Cybercriminal Underground

Some of the most interesting numbers gathered from Trend Micro's latest research into the Deep Web, including prices of illegal goods and criminal services, and the value of hacked accounts.

An in-depth look into the duality of the Deep Web—how its anonymity allows free communication and the trade of illegal goods and services. See how it impacts the real world today, and how it could evolve over the next few years.

For most users, the Visible Web is all that they'll ever need, where information, products, and services can be readily accessed or searched for. But little is known about the Deep Web. What is it? How does it work? Is it legal? Is it real?

In Operation Onymous, 17 people were arrested and 414 different .onion domains were seized by various law enforcement agencies around the world. Soon after, new marketplaces using I2P and new currencies sprung up. Read more on Deep Web shutdowns.

This research paper covers the cybercriminal underground market in Brazil, including the unique tools and training services created by Brazilians to attack targets that are based in the country.

Trend Micro's first look into the cybercriminal underground covers the different activities and services found in the Russian underground—the pioneer underground scene—in 2012.

This Trend Micro research looks into the emergence of the “mobile underground” in China as a result of the market's shift to mobile platforms, including mobile underground products and services.

This research paper reviews messages related to activities, along with trends observed and product and service price updates seen in the Chinese underground market throughout 2013.

Different cybercriminal underground markets offer a distinct list of tools and services. Here's a list of known products and services that are available in the Chinese, Russian, and Brazilian underground.