Researchers Harvest, Analyze 100K Cybercrime Forum Credentials
Researchers found that many Dark Web forums have stronger password rules than most government and military entities.
![Concept art cybercrime Concept art cybercrime](https://eu-images.contentstack.com/v3/assets/blt6d90778a997de1cd/blt186e9e1817555094/64f17db0aee48c634dc6898d/cybercrime_James_Thew_Alamy.jpg?width=1280&auto=webp&quality=95&format=jpg&disable=upscale)
Cybersecurity researchers running a sprawling information-stealer campaign collected credentials, autofill data, and system information that tied back to about 100,000 users with memberships to well-known cybercrime forums.
Besides gathering identity, location, and IP address data associated with various cybercrime forum members, the Hudson Rock research team also scraped passwords that had been saved as part of the autofill feature.
Hudson Rock has a tool that measures the strength of breached passwords and found cybercrime forums broadly maintain better password protection than many critical infrastructure networks. An analysis found the Dark Web forum with the strongest overall user passwords was Breached.to, while the weakest passwords were found on Russian-language forum Rf-cheats.ru.
"Overall, passwords from cybercrime forums are stronger than passwords used for Government websites," the report said, "and exhibit fewer 'very weak' passwords than industries like the military."
About the Author
You May Also Like
Catch the Threat Before it Catches you: Proactive Ransomware Defense
September 5, 2024How to Evaluate Hybrid-Cloud Network Policies and Enhance Security
September 18, 2024DORA and PCI DSS 4.0: Scale Your Mainframe Security Strategy Among Evolving Regulations
September 26, 2024Harnessing the Power of Automation to Boost Enterprise Cybersecurity
October 3, 2024
[Virtual Event] The Essential Guide to Cloud Management
October 17, 2024Black Hat Europe - December 9-12 - Learn More
December 10, 2024SecTor - Canada's IT Security Conference Oct 22-24 - Learn More
October 22, 2024