Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Comments
Where Cybercriminals Go To Buy Your Stolen Data
Oldest First  |  Newest First  |  Threaded View
RetiredUser
RetiredUser,
User Rank: Ninja
12/4/2016 | 11:30:34 PM
Offensive Security by the Private Citizen
I'm curious after reading this about whether a private citizen can do anything at all to investigate potential stolen data and illegal activities associated with their finances or business.  In the past I'd had the opportunity to build a honeypot which I was excited about since I always wanted to test out some ideas, build a custom Tor, etc.  But then I got lots of feedback from techs that know about these things to not even touch the project.  Once you attach yourself to something that can be used for illegal activities you risk being implicated, especially due to (as noted in the article) the possibility of law enforcement monitoring various networks, websites and file access points.  I'm surprised, in fact, this article doesn't unequivocally state private citizens not associated with law enforcement should not even consider researching these places.  What's the real rule of thumb in this case?
.osiris
.osiris,
User Rank: Strategist
12/6/2016 | 1:27:29 AM
Re: Where Cybercriminals Go To Buy Your Stolen Data
You can also add Armada board. A feaw years ago Crutop forum was very popular amonth the underground webmasters, until theor owner RedEye got prisoned.
lorraine89
lorraine89,
User Rank: Ninja
12/7/2016 | 8:05:06 AM
Identity theft
Well this just goes on to show how much of our data be it stored in our systems or browsing online is vulnerable and susceptible to being hacked or mistreated by malicious hands. Therefore it is always important to secure online footprints and privacy and what best way to do that than deploying secure vpn server like PureVPN which provides online encrypted connections. They have some deals going from what I read on my last visit to their website

www.purevpn.com/order
rayray2016
rayray2016,
User Rank: Apprentice
12/13/2016 | 12:55:28 PM
Twenty Motion
Awesome articles
amirshk
amirshk,
User Rank: Author
12/16/2016 | 10:44:39 AM
Very interesting
Very interesting review of the marketplace
sasa23
sasa23,
User Rank: Apprentice
10/10/2017 | 9:46:04 PM
Re: Offensive Security by the Private Citizen
its so interesting, thanks


Edge-DRsplash-10-edge-articles
I Smell a RAT! New Cybersecurity Threats for the Crypto Industry
David Trepp, Partner, IT Assurance with accounting and advisory firm BPM LLP,  7/9/2021
News
Attacks on Kaseya Servers Led to Ransomware in Less Than 2 Hours
Robert Lemos, Contributing Writer,  7/7/2021
Commentary
It's in the Game (but It Shouldn't Be)
Tal Memran, Cybersecurity Expert, CYE,  7/9/2021
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
Creating an Effective Incident Response Plan
Security teams are realizing their organizations will experience a cyber incident at some point. An effective incident response plan that takes into account their specific requirements and has been tested is critical. This issue of Tech Insights also includes: -a look at the newly signed cyber-incident law, -how organizations can apply behavioral psychology to incident response, -and an overview of the Open Cybersecurity Schema Framework.
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2022-40204
PUBLISHED: 2022-12-01
A cross-site scripting (XSS) vulnerability exists in all current versions of Digital Alert Systems DASDEC software via the Host Header in undisclosed pages after login.
CVE-2022-46162
PUBLISHED: 2022-11-30
discourse-bbcode is the official BBCode plugin for Discourse. Prior to commit 91478f5, CSS injection can occur when rendering content generated with the discourse-bccode plugin. This vulnerability only affects sites which have the discourse-bbcode plugin installed and enabled. This issue is patched ...
CVE-2019-18265
PUBLISHED: 2022-11-30
Digital Alert Systems’ DASDEC software prior to version 4.1 contains a cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web script or HTML via the SSH username, username field of the login page, or via the HTTP host header. The injected con...
CVE-2022-46156
PUBLISHED: 2022-11-30
The Synthetic Monitoring Agent for Grafana's Synthetic Monitoring application provides probe functionality and executes network checks for monitoring remote targets. Users running the Synthetic Monitoring agent prior to version 0.12.0 in their local network are impacted. The authentication token use...
CVE-2022-23746
PUBLISHED: 2022-11-30
The IPsec VPN blade has a dedicated portal for downloading and connecting through SSL Network Extender (SNX). If the portal is configured for username/password authentication, it is vulnerable to a brute-force attack on usernames and passwords.