According to his analysis of Russian Ministry of Justice statistics, more than half of those convicted of drug trafficking in 2018 were years old and students. Threat actors are concerned about their future, as these takedowns have also fueled an already ongoing discussion about potential law enforcement takeovers of other major cybercrime venues. At the center of this conversation are Russia’s two main bodies for dealing with financial and cybercrimes, the Federal Security Service and Ministry of Internal Affairs’ (MVD) Department K. The Russian Market may feel distant and abstract, but the threats it enables are very real.
Interestingly, RAMP managed to stay under the radar of authorities by focusing on a predominantly Russian audience and restricting the sale of certain hacking services. With the advent of stable versions of Tor, a Russian-language space began to develop within the network. The first porn forums, drug dealing site and stores selling weapons and spy gadgets opened.
Comparing Top 8 AI Code Assistants: Productivity Miracle Or Security Nightmare Can You Patent AI Code Based App?
The FSB specializes in countering foreign interference in internal affairs and preventing activity that could undermine any area of the state’s defense capabilities. These blurred lines have led to accusations of international cyberattacks and assassinations carried out by the FSB. The Federal Security Service (FSB) reports directly to the president of the Russian Federation. While their roles are different, they have both significantly affected the cybercrime landscape in Russia and how it will evolve. In the wake of the recent arrests, Flashpoint analysts explain the main differences and similarities between the FSB and MVD’s Department K, plus what their roles might mean for the future of the cybercrime landscape. In addition to seizing the domains, Russian authorities arrested Artem Alexeyevich Zaytsev and at least five other individuals.
Darkside says that RAMP makes around $250,000 a year from its brisk drug trafficking business. Instead of those commissions, Darkside charges dealers $300 monthly fee for a prime spot on its home page and an extra $1,000a month for a “license” to sell cocaine, hash and amphetamines in the lucrative Moscow market. Western risk intelligence companies monitoring threatening activity on the internet claim that Hydra, a Russian language site hosted on the Dark Web, is responsible for facilitating some US$1.37 billion worth of drug deals.
For certain groups, dark and deep web (DDW) forums exist for anonymous chatting and discussion on sensitive topics like government censorship and more. Whereas before you had to go to a Roma village, now everyone up to the wholesale level’s working online. The customer review system and testing service takes a lot of the swindlers and snake oil salesmen out of the picture—and it’s easier to avoid a police sting. She may have little spare time, but at least Galina has managed to stay out of jail, unlike the droppers who make up some of the 19,000 people who were convicted for drug dealing in Russia in 2018. But since the dropmen don’t know their actual paymasters, it’s not clear what police or vigilante groups such as CWD will achieve beyond clearing out a few low-level errand boys and their stashes. A November police operation which netted nearly half a ton of various substances failed to catch even one store proprietor—just seven couriers.
A Deep Dive Into The Russian Cybercrime Forums Shaping 2023’s Landscape
To gain access to Exploit, threat actors must either pay a $100 fee for automatic access or establish a reputation on other “friendly” forums. This breach was part of a wider cluster of four breaches that targeted various underground cybercrime forums within a short time span. The conversations align with the widely held view that threat actors running major cybercrime operations need to have a “krysha” (“roof”—that is, protector) in law enforcement. The forum is a predominantly Russian-language forum with a marketplace section where cybercriminals trade stolen credit card information, malware, and even zero-day exploits. Interestingly, the forum can be accessed both through a standard internet browser on the watching network and through the dark web using the Tor browser.
Tor2door Market
Kira doesn’t know whether the dealer had scammed her, or if whether it had been taken by another user whose ‘treasure’ was placed nearby, but she does know that she will not be buying anything from this dealer again. Once the payment has been processed, the buyer receives a description of the ‘treasure’s’ location as well as GPS coordinates and photos. The ‘ready made treasure’ option allows you to receive an order as quickly as possible – sometimes it can take less than an hour between payment and receiving the ‘treasure’. Only small amounts are sold this way – no more than a few grams, depending on the substance. Drugs are sorted by category and by region and there is a list of the best stores.
Hydra has its own team of chemists and human guinea pigs to test each product and medics on standby to give safety advice. There is a subforum where these test results are posted, complete with graphs, analysis, and photos. Anyone trying to pass oregano as high-grade chronic will get kicked off the site. No fentanyl is allowed, and neither are weapons, hitmen, viruses or porn, although drugs, fake passports, dodgy SIM cards, and counterfeit cash are sold.
What Happened To The RAMP Community?
“Once the physical cash is secured in the physical hands of the seller, they then complete the narcotics sale, either burying the sold products or shipping them out as has been done historically,” it said. “Hydra acts as a host for sellers to set up and run their own narcotics shops, with Hydra profiting as the intermediary for all executed transactions conducted,” a recent joint report by Flashpoint and Chainalysis, revealed. To remain anonymous about your purchases on the dark web, always use cryptocurrency as your mode of payment. If a seller encourages you to opt for other well-known and commonly used payment methods, then the person is likely to be a scammer, and you must not make any deal with them. Always use a fake name and a temporary email address when you buy something from the dark net shops.
Russian Authorities Announce Takedown Of RAMP Dark Web Marketplace
DarkOde Reborn is a great darknet market where you can find anything you want. The website has a great design and a clean and organized interface that is easy to use. The homepage includes options like browsing products, searching, mixer, and coin exchange. However, the website has some security risks, and users experience glitches.
RAMP Forum
The site’s admins claim to provide several security and anonymity features to protect registered users, including disabling IP address logs for all users, user actions, and encrypted private messaging. Additionally, exclusive private sections on the forum require payment to access. Previously, XSS was notorious for recruiting affiliates for ransomware-as-a-service gangs, but the admins banned ransomware topics in 2021.The forum’s name, XSS, comes from a type of web application vulnerability called cross-site scripting. Previously known as DaMaGeLaB from 2013, XSS underwent a rebranding after one of its administrators was arrested in 2018. Since its inception in 2005, Exploit has been a prominent underground hacking forum, catering to malicious actors seeking to discuss working exploits for various vulnerabilities.
Top 5 Russian Forums On The Dark Web
XSS is another closed Russian language forum that’s accessible on the clear web and dark web. Admins promise various security and anonymity features to protect registered users, including disabling IP address logs for all users and user actions and implementing encrypted private messages. There aren’t many barriers to registration on XSS—new users simply select credentials, input a valid email, answer a basic cybersecurity question, and await approval from the site’s admin. This forum is a predominantly Russian language forum with a marketplace section where cybercriminals trade in stolen credit card details, malware, and even zero-day exploits. Interestingly, this forum is accessible via both standard Internet browsers on the clear web and via the dark web using the Tor browser. Nemesis Market is a relatively new wallet-less shop on dark web where you don’t need to deposit any amount in your wallet before buying products from here.
The French subforum, in particular, is the most active, highlighting the forum’s international reach. Much like legitimate e-commerce platforms, Russianmarket is a marketplace that connects vendors with customers. However, instead of trading legal goods, the transactions involve illicit products and services. Buyers on the platform typically use cryptocurrencies to maintain their anonymity. Once a transaction is completed, funds are held in escrow until both parties confirm the deal, ensuring a form of buyer protection in this illegal trade. A previous version of RAMP existed from 2012 to 2018 on a different domain, but it was more centered around buying and selling illegal products.
Wiki Tools
From stolen logins to full account takeovers, the fallout from infostealer logs can spread fast and wide. Staying ahead means assuming compromise is possible, and preparing like it’s inevitable. Modern infostealers are stealthy, fast, and lightweight, often avoiding detection by traditional antivirus tools. Use EDR (endpoint detection and response) platforms to flag suspicious behaviors like browser data access, unauthorized network requests, or credential dumping. Much of the data sold on Russian Market is harvested through infostealer malware, making it a major hub for cybercriminals seeking to exploit compromised logins and financial information.
- I think that the more bans that are introduced by the government (in particular by blocking sites), the faster people will learn about Tor and its resources, which will boost the amount of Tor users in Russia,” writes Patrik.
- All the payments were made through cryptocurrency, further enhancing marketplace anonymity.
- When transferring information, Tor encrypts the data and changes the user’s IP address.
- In reality, although the police had unearthed some of RAMP’s wholesalers, it was Hydra that had killed them off.
- While the FSB addresses tasks at a national scale, the MVD is involved in more local and generalized tasks, with Department K specifically focused on technology.
You Can Send People Who Ghost You These Blank Sweetheart Candies
Unlike its predecessors, RAMP 2.0 offers language options that include Russian, Mandarin, and English. The original RAMP version was shut down by Russian authorities between 2012 and 2018. Russianmarket is known for its wide variety of illegal offerings, which range from personal identity data, financial account details, and stolen credit card numbers to hacking tools, drugs, and counterfeit goods. The platform is carefully structured to facilitate anonymous transactions while shielding both sellers and buyers from potential law enforcement scrutiny. In other words, you can say that the dark web and deep web communities (forums) are a breeding ground for cybercriminals, malicious schemes, and black market activities. Unlike the normal social platforms, these forums are mainly focused on cybercrime discussions, offering anonymity, access to high-value digital data, and escrow services.
