Cybercriminals revived Darkode forum

We recently wrote about the closure by law enforcement agencies of a famous underground forum of cybercriminals called Darkode. In addition to the closure of the forum itself, many of its users, who are well-known cybercriminals, were arrested. Many, but not all, since one of the Darkode administrators under the name “Sp3cial1st” avoided being arrested and restarted the forum at the new address.



According to MalwareTech, a well-known malware / cybercrime for the new reincarnation of the forum, security measures have been significantly enhanced: access to the forum for users is possible via Tor, and authentication is implemented using the special Blockchain API.


Fig. Start page of the new Darkode
')
The following Darkode users have been arrested.

• h0tsh0t
• Mafi AKA Crim AKA Synthet! C (one of the Darkode administrators)
• Parabola (one of the Darkode admins)
• Nocen
• Phastman
• semaph0re
• m3t4lh34d
• rzor
• k@exploit.im
• Android (by the famous Android Trojan - Dendroid)
• Split
• WesTThug

The original closure story of Darkode received an unexpected continuation when it turned out that one of the arrested participants of Darkode, the author of the Trojan Dendroid, worked for the famous American security company FireEye.

Cybercriminals use Darkode to trade in malware, botnets, as well as to sell and buy other cyber-attack services there. It is also used to buy and sell confidential information stolen from users, such as credit card numbers.