Cyber-crime and attacks in the dark side of the web
summary
A crawling and proxy platform accesses Tor I2P and Freenet via 64 Tor instances and other clients, rendering pages with a headless browser and indexing >20 million sites in Elasticsearch while extracting emails, Bitcoin addresses and screenshots; malware uses hidden-service C2 and ransomware points victims to .onion payment pages; four live honeypots (black market, bulletproof hosting, VIP forum, underground shop) attract daily compromises leading to about 1.5 web-shell uploads/day and over 400 private-key theft attempts aimed at hijacking hidden services.
AI-written summary · about
chapters (35)
- 0:00Introduction
- 1:08The dark web
- 3:53Cybercrime
- 7:05Metadata
- 7:42System overview
- 11:20Browser
- 12:23Warcloud
- 12:58How we build Warcloud
- 14:13Dark web example
- 15:13credit cards
- 16:17compromised accounts
- 16:31cashout services
- 17:58bulletproof hosting providers
- 19:02impact on organizations
- 22:03cryptolocker
- 23:22dark web attacks
- 24:09honeypot
- 25:36black market
- 26:03underground follow
- 26:20forum carding
- 26:54cybercriminal group
- 27:53custom web vulnerabilities
- 28:27port web
- 29:20web shell
- 30:33web attacks
- 30:47web shells
- 31:21payload
- 31:49eval
- 34:41Cyberattack
- 35:41Voluntary public key theft
- 36:38Impersonating Facebook
- 37:00Looking for your private key
- 37:10Conclusion
- 37:59Questions
- 42:27Hidden services
related talks
36mCyber Crime and Attacks on the Dark Side of the Web
55mCybercrime in The Deep Web
10mQuick Look: Cybercrime and Attacks in the Dark Side of the Web
40mNavigating the Shadows: A Comprehensive Exploration of Popular and Malicious Tools on the Dark Web
46mAttacks, Lies and the Underground World
36mBehind Enemy Lines:Engaging and Disrupting Ransomware Web Panels
30mThe Hidden Layer of Cyberattacks
01h 04mServer-Side Browsing Considered Harmful