darkode administrators)
- Parabola (one of the Darkode administrators)
- Nocen
- Phastman
- semaph0re
- m3t4lh34d
- rzor
- k@exploit.im
- Android (author of the famous Android Trojan - Dendroid)
- Split
- Wesththug
The initial story of the closure of Darkode received an unexpected continuation when it turned out that one of the arrested Darkode members, the author of the Dendroid Trojan, worked for the well-known American security company FireEye.
Cybercriminals use Darkode to trade malware, botnets, and to sell and buy other cyber-attack services there. It is also used to buy and sell confidential information stolen from users, such as credit card numbers.