In the popular sci-fi TV series Stranger Things, researchers inadvertently open a portal to the “Upside Down,” an alternate dimension that is home to a sinister collection of predatory creatures. That sounds a lot like the dark web, the digital world’s own alternate universe.
Sites on the dark web are encrypted and not indexed by conventional search engines. Although some serve legitimate purposes, many are deeply shady — serving as illicit marketplaces for drugs, guns and child pornography. However, the most lucrative criminal enterprises on the dark web involve the sale of stolen data and attack tools and services.
The dark web may not sound like a place for law-abiding citizens, but it can provide cybersecurity professionals with vital information about the latest attack techniques. Dark web monitoring can also alert organizations that they’ve been breached and even provide advance warning of a coming attack.
An Analysis of Dark Web Activity
A recent report highlights the value of dark web monitoring and analysis. A team of researchers analyzed thousands of discussion threads in hacker forums and found that more than half mentioned services selling information-stealing malware. There were low-cost, user-friendly “Infostealer-as-a-Service” offerings for novice hackers and more sophisticated services for Advanced Persistent Threat groups.
Researchers found a 46 percent increase in cloud-based “Credential-as-a-Service” offerings that supply newly compromised credentials organized by industry and location. Hackers often use compromised credentials in their attacks, and these automated, subscription-based systems make them easy to access.
One-Time Password (OTP) bots are also for sale on the dark web. Hackers use OTP bots to automatically send text messages or pre-recorded voice calls disguised as account verification or fraud prevention. The goal of these social engineering attacks is to trick users into revealing their two-factor authentication codes. Hackers can buy OTP bot services for as little as $10 per attack.
The Benefits of Dark Web Monitoring
Compromised credentials pose an extraordinary risk for organizations, giving criminals the means to breach critical systems, steal sensitive information, plant malware and launch phishing attacks. These activities can lead to lost revenue, stolen intellectual property, regulatory action, fines and damaged reputations.
Security experts say that dark web monitoring plays a vital role in any modern security strategy. If an organization’s data is found on the dark web, it could indicate that the organization suffered a breach and provides clues as to the scope of the exposure. If the data comes from an ongoing breach, it alerts the organization to the need for immediate containment.
Hacker discussion threads sometimes mention companies by name — a clue that an attack is imminent. Knowing which hacker groups are active and which industries or regions they’re targeting can also help organizations prioritize their security efforts.
Dark web monitoring solutions can’t prevent stolen information from being used, nor can they remove stolen information from the dark web. However, they do provide real-time awareness of compromised credentials so organizations can develop a plan for mitigating risk.
How Verteks Can Help
Verteks is committed to helping our customers avoid the serious consequences of compromised credentials. As part of our managed services portfolio, we offer around-the-clock monitoring of dark web activities, and alert you if your sensitive information is ever listed on an illicit website.
Our service continuously monitors and analyzes millions of sources, including botnets, criminal chat rooms, peer-to-peer networks, malicious websites, bulletin boards and illegal black-market sites. We notify you immediately if any of your data is discovered so you can change passwords, patch and update your systems, place a fraud alert on your accounts and file a report with the Federal Trade Commission.
Like the underworld in Stranger Things, the dark web is a shadowy place where danger lurks around every corner. However, there’s nothing fictional about the dark web. The criminal activity that occurs on these illicit websites poses a significant risk to any organization. Contact us to learn more about how our monitoring solution can help you mitigate that risk.
