Threat intelligence research and analysis.
Major ransomware attacks can start with endpoint access purchased for cheap by bad actors on underground markets. The first stage of an active cyberattack is initial access, which is the establishment of an initial foothold within a network. This step is difficult to perform, and therefore many aspiring attackers can
This past June, CyberProof, an MSSP using Cybersixgill’s Investigative Portal, was approached by a client who had been targeted by a ransomware attack. Noa Raz, CyberProof’s Senior CTI analyst, understood that the ransomware group behind the attack had exploited compromised RDP connections as a means for establishing initial
Behind every underground forum username lies a unique individual with his or her own personal motivations for logging in. In Cybersixgill’s latest research, Forumology II: Journey of a Threat Actor, we discovered something interesting: a correlation between why an actor uses a forum and how often the actor posts.
Financial data is a valuable commodity on the digital underground, with payment card information constituting one of the more common items listed for sale. The data maintains a crucial role in the cybercrime ecosystem, as sellers are able to easily monetize the stolen information for buyers to utilize for various
A powerful, open-source penetration testing tool has become the password cracker of choice on the dark web, and its users are increasingly focused on getting access to streaming entertainment. In fact, interest in cracking Netflix passwords is almost as popular as cracking Amazon, eBay, and Walmart accounts combined. The tool
A Remote Access Trojan (RAT) dubbed ‘ToxicEye’ continues to maintain wide popularity in the underground three years after its initial release. This malware, used to infect devices via the Telegram messaging app, provides threat actors complete control over a victim’s device. Telegram, the most downloaded app across both Android
In earlier generations, individuals seeking to access in-house entertainment without paying resorted to measures such as illegal cable hookups or downloading mp3s from Napster. Nowadays, as content is delivered on-demand through online streaming services, the only thing preventing an aspiring viewer from reaching massive libraries of content is a legitimate
For $65 per year, you can cheat all you want in video games. You might think gaming and esports are harmless arenas where young people get to blow off some steam and have fun. Esports are big business, with professional gamers and streamers competing for cash or the eyeballs of
There is no need to say that 2020 was ground-shaking. The pandemic affected just about all aspects of life in ways that we are only starting to understand. It tremendously impacted the cyber underground as well. Nearly all of Cybersixgill’s research reports dealt directly or indirectly with the impact
The second half of 2020 marked a steady trend in the number of credit cards for sale on the dark web at approximately 45 million. Following a major crackdown by Russian law enforcement on these markets, the digital underground for stolen credit cards has yet to recover from its nearly
Discussions of underground forums can evoke imagery of a city’s shadowy back alleys, populated by faceless figures. Speaking in whispered undertones, they meet one another, collaborate in criminal schemes, and transact contraband and prohibited services. But just how many actors are there altogether on these forums? Do dark web
Everyone knows that the best part of the holiday season is returning the stuff you don’t want for cash to buy the stuff you do. But for cybercriminals, every day is the day after Christmas. Our latest research report, “Terms and Conditions Apply: Refund Fraud on the Dark Web”
As the world races towards a coronavirus vaccine, the healthcare industry has remained a focal point for cybercriminals. And while threat actors have consistently targeted the industry, and references to healthcare have increased on the underground due to the pandemic. According to data taken from Cybersixgill’s portal, references from
A sign of the times? It looks like even the dark web has a serious case of election fever. With tomorrow’s presidential election generating tremendous interest in the U.S. and around the world, both the candidates and the election’s major issues have recently been popular topics of
Many schools face a unique breed of insider threat: their own students. Whether motivated by boredom or personal gain, students pose an outsized risk to their own schools. That’s due in large part to the tools and services available to them on the dark web. They can find new
It’s getting harder for criminals to fake their way to social media fame. Yes, people can still buy followers and engagement. But the process isn’t exactly simple. It’s more expensive and requires more skill. Researchers at Cybersixgill recently examined the market for social media hacking on the
