The dark web is a hidden segment of the Internet that remains invisible to conventional search engines and is characterized by anonymity. Illegal activities thrive in this hidden space, particularly in numerous forums that serve as dynamic markets for cybercriminals. These platforms are not only a place to exchange information, but also centers of trade in stolen data, hacking tools, and other illegal goods. Below, we will take a look at some of the most famous forums on the dark web, and you can find a full list of Dark Web forums and their analysis on the deepweb blog.
BreachForums: Revival of the largest cybercriminal organization
BreachForums emerged as the successor to RaidForums, a formerly influential darknet forum that was shut down by law enforcement. It was founded by a hacker under the name Pompompurin, and after its predecessor was shut down, BreachForums quickly became a key center for cybercriminals. Despite Pompompurin’s arrest in March 2023, the forum was relaunched under the leadership of the ShinyHunters group, known for its large-scale data breaches, including attacks on Microsoft-owned GitHub and Tokopedia.
BreachForums stands out for its huge database, which contains more than 15 billion records from nearly 1,000 different leaks. This database, as well as active sections dedicated to discussing data breaches, hijacker logs, and hacking tools, make the forum popular among attackers. Additionally, the platform has a complex rank system (VIP, MVP, GOD) and an internal currency that allows for secure transactions through an escrow service. The presence of well-known cybercriminals such as CyberNiggers and USDoD only emphasizes the important role of BreachForums in the world of cybercrime.
XSS: the center of Russian cybercrime
XSS, one of the oldest forums in Russian-speaking cyberspace, founded in 2013, has become a significant platform for cybercriminals over time. Originally named after the Cross-Site Scripting (XSS) vulnerability, the forum changed its name in 2018 after the arrest of one of its administrators. XSS is a key meeting place for Russian cybercriminals to discuss and exchange malware, security vulnerabilities, and credentials for unauthorized access.
The special role of XSS lies in its importance for the ransomware ecosystem. Some of the most notorious ransomware groups are active on the forum, such as LockBit, REvil, and DarkSide, the latter of which was responsible for the famous Colonial Pipeline attack. These groups use XSS not only to trade their services, but also to conduct public relations, attract new members, and promote their activities, which helps to strengthen their reputation. The resilience and influence of XSS is partly ensured by a high level of operational security, which allows the forum to avoid the attention of law enforcement agencies and maintain its status as an important element of the Russian cybercrime community.
LeakBase: a newly created safe haven for cybercriminals
LeakBase is one of the newest forums on the dark web, having launched in January 2023. Despite its young age, this forum quickly gained popularity, especially after the closure of BreachForums in March 2023. LeakBase’s growth was rapid, and within a few months it had almost 50,000 members. The forum is targeted at an English-speaking audience and is structured into different categories, such as data breaches, ransomware logs, and malware, each of which is in high demand.
One of the interesting features of LeakBase is the ban on the dissemination of information related to Russia. This may be a strategic move to avoid conflicts with Russian cybercriminals or law enforcement agencies. The forum’s rating and scoring system, which resembles the structure of BreachForums, creates an additional level of organization that attracts new members. LeakBase’s rapid growth reflects the dynamics of the dark web, where new platforms quickly fill the vacuum left by others.
Afterword: The evolution of dark online communities
The dark web is a dynamic space where new forums are rapidly emerging and old ones are gradually disappearing. This report examines some of the most significant players in this hidden world, each playing an important role in the global cybercrime ecosystem. From huge BreachForums databases to professional networks and multilingual communities, these forums are important tools for cybercriminals around the world.
As cybersecurity becomes more sophisticated, monitoring such forums is becoming increasingly important. You can start exploring these forums on your own, and we have compiled a list of onion links to them and instructions on how to access them. It is important to understand the unique features and dynamics of each forum in order to develop effective strategies to counter the threats they pose. In today’s digital era, when cybercrime is constantly evolving, knowledge of the most influential dark web forums is not only important, but necessary.
