Other Illicit Networks

Dark web marketplaces, also called crypto-markets, are storefronts where threat actors list goods and services for sale, ranging from stolen credentials and malware to fraud tools and counterfeit documents. Transactions are typically settled in cryptocurrency, primarily Bitcoin and Monero. This sub-category surfaces activity relevant to your organization when your data or assets appear in listings.

Learn more about MarketsLearn more about Markets

Account shops are a specialized type of underground marketplace focused exclusively on the sale of compromised accounts to specific services and websites. They provide a direct signal that credentials associated with your organization or your users are being actively monetized in the criminal ecosystem.

Learn more about Account ShopsLearn more about Account Shops

This sub-category aggregates identity pages from dark web markets and forums, including actor aliases, registration details, activity history, reputation scores, and contact handles such as Telegram or Tox usernames. It supports threat actor tracking and persona correlation across platforms.

Learn more about ProfilesLearn more about Profiles

Illicit blogs are content-publishing platforms within the criminal ecosystem where actors publish articles, technical guides, and cybercrime commentary. Some operate as solo publications while others function as open platforms with multiple contributors. This sub-category can surface leaked internal documentation, adversary tooling guides, or proprietary materials shared without authorization.

Learn more about Blog PostsLearn more about Blog Posts

Criminal autoshops are automated storefronts where stolen payment card data is bought and sold via cryptocurrency with instant delivery. This sub-category surfaces cards issued by or associated with your organization that are actively being trafficked, enabling proactive fraud mitigation before financial damage occurs.

Learn more about Financial DataLearn more about Financial Data