dark0de, also known as Darkode, was a
cybercrime
Cybercrime encompasses a wide range of criminal activities that are carried out using digital devices and/or Computer network, networks. It has been variously defined as "a crime committed on a computer network, especially the Internet"; Cyberc ...
forum and
black market
A black market is a Secrecy, clandestine Market (economics), market or series of transactions that has some aspect of illegality, or is not compliant with an institutional set of rules. If the rule defines the set of goods and services who ...
place described by
Europol
Europol, officially the European Union Agency for Law Enforcement Cooperation, is the law enforcement agency of the European Union (EU). Established in 1998, it is based in The Hague, Netherlands, and serves as the central hub for coordinating c ...
as "the most prolific English-speaking
cybercriminal forum to date".
The site, which was launched in 2007, served as a
venue for the sale and trade of
hacking services,
botnets,
malware
Malware (a portmanteau of ''malicious software'')Tahir, R. (2018)A study on malware and malware detection techniques . ''International Journal of Education and Management Engineering'', ''8''(2), 20. is any software intentionally designed to caus ...
, stolen personally identifiable information, credit card information, hacked server credentials, and other illicit goods and services.
Of all the illegal forums throughout the world, Darkode was one of the most dangerous. This is because it was home to the most amount of criminal hackers and was the most threatening in terms of data safety.
History
In early 2013, dark0de suffered from a large DDoS attack moving from bulletproof hosting provider Santrex to off-shore, the latter being a participant of the Stophaus campaign against Spamhaus. The site has had an ongoing feud with security researcher Brian Krebs.
In April 2014, various site users were attacked via the Heartbleed
Heartbleed is a security bug in some outdated versions of the OpenSSL cryptography library, which is a widely used implementation of the Transport Layer Security (TLS) protocol. It was introduced into the software in 2012 and publicly disclos ...
exploit, gaining access to private areas of the site.
Takedown
The forum was the target of Operation Shrouded Horizon, an international law enforcement effort led by the Federal Bureau of Investigation
The Federal Bureau of Investigation (FBI) is the domestic Intelligence agency, intelligence and Security agency, security service of the United States and Federal law enforcement in the United States, its principal federal law enforcement ag ...
(FBI), which culminated in the site's seizure and arrests of several of its members in July 2015. According to the FBI, the case is "believed to be the largest-ever coordinated law enforcement effort directed at an online cyber criminal forum". Upon announcing the 12 charges issued by the United States, Attorney David Hickton called the site "a cyber hornet's nest of criminal hackers", "the most sophisticated English-speaking forum for criminal computer hackers in the world" which "represented one of the gravest threats to the integrity of data on computers in the United States".
On Monday, September 21, 2015, Daniel Placek appeared on the podcast Radiolab discussing his role in starting Darkode and his eventual cooperation with the United States
The United States of America (USA), also known as the United States (U.S.) or America, is a country primarily located in North America. It is a federal republic of 50 U.S. state, states and a federal capital district, Washington, D.C. The 48 ...
government in its efforts to take down the site.
There were around two hundred and fifty to three hundred individuals in the Darkode forum. When arrests were made, they were made over a span of twenty countries. Canada, United States, Germany, Croatia, Nigeria, Romania, and Cyprus were some of the countries that these individuals were found.
When Darkode was shut down, there were twenty-eight individuals arrested with connections to this forum. Of these twenty-eight arrests, there were twelve people being charged by the United States. The rest of the arrests were made across the world in various countries.
Revivals
Only two weeks after the announcement of the raid, the site reappeared with increased security, employing blockchain
The blockchain is a distributed ledger with growing lists of Record (computer science), records (''blocks'') that are securely linked together via Cryptographic hash function, cryptographic hashes. Each block contains a cryptographic hash of th ...
-based authentication and operating on the Tor anonymity network.[
In December 2016 another version of the site returned on the original ]domain name
In the Internet, a domain name is a string that identifies a realm of administrative autonomy, authority, or control. Domain names are often used to identify services provided through the Internet, such as websites, email services, and more. ...
. Security researcher MalwareTech suggested the relaunch was not genuine, and almost immediately after, it was hacked and its database leaked.
See also
* BlackHatWorld
* BreachForums
* Hack Forums
* Hydra Market
* Lizard Squad, a hacking group, said to have used dark0de
* Nulled
* OGUsers
* RaidForums
* ShinyHunters
References
External links
Darkode archive project
News about Dark0de
The User’s Guide to Darkode: A Complete History and How to Use It
{{Tor onion services
Cybercrime
Darknet markets
Domain name seizures by United States
Hacker groups
Crime forums
Tor onion services