Let me introduce you to the door.
You're very light I've heard of the term before.
I don't know.
Also is a dot where is a general term for any encrypted overlay network that you can only access with
specific types of software or authorization or protocols or ports.
The term dark is used because it is dark or not visible to those that don't have those special tools
software and access the conventional Internet like Facebook or Amazon Google would be called the clarinet
or surf web is a reciprocal term.
Mostly you can consider the Dot Net much the same as the surface web.
The main difference being you need to use special encryption to access it which is what keeps it dark
generally don't mix cannot be searched with tools like Google.
Any dot net that is public accessible such as Tor could be indexed for searching and projects all the
way to do this.
The dot net is used by governments military companies and anyone really who needs privacy plus criminals
as they obviously value their privacy.
It's generally a tool to maintain anonymity and is in some sense to maintain security.
Example Doenitz include Retros share which is a file sharing peer to peer or friend to friend network.
You have other networks like Tor which is very common and very popular.
You have to be anonymous which is becoming more popular.
You have the Ganu net framework and the Free-Net project all meaning special software to access which
is available on their corresponding sites the interfaces to these.
You can see here on the screen these services should not be considered a panacea for anybody interested
in privacy though.
In Cambodia anonymised through the darkness you can access dark markets and hack forms the cell every
sort of good and service from assassination to drugs and of interest it was things like malware or no
access to rats hacking tools exploit kids.
And so I'm here in front of you you can see some examples of markets at the moment that are around dream
market Wall Street Market torture etc. and the you are l here that you can see ending in onion is the
address to reach that site which is a special address you can only access via the Tor network using
the Tor browser which you can see here.
We have a whole section on using Tor.
Later on in the course too.
So don't worry about that for now but let's have a look around Tor see what we can find in terms of
hacking tools and exploit kit.
Here we are in the hidden wiki showing some of the hacker sites.
This is the zero day forum.
You can see here selling credit card details personal information secure hosting to host malware exploits.
That's the Sphinx banking trojan that would be packed into another program you might download the Trojans
designed specifically to target bank account details.
It will target specific banks as well.
That is found to have some sort of useful way to harvest access the user account details
here PayPal accounts for sale that will have been stolen from hacked machines software to help with
codding.
Corning is another term for stealing GUIL using credit card details how to transfer money anonymously
hacking tools exploits
here this is the black hole exploit kit easy stage fright exploit where you can send picture messages
to an Android phone to take over.
Still millions of phones are vulnerable.
Let's give you an example of how these export kits and hacking tools might work in the real world.
So back to our entrepreneur hacker he's bought himself an exploit kit from one of these sites or perhaps
he's managed to acquire one free somewhere.
He has also bought services from a hacker that has given him access to a hacked site so he can now upload
his exploit code onto that Web site.
You or I or someone else unknowingly visit this Web site.
If you are up to date with your patches and you have the good security controls then the exploit won't
work.
Which is a lot of what we're going to go through in this course on how to stop those sorts of things
happening.
If you are on patched or you have poor security or in the worst case scenario has a zero day exploit
then you could be compromised again with correct security practice.
You can still be protected against that if you don't have solid security the export is very light.
Access to your machine.
From there he installs a rat to control what the machine does for him.
This you can see here is the admin interface for a rack called Snake wrap.
So as you know looking for files on the victim machine looking at the desktop can access the webcam
can steal or harvest passwords bank account details personal information etc..
You can see other types of goods and services that are available in the Dark Market everything from
initial access tool so they exploit kids that we've talked about zero day vulnerabilities payload parts
and features.
These are hackers crackers binder's obfuscate is these tools used to create malware that the anti-virus
cannot pick up.
And you've got all sorts of things bottlenecks for sale hackers for hire deed of services etc etc..
And here's another interesting list.
This shows the cost for exploit kids over the years and how the costs of evolved.
Here are some of the prices for zero day vulnerabilities.
Remember those are the vulnerabilities that don't have any patches and that maybe nobody even knows
about.
These are extremely deadly and the cost of the shows you how much people must get from them if they're
willing to pay this march there is even a gray market of countries and governments and companies buying
these for all sorts of nefarious reasons and you can see because they are buying go downloading breed
these tools.
They don't have to develop them themselves.
So the barrier to entry to become a cyber criminal is low.
The average intruder knowledge is now low i.e. they are script kiddies with little skills is the now
high level of attacks fisty cation given they have access to such powerful tools
only a small percentage are elite.
Researchers exploit developers zero day researches malware writers etc..
The majority of buyers aren't sophisticated and less skilled So this means you have a lot of people
with highly sophisticated tools and the numbers are only exponentially growing.