Dark Peep #13: Money Laundering 1M1

Welcome to Dark Peep #13: Money Laundering 1M1, where the cyber landscape mirrors the shifting sands of the dark web, guided by the astute observations of SOCRadar researchers. This edition delves into the enigmatic blackout of BreachForums, exploring the intricate web of events surrounding its suspension. We also delve into the bold challenge issued by the Deanon Club, inviting adventurers to navigate the complexities of money laundering in the digital age.

The visual representation of SOCRadar acts as a guiding compass, simplifying the treacherous journey through the deserts of the dark web. Generated by OpenAI’s DALL-E

Additionally, we navigate the bustling marketplace of cyber exploits, where deals are struck and fortunes made or lost in the blink of an eye. Here, SOCRadar’s expertise illuminates the path, helping readers navigate the treacherous terrain of online threats with confidence.

So clutch your canteen and fortify your digital fortress because Dark Peep #13 is about to take you on a journey through the cyber sands, where every click is a twist in the plot. Welcome to the spectacle.

When the Lights Went Out for BreachForums

Baphomet, the administrator of BreachForums, announces the suspension of the domain

On April 15, the clear web space of the popular hacker forum BreachForums was suspended. The threat group R00Tk1T took advantage of the situation to diss BreachForums administrator Baphomet. R00Tk1T alleged that the outage was the result of a coordinated effort between themselves and a pro-Russian cyber threat group to launch an attack on BreachForums. Baphomet, however, dismissed the incident as a mere outage, scoffing at the notion of a hack.

R00TK1T claims to have conducted a cyber attack on BreachForums (Daily Dark Web)

Adding fuel to the fire, Baphomet revealed that R00Tk1T had issued threats just two days prior to the blackout, promptly deleting the incriminating messages thereafter. According to Baphomet, R00Tk1T’s motive stemmed from being labeled as scammers within Telegram chatrooms.

BreachForums administrator replies

Permanently Closed

R00TK1T’s announcement

Say goodbye to the R00TK1T threat group! Known far and wide for claiming about sneaking into the systems of various Malaysian outfits and several big-name companies, they’ve suddenly called it quits. But why? They left us all hanging without a clear reason. Recently, they’d become the butt of jokes on social media, accused of spinning tall tales. In a dramatic final act, they claimed to have spilled the beans by leaking BreachForums members’ credentials—only to vanish completely, wiping all their messages off the map. Poof! Just like that, they’re gone.

Threat group warns against copycats

They’re now on a mission to expose impostors who dare to use their name.

NOT ACCEPTING ANY NEW MEMBERS

SiegedSec announces new group

SiegedSec threat group just threw a curveball on Telegram! They’ve opened a new support squad for their fan club—minus the secret sauce talks of the core group. They need tech-savvy sleuths and sharp-eyed editors, but here’s the kicker: “NOT ACCEPTING ANY NEW MEMBERS.

Money Laundering 101

Threat actor’s statement

The threat group Deanon Club, which took over KillNet, has just launched a quirky contest on Telegram. They’re offering 10,000,000 Russian Rubles (The exchange rate at the time of this writing is 107,400 dollars.) for the best article on laundering $100 million. The details need to be thorough, original, and cover 5-20 pages. The catch? You needed to submit it by April Fool’s Day 2024. It seems they’re not just dabbling in danger, but also in irony—entrants must subscribe to their channel to participate. It’s a mix of serious stakes and a bit of dark humor.

Windows LPE Exploit for $150,000

A hacker forum lit up with a claim of selling a zero-day, Windows Local Privilege Escalation (LPE) exploit for $150,000. Comments ranged from impressed to strategic advice. One notorious threat actor exclaimed, “VOUCH +WOW WHAT A EXPLOIT,” while another suggested, “bro your selling this on the wrong forum.” After some banter, the seller dropped the price from $220,000 to $150,000.

Threat Actor Dares Global Law Enforcement in Interview

In a recent interview with the notorious threat actor USDoD by Daily Dark Web, one of the responses caught particular attention.

Q: We’ve noticed significant shifts in cybercrime due to recent law enforcement successes. Do you believe that attention from your cyber criminal activities poses a similar risk for you? 

• “No. I don’t think so and I wish to all federal agencies and military personnel around the globe a good luck to find me”.

In his brazen reply, the actor seems to be daringly throwing down the gauntlet! By wishing all federal agencies and military personnel “good luck” in finding him, he not only dismisses the threat they pose but also cheekily tips his hat to them, almost as if he’s reporting himself in a playful yet defiant manner.

Embarking on a Cyber Desert Safari with SOCRadar

In the vast and unforgiving expanse of the digital desert, where the winds of change blow ceaselessly and dangers lurk beneath every virtual dune, organizations seek a steadfast guide to navigate the shifting sands of cyber threats. Enter SOCRadar, the vigilant guardian of Dark Peep #13. Like a seasoned desert nomad, SOCRadar’s Dark & Deep Web Monitoring solution leads organizations through the labyrinthine depths of cyberspace, detecting and neutralizing threats with the precision of a skilled tracker.

SOCRadar Dark Web News