X

'Darkode' goes dark: Police shut down infamous cybercrime marketplace

The forum was used by cybercriminals to buy and sell malicious software, stolen data and more. It was, says an official, the "most sophisticated English-speaking forum for criminal computer hackers in the world."

Edward Moyer Senior Editor
Edward Moyer is a senior editor at CNET and a many-year veteran of the writing and editing world. He enjoys taking sentences apart and putting them back together. He also likes making them from scratch. ¶ For nearly a quarter of a century, he's edited and written stories about various aspects of the technology world, from the US National Security Agency's controversial spying techniques to historic NASA space missions to 3D-printed works of fine art. Before that, he wrote about movies, musicians, artists and subcultures.
Credentials
  • Ed was a member of the CNET crew that won a National Magazine Award from the American Society of Magazine Editors for general excellence online. He's also edited pieces that've nabbed prizes from the Society of Professional Journalists and others.
Edward Moyer
3 min read

The former home page for the notorious "Darkode" marketplace for criminals displays a message that it's been shut down by the authorities.
Enlarge Image
The former home page for the notorious "Darkode" marketplace for criminals displays a message that it's been shut down by the authorities.
The former home page for the notorious "Darkode" marketplace for criminals displays a message that the forum has been shut down by the authorities. (Click to enlarge.) Federal Bureau of Investigation

The FBI and the US Department of Justice have helped break up a massive and notorious one-stop shop for cybercriminals, an online marketplace where hackers and others worldwide could buy and sell malicious software, stolen credit card data, lifted passwords and more.

The bureau and the DOJ said Wednesday that "Operation Shrouded Horizon," a joint effort between law enforcement agencies in nearly 20 countries, had led to the seizure and shut down of the "Darkode" online forum's domain and servers. Seventy people involved in the forum, including its alleged administrator, have been indicted, with 12 of those indictments being handed down in the US, said the FBI and other officials.

"This is a milestone in our efforts to shut down criminals' ability to buy, sell and trade malware, botnets and personally identifiable information used to steal from US citizens and individuals around the world," FBI Deputy Director Mark F. Giuliano said in a statement.

And US Attorney David Hickton added that "We have dismantled a cyber-hornets' nest of criminal hackers, which was believed by many, including the hackers themselves, to be impenetrable."

Online since at least 2008 and, according to Hickton, the "most sophisticated English-speaking forum for criminal computer hackers in the world," Darkode was invitation-only and password protected, with potential members being carefully vetted. But the FBI said that during a two-year undercover operation, its officers were able to infiltrate the forum "at the highest levels."

"Once in the forum, members -- in addition to buying and selling criminal cyberproducts and services -- used it to exchange ideas, knowledge and advice on any number of cyberrelated fraud schemes and other illegal activities," the FBI said in its own statement. "It was almost like a think tank for cybercriminals."

Awareness of the Internet's shadowy side has skyrocketed over the last couple of years. Perhaps most prominently, the arrest and conviction of Silk Road creator Ross Ulbricht threw a spotlight on the "Dark Web," where criminals engage in all manner of clandestine activity, exploiting tools designed to let Net users remain anonymous. Silk Road itself was a huge online marketplace for illegal drugs.

The hacking of numerous businesses and other organizations has also raised awareness and concern. The breaching by hackers of computer systems run by Home Depot, health insurer Anthem and financial services company JP Morgan, have suggested the vulnerability of financial systems and also, by extension, critical infrastructure. The CIA, in fact, recently put the online realm at the core of its mission.

The FBI characterized the effort to take down Darkode as "the largest-ever coordinated law enforcement effort directed at an online cybercriminal forum." Among those indicted, according to the DOJ, is Sweden's Johan Anders Gudmunds, the forum's alleged administrator, who's also accused of infecting more than 50,000 computers with malicious software and stealing data from those machines about 200 million times. Another person charged in the case allegedly developed and offered to sell software that could control, and steal data from, smartphones running Google's Android mobile operating system. And another person allegedly helped in an effort to infect Facebook users' computers and use them to send spam.