Fall of AlphaBay raises 'a different balance of power' on the dark web

It's possible that AlphaBay's fall will result in a some measure of fracturing of the dark web marketplace community to different places.

For criminal entrepreneurs, the fall of the dark web’s most profitable black market raises questions about which service will be the next illegal marketplace titan or the next to see a glorious fall at the hands of international law enforcement.

After three years of hosting a multimillion-dollar illegal business, AlphaBay ceased to exist earlier this month in the face of an international law enforcement operation.  Alexandre Cazes, a Canadian citizen who allegedly was one of the site’s operators, was found hanged in his Thailand prison cell Wednesday as extradition to the United States was being prepared. This comes just a few months after Ross Ulbricht, who was convicted and sentenced to life for running the dark web marketplace Silk Road, lost his appeal in a New York courtroom.

AlphaBay sold a wide range of illicit goods including drugs, stolen data and hacking tools. At one point, AlphaBay operated as the criminal answer to Amazon.com’s hugely successful hold on the legal retail business. With the absence of the hegemon that was AlphaBay, vendors and customers will now search for new markets to sell their wares.

Three particular dark web markets have emerged as early front-runners: Hansa, Dream and Valhalla. Due to AlphaBay’s demise, Hansa had seen so many “refugees” that it temporarily had to close new registrations.

Each community is somewhat insular and has its own requirements, so it’s possible that AlphaBay’s fall will result in a some measure of fracturing of the dark web marketplace community to different places.

“AlphaBay was significantly larger than the other markets and significantly more diverse,” Emily Wilson, a researcher with security firm Terbium, told CyberScoop. “It really was the catch-all.”

Observers are now watching to see what the fraudsters and hackers that called AlphaBay home will do next.

Hansa, Dream and Valhalla have historically been focused on peddling drugs, while AlphaBay had thriving verticals focused on fraud and hacked data.

“I’m really curious to see what happens to the vendors who weren’t drug-focused,” Wilson said. “Are we going to see a different market spin out? Are we going to see certain vendors move to more independent fraud sites? Are we going to see them consolidate across other markets?”

Wilson expects to see “a different balance of power absent the hegemon” as no one single market is likely to step up and take AlphaBay’s place.

“I’m really curious to see how the community reacts,” Wilson said. Like Silk Road before it, AlphaBay seemed almost immune from trouble. “The fact that they’re being targeted now, you have to figure the other markets are wondering what’s going to happen next.”

Government

• FBI officials say AI is bolstering adversaries, emphasizing need to focus on cyber basics, patching

• Feds accuse China of ‘systematic’ distillation of U.S. AI models

• CIA’s Michael Ellis says cyber intelligence is changing how the agency operates

• Jail time for Maine child in 764 marks turning point in federal law enforcement

Technology

• FCC proposes public scorecard to rate telecoms on anti-robocall efforts

• Pegasus, NoviSpy variant spyware found on devices of Serbian activists

• Wyden seeks upgraded NSA security guidance on commercial VPN use

• The Collective Cyber Defense letter wrote your next vendor questionnaire

Threats

• Chinese espionage groups swarm to exploit triple-link chain of zero-days

• Microsoft discloses two actively exploited zero-days among 974 vulnerabilities

• Russian national extradited to US for alleged involvement in bank-account takeover scheme

• Attackers exploit zero-days in consistently besieged SonicWall product

Policy

• Whistleblower says USPS deploying new, ‘untested’ IT systems governing mail-in ballots

• ‘Watershed 250’ test program in Texas looks to private sector for water cybersecurity help

• Former sexual abuse victims say Grok used their images, videos to train deepfake capabilities

• Cyber threats nudge Trump to sign executive order on foreign equipment in U.S. energy infrastructure