Full transcript
0:01Washington DC , 2017 . Today the
0:07Department of Justice announces the
0:09takedown of the dark web marketplace
0:11AlphaBay . Bangkok , Thailand . The
0:24offender was a tech expert , a top-tier
0:26cybercriminal . He had two adjoining
0:33houses and then bought another . All his
0:35cars were luxury vehicles , but we
0:37couldn't figure out how he made a
0:39living . The website brought in nearly
0:43500 million dollars a year , between 300
0:46and 500 million dollars annually . The
1:13Dark Web . The rise of the black market .
1:25Singapore . My name is Paul Craig . I am
1:39the head of hacking at Vantage Point
1:40Security . Paul Craig , ethical hacker .
1:43Imagine you have many illegal things to
1:46sell ; you can't put them up for sale on
1:48Carousel . The dark web really satisfies
1:51that need . It has become a marketplace
1:54where people can sell illicit goods .
2:01Dark web marketplaces are the illegal
2:03markets of the internet . Here we can
2:07buy a diploma from almost any school
2:09for 0.1 Bitcoin , for about $ 1,000 .
2:13Another offer , a UK passport in any
2:15name for 1,000 British pounds . Driver's
2:19license . Identity document . Big sales .
2:23Do you want a Norwegian driver's
2:25license or a Lithuanian ID ? What are we
2:31looking for ? 1g of Colombian cocaine ,
2:3575 % pure , uncut , $ 40 . On the first page
2:40. But there are also more dangerous
2:45things available , that is , AK - 47
2:47weapons , $ 1,000 . This market seems
2:56quite well-designed , it looks quite
2:59modern , it seems legitimate , but all of
3:01this is illegal . In 2014 , the most
3:14infamous dark web marketplace , AlphaBay
3:16, was launched . It had over 250,000
3:21listings and at least 200,000 users
3:23worldwide . Daily transactions on
3:27AlphaBay averaged $ 800,000 . It was the
3:31highest figure ever seen on the Dark
3:34Web . It's like eBay without auctions ,
3:46or Amazon Marketplace . Essentially the
3:49same thing . Nicholas Christin , dark web
3:54expert , Carnegie Mellon University .
3:57There is only one difference : the site
3:58is anonymous . People are not afraid to
4:01sell illicit products . AlphaBay looked
4:06a lot like a simple e-commerce site ,
4:08very simple ; it only had categories and
4:10product lists and prices . By clicking
4:16on the product link , you could see a
4:18photo and a brief description .
4:21Top-rated , excellent reviews , very
4:24strong , lab-tested . Many people left
4:29comments about how they secretly
4:30shipped their items in a CD case , a
4:32vase , or something like that . Most of
4:53AlphaBay's listings were related to
4:55narcotics or drugs . There were hundreds
4:59of pages of ads in different categories
5:01, many photos of narcotics , weapons ,
5:05and generally illegal things . It is
5:10believed that AlphaBay sellers
5:11primarily came from the Netherlands ,
5:13Great Britain , Australia , Germany ,
5:15China , and the United States . Markets
5:19like AlphaBay internationalize the
5:20local drug dealer . The global drug
5:23market is enormous . We are talking
5:25about trillions of dollars , but your
5:26local dealer doesn't make much money .
5:29The income is quite small because it
5:31requires face-to-face interactions .
5:34Also , there are tons of risks
5:35associated with dealing drugs on the
5:37street . So we are talking about fairly
5:45small operations , but by doing it
5:47online , you take the Amazon e-commerce
5:50model and use it for illicit products .
5:55Of course , it provides more potential
5:56customers in a much larger network . You
5:59aren't just selling to your 10 or 15
6:01regular customers , but to tens or
6:02hundreds of thousands of them worldwide
6:04. The content of these sites is
6:14basically : here are my illegal products
6:16for sale . In 2014 , the total amount of
6:24all dark web market transactions was
6:26estimated at 600,000 . AlphaBay reached
6:31this level of daily sales in just one
6:33year . It soon became the largest dark
6:38web market in history . Technology will
6:45not only facilitate the growth of
6:47legitimate businesses , but will also
6:49allow criminals to generate a better
6:51return on investment . Dr. Magda Shelly ,
6:56cybersecurity expert . It is undoubtedly
7:02a greater threat to communities in
7:04general , and that is why it was a
7:05priority for the police to stop it .
7:14Washington , DC , 2017 . Good morning .
7:29Today , the most prolific drug suppliers
7:31use the so-called dark web , a
7:34collection of hidden websites that can
7:37only be accessed if identity and
7:39location are masked . In 2017 , Operation
7:45Bayonet was formed , a multinational
7:47police operation dedicated to shutting
7:49down AlphaBay . Participating countries :
7:53United States , Netherlands , Canada ,
7:55United Kingdom , France , Lithuania ,
7:57Spain , Hong Kong , Thailand , Cyprus in
8:00cooperation with Europol . During the
8:07AlphaBay investigation , it became quite
8:09clear that the person in charge of
8:11running the market used the alias
8:12Alpha02 . Members of Operation Bayonet
8:22began making undercover purchases on
8:24AlphaBay . When new users registered on
8:27the site , they received a welcome email
8:29from the market administrator . This
8:48email address led them to a Canadian ,
8:51Alexandre Cazes , born October 19 , 1991 ,
8:54a computer genius with an IQ of 142 .
8:59Operation Bayonet traced the dark
9:01market administrator's email to
9:02Alexandre Cazes . According to Cazes '
9:06LinkedIn profile , he founded an IT
9:08company , EBX Technologies , at just 17
9:10years old . His profile listed numerous
9:13IT skills . Pittsburgh , Pennsylvania .
9:24Alexander Cazes started his internet
9:26career selling illicitly obtained
9:28credentials . This came from a hacker
9:33mindset , and he built his marketplace
9:35based on that . He is someone with
9:38technological inclinations . He liked
9:41managing websites and e-commerce
9:42platforms , and he had a successful
9:44business . It is human nature . You have
9:52a successful business . That is
9:53something you want to do . You ignore
9:55what is happening in your business or
9:57you don't really realize what you are
9:58doing . Some create these markets for
10:08ideological reasons . They don't want
10:11governments telling people what
10:12substances they can or cannot take , and
10:14they want an online platform to achieve
10:16that . But when the market starts
10:19working well , they discover there is
10:20money at stake . They enjoy operating
10:24those markets , and that is what leads
10:26to their ruin . With sufficient evidence
10:48, Operation Bayonet was able to issue
10:50an arrest warrant for 16 criminal
10:52charges against Alexander Cazes ,
10:53including conspiracy to participate in
10:56a racketeer-influenced corrupt
10:57organization , narcotics trafficking
10:59conspiracy , conspiracy to commit
11:01identity theft , and access device fraud
11:03. Their investigation led them to Asia ,
11:06Cazes's refuge , where he was running
11:08AlphaBay ; local authorities were
11:09alerted . Bangkok , Thailand . When we
11:31heard about AlphaBay , we thought it was
11:33just a matter of shutting down a
11:34website . I didn't think it would be
11:38difficult at all . Chaiyapop Jasunha ,
11:40Police Major General , Narcotics
11:42Suppression Bureau . My American friend
11:46asked me , " Chapog , do you know Makro , a
11:48wholesale supermarket ? " I told him , "
11:50Yes , Makro is huge . " He said , " What if
11:53Makro sold illicit drugs and was 50
11:55times bigger ? Would you still think
11:57it’s big ? " Cybercrime caused global
12:00losses of 600 billion dollars . This
12:03translated into 13 million dollars in
12:05Thailand in 2018 . In the last year ,
12:08assets worth more than 12 million
12:10dollars were seized in cases related to
12:12cybercrime . Investigators could not
12:16believe what they discovered . They
12:18couldn't believe that this type of
12:20thing was happening in our world .
12:29Tirayut Ampol , Lieutenant Colonel and
12:32Inspector of the Narcotics Suppression
12:35Bureau : a criminal running a website
12:37worth billions of baht that facilitated
12:40thousands of crimes on a single
12:42platform . It is not something typical .
12:54We discovered that this page served
12:55more than 100,000 users . It is unusual
12:58to find so many traffickers gathered in
13:00the same place at the same time . I have
13:11spent 30 years fighting against illegal
13:13drug trafficking . But this operation
13:17was exceptional because it involved
13:18technology . He was believed to be
13:22residing in Thailand , so we began a
13:24search that lasted several months until
13:27we could prove he was in Thailand . In
13:422008 , when Alexandre Cazes was 17 , he
13:44participated in an online forum as
13:46Alpha 02 . At the end of his post , Alpha
13:5002 signed as Alexandre Cazes and even
13:52included his email , the same email that
13:55sent a welcome message to new users
13:57registered on the AlphaBay market . He
14:01used an old Hotmail account , so of
14:04course that would lead us to his
14:06history and further digital footprint .
14:09Dr. Magda Chelly , cybersecurity expert .
14:14He also used other secondary names on
14:16different dark web platforms , the same
14:18ones he used on the regular web . The
14:29point is that he dreamed of running
14:30AlphaBay almost a decade before his
14:34arrest . Some of those elements were
14:42used to link different online personas
14:44to each other and that is very
14:53important to remember .
14:55What is on the internet is there
14:56forever . If you use an identity
14:59somewhere one day , it is there and can
15:01be revealed at any time . Nothing you
15:04have put out there is ever completely
15:06deleted . We knew his name was Alexandre
15:16Cazes , he was Canadian and lived there
15:21with that passport number . Then we dug
15:25deeper and discovered he had a Thai
15:27wife . According to our investigation ,
15:34he didn't do much . We found that his
15:37work was related to computers . We
15:40checked his assets , they were many . He
15:56owned two adjacent houses and later
15:58bought another worth hundreds of
15:59millions of baht that was furnished . He
16:04also rented another property aside from
16:06the ones he owned . He had a Lamborghini
16:09Aventador , the most expensive model ,
16:11around 95,000 . He also owned a Porsche ,
16:16a Mini Cooper , and a BMW motorcycle .
16:20All of them were luxury vehicles .
16:31Alexandre Cazes could easily spend
16:33between 30 and 47,000 on a single meal .
16:44He was capable of spending money on
16:46anything . His life was truly luxurious .
17:02Cazes was not visible on social media ,
17:05but under the alias " Fish " he boasted
17:07about his idyllic life . The truth is
17:11that I knew the guy , not personally ,
17:15but from a Bangkok chat group where
17:17guys talk about parties , tips on how to
17:19live in Bangkok , travel , and girls . I
17:23chatted with him several times . He has
17:25become very rich in recent years . He
17:27went from a motorcycle to a Porsche
17:29Panamera and later to a Lamborghini
17:32Aventador , from an old house to a
17:34mansion . His explanation was early
17:47investments in Bitcoin . Dr. Tanan
17:57BorwornTakul , criminologist at Mahidol
18:00University . Showing off our
18:03achievements is part of human nature ,
18:05but that often puts us in the spotlight
18:07. After running AlphaBay for 2 years ,
18:15Cazes's net worth was estimated at 20
18:17million dollars . He owned many houses ,
18:21luxury cars , traveled a lot , but we
18:23couldn't figure out what he did , or how
18:26he did it . Cazes had his reasons for
18:35Thailand being his hideout . Many
18:39countries , even in Southeast Asia , have
18:41a law that allows the government to
18:43collect internet data for national
18:45security reasons . Prinja Homaneek , a
18:52cybersecurity expert , calls it lawful
18:55interception . Lawful interception , an
18:59act that grants security forces access
19:01to private communications such as calls
19:03and emails . Many well-developed
19:06countries in Europe apply it , Singapore
19:09does too , but not Thailand . Many
19:13hackers around the world are aware that
19:15Thai law does not allow the government
19:17to snoop or collect internet data . For
19:20them , it is a paradise .
19:33In 2014 , the Sony Pictures
19:35Entertainment database was hacked by a
19:37group called Guardians of Peace .
19:41Personal staff data , email
19:42conversations , and unreleased movies
19:45were leaked on the internet . The hack
19:48was traced back to Bangkok , Thailand .
19:50The Sony Pictures hack was a textbook
19:52case . The IP addresses that attacked
19:54Sony Pictures came from Thailand . We
20:01discovered that we had been hacked by
20:03foreign computer hackers . All the IP
20:06addresses came from a university and a
20:08hotel in Bangkok . They compromised the
20:11server and used that server to hack
20:14Sony Pictures . There are more cases
20:21like this . We have had cases of hacking
20:25of other government systems in Asia ,
20:27Europe , and the United States . Foreign
20:33hackers come to Thailand , compromise ,
20:36and hack the server . We call it attack
20:40attribution . This is going to change
20:44soon . A new cybersecurity law has been
20:46enacted , in effect since March 2019 . It
20:50gives state agencies broad access to
20:53internet user data . Activists have
20:56dubbed it cyber martial law . Alexandre
21:12Cazes's LinkedIn profile lists his
21:14company , EBX Technologies . The company
21:26has been active since January 2015 .
21:29Shortly after the launch of AlphaBay ,
21:31authorities believed ABX Technologies
21:33was a cover for his illegal activity .
21:45It is the Breaking Bad syndrome . It is
21:47a very popular television series where
21:50you can see the protagonist's evolution
21:52from a nice , decent citizen into an
21:54absolutely horrible criminal . Nicolas
22:04Christin , dark web expert , Carnegie
22:06Mellon University . Even more than the
22:10money , they are excited to do this
22:11business and realize how powerful they
22:13are . And that product is not drugs . It
22:20is the thrill of running an illicit
22:22website . AlphaBay is an anonymous
22:29online marketplace that operates
22:30anonymously on the internet . Anonymous
22:39browsing works based on the following
22:41principle . Instead of visiting the
22:48website I want to visit directly , I'm
22:51going to talk to an intermediary , who
22:53will talk to an intermediary , and so on
22:55. This allows people to sell illegal
23:07products or services without fear of
23:08being caught or identified . Paul Craig ,
23:13ethical hacker . You could be anywhere
23:18in the world , and it would be a huge
23:20challenge to prove that you are the one
23:21selling something on the dark web . The
23:25dark web can only be accessed through
23:28anonymous browsers . The most widely
23:30used is The Onion Router , or Tor . The
23:36first link will be to download Tor . You
23:40can download Tor for free online . It is
23:43very simple to download and install ,
23:45and in a matter of seconds , you could
23:47be running the Tor browser on the
23:49common internet that people know : .com ,
23:52.net , .org . On the Tor network , we only
23:57see a string of random characters ,
23:59.onion . There isn't even a place to
24:02track the domain name . It's just a
24:05string of random characters . You can
24:07clearly tell that it's on the Tor
24:09network . Tor was initially a byproduct
24:23of the Office of Naval Research to
24:24provide a mechanism for intelligence
24:26agents and spies to communicate with
24:28the American government anonymously .
24:36Over time , the use cases have expanded .
24:42One example is journalists
24:43investigating a topic within a country
24:45that might be considered politically
24:46sensitive , who need to be able to do
24:48things that could be censored by their
24:50government . It is a way to use the
24:59internet with the utmost privacy .
25:01Privacy is a basic human right .
25:03Everyone should have private access to
25:05an open web where they can express
25:06themselves , share information , and
25:07learn without being tracked , watched ,
25:09or censored . No one should be subjected
25:11to arbitrary interference with their
25:13privacy , family , home , or
25:14correspondence . Everyone has the right
25:16to the protection of the law against
25:18such interference or attacks . The Tor
25:21network itself is not that harmful . You
25:26can share information that is
25:28unregulated , but there is no way to buy
25:30products or services directly through
25:32Tor . But when you add cryptocurrency ,
25:37which has the same level of anonymity
25:39and privacy , suddenly these two things
25:41work perfectly together . You can list
25:47products and receive money for them .
25:49All anonymous . Dark web marketplaces
25:56only accept one form of payment .
26:01Cryptocurrency . Bitcoin is the most
26:03widely used cryptocurrency . When I was
26:09working on the biggest project of my
26:11life in 2013 , I tried to figure out how
26:13to transmit this archive of materials
26:15to journalists , how they could view
26:16things in a secure way that isn't
26:18monitored . I wondered , do I need my own
26:26server infrastructure ? Maybe I do . So ,
26:30how can I pay for it anonymously ? Maybe
26:35someone like me has already used
26:36Bitcoin for something like that . This
26:45is equivalent to 0.4 bitcoins for a
26:47Dutch passport . That would be about
26:504,500 considering the current Bitcoin
26:53rate , which is about 10,000 per Bitcoin
26:55. If we accept all cryptocurrencies ,
27:00cryptocurrency is undoubtedly the
27:02payment option . That is my Bitcoin
27:12wallet . This is how I get the QR code .
27:15If someone wants to send me Bitcoin ,
27:17they just have to scan this code and
27:19then the Bitcoin will arrive in my
27:20account . Bitcoin can be used for many
27:23legitimate reasons . It is also the
27:25number one choice for people selling
27:27things on the dark web . There is no way
27:38to track it . There is no way to link a
27:40wallet , a cryptocurrency address to a
27:43person . Until now , a large part of
27:46crimes were discovered by following the
27:47money trail , which always leaves traces
27:49. Let's say it's an escrow account . The
27:59culprit knows , the bank knows , it's
28:01traceable , but in the case of Bitcoin ,
28:03only the culprit knows where the money
28:04is . Chayapoyasuna , Police Commander
28:07General , Narcotics Intelligence
28:08Division . The trade on the website was
28:12virtual commerce , not physical . Drug
28:14operations or data were in the cloud .
28:19You can send millions of dollars to
28:21another person on the other side of the
28:22world and receive goods without anyone
28:24seeing or knowing . The growth of
28:30cryptocurrencies is largely due to the
28:32development of the dark web and
28:34financial services on it . Almost 50 % of
28:41all Bitcoin transactions involve
28:43illegal activities on the Dark Web .
28:45AlphaBay was not the first marketplace
28:47on the Dark Web to gain infamy . In 2011
28:49, a dark web marketplace called Silk
28:51Road was created , the first to use both
28:54Tor and Bitcoin . People have been
28:59selling drugs and other illicit
29:01products on the internet since the 90s .
29:04What was different about Silk Road was
29:06that it tried to offer an anonymous
29:08end-to-end platform . It facilitated
29:17network anonymity through the use of
29:19Tor , so that an observer cannot know
29:21which machines are connecting to a
29:23server to make those transactions . In
29:30its heyday , Silk Road was the largest
29:32dark web marketplace in the world with
29:34up to 14,000 illicit product listings .
29:37It changed the face of dark web
29:39e-commerce and was a model for its
29:41successors . The FBI dismantled Silk
29:44Road after 2 years . Its American
29:48operator was sentenced to life in
29:50prison without parole . Could you think
30:02that the police have shown they are
30:04capable of stopping those people and
30:05that it would therefore be foolish to
30:06get into this business because you're
30:08going to get caught ? Quite the contrary
30:13. People were convinced that there was
30:18customer demand and that there was a
30:20viable business idea there . What best
30:28describes cybercrime is supply and
30:30demand . Dr. Tanan , criminologist at
30:36Midol University . The demand in the
30:41dark web market is enormous . AlphaBay
30:50launched in 2015 . In 2 years , it would
30:53be 10 times larger than Silk Road .
31:05First , we have to create an account . I
31:08see they use PGP authentication , so
31:10they focus quite a bit on privacy .
31:14Let's see if we can find another market
31:16. We need a username and password . I
31:20think AlphaBay was unique because it
31:21was very fast and easy to get into .
31:24That definitely contributed to its
31:26success . At first , it wasn't a big
31:34website ; it was very small . They sold
31:37mostly credit cards and other digital
31:39products . In 2015 , AlphaBay became
31:48known for selling stolen information
31:50from Uber and some conversations . Uber
31:55accounts sold on the Dark Web due to
31:57demand for stolen Uber accounts on the
31:59Dark Web . It is a great example of
32:03illegal products sold online , very
32:05cheap because there will be a lot of
32:07them . It sells from person to person
32:11for a few dollars , but there are a lot
32:13of accounts that were sold on AlphaBay .
32:17We are not just talking about Uber , but
32:19also Netflix or Hulu . People would buy
32:24it frequently because it wouldn't be
32:26considered as illegal , but rather
32:28something they want . But in a short
32:36time , drugs came to dominate the market
32:38. The first seller on AlphaBay was
32:44perhaps Alpha02 , who sold credit card
32:46numbers he had access to , and when the
32:48business grew , other sellers joined . No
32:52, he said no . When people started
32:54selling drugs , the AlphaBay operator
32:57charged between 2 % and 4 % commission on
32:59all transactions , which generated about
33:02$ 2,000 a day for him . Between 2015 and
33:062017 , the site earned the equivalent of
33:08over $ 1 billion in cryptocurrencies .
33:13It is very interesting to ask how many
33:15people are needed to run a dark web
33:16market . The answer is very few . Alpha02
33:21, moderators , security administrator ,
33:23public relations , scam watchers . Many
33:27of those who create these markets are
33:29not drug cartels or professional
33:30criminals ; they are people with a solid
33:33IT background , which is quite logical .
33:36In fact , managing a website is an IT
33:38job , but it is curious that the same
33:46marketing techniques are used by
33:48legitimate companies , social networks
33:49like Twitter . They have social media
33:52consultants who promote their brands on
33:54those networks . Most cybercriminals are
34:12between 18 and 25 years old . they may
34:14be prone to participating in illegal
34:16activities and do not take the law
34:17seriously . Many of them are bold and
34:20are not afraid to experiment . Ego plays
34:29a major role in this community . Dr.
34:34Magda Shelly , cybersecurity expert .
34:38The general public lacks knowledge
34:40about cybersecurity . They think that
34:44hackers possess almost superpowers and
34:45are so good that no one will discover
34:47them . It is a group of criminals who
34:59may feel threatened ; they think it's
35:01fun and that it is a mind game . It has
35:08to be something stimulating for them .
35:12something that thrills them . A type of
35:17euphoria . In the case of the AlphaBay
35:26market , its reach and the number of
35:28users it has , its owner perhaps had a
35:30sense of success , a feeling of being
35:32untouchable , because he had reached a
35:35certain level where he hadn't been
35:37found until now . He didn't think they
35:41could catch him . At first , he didn't
35:52expect us to know so much . He was very
35:54cunning . He thought no one would
35:56discover him because he had several
35:58layers of security around him . We had
36:01hundreds of people working for months
36:03to catch one person . Bangkok , Thailand .
36:15Operation Bayonet was a police team
36:16formed by 10 countries with the support
36:19of Europol that investigated and
36:20planned the dismantling of AlphaBay for
36:22a year and a half . After 6 months of
36:25observation , the Thai police were ready
36:27to arrest Cazes . D-Day for Operation
36:30Bayonet , July 5 , 2017 . The perpetrator
36:45was a technology expert . He was
36:47considered the top cybercriminal .
36:53Tirayud Ampo , Lieutenant Colonel and
36:55Inspector of the Narcotics Intelligence
36:57Division . The perpetrator was very
37:00skillful at dodging FBI scrutiny for a
37:02long time until we caught him
37:04committing a crime in Thailand . it was
37:07a challenge to gather all the evidence
37:08against him . The Thai police , the
37:12American police , and other foreign
37:14police forces were under a lot of
37:16pressure . We had never investigated a
37:20case like this . Normally we follow the
37:23trail of bank accounts and some
37:25electronic data , but we had never had
37:27to use technology and surveillance 7
37:30days a week . Operoha , General Commander
37:57of the Narcotics Intelligence Division .
38:00We had to catch him red-handed while he
38:02was administering the site , since he
38:04wasn't at the computer all the time .
38:11Seeing someone's laptop connected to
38:13the market also shows that intent . It
38:16reveals that you are the person who is
38:18administering it . Paul Craig , ethical
38:21hacker . People who use Tor or
38:25cryptocurrencies are almost certainly
38:26applying additional security
38:28precautions on their laptop . If police
38:34officers come , you close your laptop .
38:37It is a giant encrypted brick . There is
38:40nothing more incriminating than being
38:42connected as an administrator to an
38:43illegal market . It is clear that you
38:46are involved . The 10 countries were
39:00ready that day , not just Thailand . It
39:06was the first phase of the operation .
39:09We were worried that if we failed at
39:11any point , the others would fail too
39:14because our part was fundamental . We
39:20had to organize every second of our
39:21plan . When to notify the forces ? From
39:24which side will we come ? And once he
39:26comes out , who will stop him ?
39:30Everything must be under control before
39:32we stop him . Alexander The police
39:42orchestrated a traffic accident in
39:43front of Cazes's house . When he came
39:47out to check his supercars , they
39:49arrested him quickly . Usually , it takes
40:00people 5 seconds to react , so we had to
40:03execute our plan within a limited
40:05window . If he had realized we were
40:09coming for him , he would have wiped his
40:10computer and mobile phone . Everything
40:14had to be done in less than 9 seconds .
40:22We had to stop him and seize all
40:23electronic devices to ensure he
40:25couldn't access Alpha Bay through other
40:27connections . My job was to make sure we
40:34managed to take control of Alpha Bay .
40:42Alpha control Once we started
40:55inspecting the devices like the laptops
41:00, we discovered that Cazes was hiding
41:02the key password there that gave access
41:07to what he called Al we managed to
41:27decrypt his master key . Most people use
41:34very simple passwords like " password "
41:36or " I love you . " Nicolas Christin , dark
41:40web expert , Carnegie Mellon University .
41:44Those who run these markets use
41:46passwords that are difficult to crack .
41:49It is more of a passphrase , not a
41:51password . If it is a paragraph from a
41:53book , it is quite a challenge to try
41:55and guess it . Attempting to crack one
42:00of those passwords would require a huge
42:02amount of resources . It is not clear if
42:05it is possible to break the encryption
42:07and it is unfeasible with current
42:08technology . The day we found him , his
42:18own device had caught him red-handed .
42:21He was operating the website as an
42:23administrator . That is why we were sure
42:26, with the evidence in hand , that we
42:28had arrested the right person .
42:31Alexander Cazes was placed in Thai
42:33police custody . He was to be extradited
42:36to the United States to be charged with
42:3816 crimes , but Operation Bayonet was
42:40kept out of the press . To observers ,
42:43Alpha Bay had disappeared abruptly .
42:46Alpha Bay , the online drug bazaar , goes
42:48offline mysteriously , raising fears of
42:50a major fraud . Alpha Bay , the largest
42:52dark web marketplace in the world .
42:54Possible scam alert . Alpha Bay remains
42:57down and users suspect foul play .
43:00People thought that Alpha Bay had
43:01committed an exit scam . The platform
43:04existed , but you couldn't actually take
43:06the money out of it . The police did
43:10this so that the people who were on
43:12Alpha Bay would go to another market .
43:17Alpha Bay users looked for a new place
43:19to trade . They moved to another dark
43:22web market , Hansa , but Operation
43:24Bayonet had also taken control of Hansa
43:26. They collected data from all the
43:29vendors on both market services . This
43:32hidden site has been seized .
43:34International forces shut down two
43:35major dark web markets . It was an
43:42unprecedented operation . Alpha Bay was
43:44about 10 times larger than Silk Road .
43:48Multiple servers , different countries ,
43:50hundreds of millions of dollars in
43:51cryptocurrency , and a dark network of
43:53worldwide trafficking . International
43:59U.S. law enforcement agencies have
44:01announced today the dismantling of
44:02AlphaBay , the largest dark web market ;
44:04the Department of Justice and the FBI
44:06have shut down Alpha Bay . Breaking news
44:08. The largest Darknet market is closed .
44:10Alpha closed . A week after his arrest ,
44:27Cazes died in custody from an apparent
44:30suicide . It has been almost two years
44:43since Alpha Bay was dismantled . It is
44:48estimated that about 30 markets
44:49continue to sell drugs and illicit
44:51goods on the dark web . In 2018 , the FBI
44:53and Europol formed teams dedicated to
44:56sharing dark web crimes . Thailand's new
44:59cybersecurity law allows the government
45:01to access data and equipment . It will
45:04allow them to monitor internet traffic
45:05and access private data , including
45:07communications without a warrant . The
45:19dark web . The candy man . Jakarta ,
45:32Indonesia . Lolly Candy , an online
45:40pedophile group , was created in 2016 ,
45:43but became known to the police in March
45:462017 . The police found about 10,000
45:49photos and videos shared among more
45:50than 8,000 members . Within a month , the
45:53four administrators were arrested ,
45:55including its creator , Wawan . He was
45:58sentenced to 6.5 years in prison .
46:04I am not a pedophile ; I am normal . Only
46:07God and I know that this is a lie . They
46:09forced me to confess that I had victims
46:11when in reality there were none . I had
46:13victims , even though there were none .
46:39What they did was very immoral and
46:41perverse because they shared photos of
46:43small children in the group that
46:45included pornographic videos and photos
46:47. photo by
46:53Sailendra Persada , editor of Tempo.co .
46:58Sailendra conducted an exclusive
47:00interview with Wawan previously as part
47:02of his investigative reporting on the
47:04Lolly Candy case . When he had nothing
47:08to post , they just took photos from
47:10other groups and shared them . Wawan
47:13claimed that he had joined
47:14international groups , so he took photos
47:16from those groups and posted them to
47:18the Lolly Candy Facebook group . Many of
47:28the photos they shared were taken in
47:30public places like beaches and zoos .
47:34They would take photos of children and
47:35share them . It was very alarming . I
47:43also read several of their
47:44conversations on how to approach
47:45children . I started on the internet
48:03when I was 8 years old . I was
48:05self-taught ; I learned it on my own . I
48:16was a quiet and introverted boy . I
48:18preferred playing with my gadgets than
48:20socializing with people . As a child , I
48:25loved going to the cybercafé . I liked
48:27it so much that I would walk an hour to
48:29get there . I did it so often that I
48:34became a cybercafé operator . I
48:37practically lived there . He surely
48:48spent a lot of time at the café . Juan
48:50told me that he eventually tried to
48:52enter the deep web and learned the term
48:54pedophile . He was adopted and raised by
49:12his aunt , but due to financial problems
49:16, he couldn't finish primary school .
49:23Wawan was from a marginalized family .
49:26When Wan founded this group , he felt
49:28proud because he was the leader and
49:30could control many people . He was proud
49:41to have many friends from abroad . He is
49:48naive . He denies having had sexual
49:51relations with minors and says he is
49:53not a pedophile , but he shared photos .
49:57He knew most were children , that there
49:59were videos of sex with small children ,
50:01but he chose to close his eyes so he
50:03could boast about being the
50:04administrator of a group . and he
50:06deliberately closed his eyes . He
50:08enjoyed his pride as an admin . But
50:37there was a lot of child pornography on
50:39Lolly Candy . Why didn't you leave it ?
50:45Let me make it clear one more time . It
50:47wasn't a question of leaving it or not .
50:49I was rarely there . First , he didn't
50:56seem to feel very guilty . Dr. Seto
51:02Muliadi , Chairman of the Indonesian
51:04Child Protection Commission . Second , he
51:08felt like a victim . Third , he wanted to
51:12clarify that he was not the perpetrator
51:14, a pedophile . he is not the
51:16perpetrator , he is not — what this
51:18means is that he was not just a
51:20pedophile and so on . In 2017 , we
51:41carried out cyber patrols .
51:45Dani Arianda , Deputy Chief of the
51:47Cybercrime Unit of the Jakarta Regional
51:49Police .
51:50We discovered a Facebook group called
51:52Lolly Candy . They were posting child
51:54pornography . We had also received
51:56reports from the public about it . Based
51:59on those reports , we carried out an
52:00undercover operation . Lolly Candy is
52:09one of the biggest cases we have
52:11uncovered . Wan is Indonesian , but he
52:16was also part of the administrative
52:18team for other pedophilia groups
52:20affiliated with other international
52:22groups . When we began our investigation
52:29, the Facebook group had about 6,000
52:31members . A week later , we discovered
52:35the number of members had increased to
52:37800,000 . There were about 10,000 photos
52:45and videos . We were shocked to see for
52:51the first time how massive the Lolly
52:53Candy Facebook group became in terms of
52:54sharing data , photos , and videos of
52:56children . data or information or photos
53:02and videos related to young children .
53:07Of course , we as parents are very
53:10concerned . Facebook was not their only
53:17way of communicating . They also created
53:20groups on WhatsApp and Telegram . We
53:25discovered that people from about 40
53:26countries had been added to the
53:28WhatsApp group . There were about 11
53:34chat groups , and one of the Indonesian
53:36groups had over 8,000 members . Lolly
53:46Candy members actively participated in
53:48various groups on WhatsApp . WhatsApp
53:51limits each group to a maximum of 256
53:53members . Facebook has no limit on
53:56members in a group , allowing thousands
53:59to join . Did they know that Facebook
54:03would censor the content uploaded and
54:04block accounts ? So they moved to
54:06WhatsApp . But the content in the
54:11WhatsApp group was even more vulgar .
54:20They were very bold in sharing
54:22authentic photos and videos .
54:31How much to see more of her ? Well
54:34transferred . These apps like WhatsApp
54:44and Telegram allow users to communicate
54:46in a private and secure environment .
54:51Alifa Celli , specialist in digital
54:53forensic investigation . In these cases ,
54:58one can create chat groups that allow
54:59information to be shared directly ,
55:01encrypted , and easily in a private and
55:03secure environment . The evidence
55:13remains on your device . Obviously , the
55:17moment they delete them , the evidence
55:19is permanently destroyed . There is no
55:22way you can recover them . We do not
55:30store data for law enforcement purposes
55:32unless we receive a valid request
55:34before the user has deleted that
55:36content from our service . We report all
55:39clear cases of child exploitation .
55:56Sipinang Yarta . Lolly Candy was
56:36intended to be an anime group . We
56:38talked about games and popular anime . I
56:48was not the original creator . After
56:54some time , the account disappeared .
57:01Former members asked me to create a new
57:04one . Wawan , 25 , then recruited his
57:10friends online . Dede , D22 , Tday , both
57:1317 , to be co-administrators of the new
57:16group . Sha and Tday were both minors .
57:23Wawan was known as the mastermind and
57:26lead administrator . Sija was his
57:29assistant who monitored member
57:31activities . Tdei and Dede were members
57:33and administrators who regularly
57:35uploaded videos and photos . The four
57:42had never met in real life . Maybe Si
57:57liked Wawan and thought that since she
57:59had a boyfriend , she had to obey him .
58:03She might have thought something was
58:04wrong , but continued with it because
58:06her boyfriend was also involved . It was
58:09just for fun .
58:11Was she your girlfriend ? No , she was a
58:15good friend . I met her on Facebook . The
58:19more I knew her , the closer we got
58:21thanks to anime .
58:26Facebook friend request sent .
58:29Accepted . Do you like anime ?
58:32You too ?
58:33Of course . What titles do you like ?
58:35What have you watched ?
58:36We talk about anime and soundtracks in
58:38my new group .
58:39Can I join ? I invited her to the group
58:43thinking she could improve it and make
58:44it more active . She was well received .
58:48Someone made a comment . People treated
58:51her well , praised her , and she got
58:53carried away . Maybe they told her to
58:56upload things . Back then , Tidey had
58:59asked me to make him an admin .
59:05I'm bored . You created a new group . Yes
59:08, I just created it . Make me an admin ,
59:12man .
59:14Maybe Tday was more active since he was
59:16a student . He had more free time . The
59:22first person appointed was Ilas . Of . He
59:30became an admin because we got along
59:33very well . We met on the Deep Web . Some
59:39group . Cool . What are you doing ? I just
59:42created a new Lolly Candy . Check your
59:44Facebook , I've sent you an invitation
59:46to be an admin . In the group , there was
59:48a lot of interest in anime and
59:50soundtracks . The deep web is websites
59:54that search engines cannot find . This
59:57includes user databases and cloud
1:00:00storage . There were many requests to
1:00:03create a second group . Wa claims he
1:00:06created the Lolly Candy group to talk
1:00:08about anime . He maintains he never
1:00:11wanted them to include child
1:00:12pornographic content .
1:00:18Official Lolly Candy . 18 plus .
1:00:21What does 18 plus mean ?
1:00:24To filter those who joined . Adults only
1:00:26. Teenagers couldn't post ; if members
1:00:28talked about porn , they were adults . We
1:00:33imposed that sexual content posts
1:00:35should only be published at night , and
1:00:38there was a rule that pornography could
1:00:41only be posted after 10 PM until
1:00:44morning . Article 4 , paragraph 1 of
1:00:52Indonesia's anti-pornography law
1:00:54prohibits the production and
1:00:55distribution of child pornography . All
1:00:57data from Interpol and the National
1:00:59Police indicate that 25,000 child
1:01:01pornography crimes are recorded in
1:01:03Indonesia daily . We had already created
1:01:09a second group . In the first group , we
1:01:10didn't set those rules because we were
1:01:12already tired of the members ' behavior .
1:01:15We couldn't help it . They uploaded
1:01:22photos of naked children with parts
1:01:24blurred , as well as child pornography
1:01:26videos . Porn , ha , child porn video .
1:01:33We do not allow content that sexually
1:01:35exploits or threatens children . Do not
1:01:37post any sexual activity involving
1:01:39minors , minors in a context of sexual
1:01:41fetish . My phone was broken , I couldn't
1:01:49control the group . At the cybercafé , I
1:01:52rarely went on Facebook because back
1:01:54then I was busy with games . I didn't
1:01:57have time for that . I didn't pay
1:02:01attention to those things . I was
1:02:02already tired of kicking people out .
1:02:05They bothered me at work . I worked at
1:02:10night and rested during the day , but
1:02:12people wouldn't stop messaging me
1:02:14saying someone had done this or that .
1:02:19People kept me informed every day . In
1:02:20the end , I left it in their hands . Were
1:02:23you managing the Loli Candy account
1:02:29while you worked at the cybercafé ?
1:02:31Yes , I created that group at the
1:02:33cybercafé . When I started monitoring
1:02:36it , I thought this wasn't right . I
1:02:38would kick someone out , but they had
1:02:40many duplicate accounts . They posted
1:02:43non-stop . We got tired of kicking them
1:02:46out every day . So they kept posting and
1:02:49we were tired every day . Why did you
1:02:53continue with the second Loli Candy ?
1:02:56Because that's where I found referrals .
1:03:16I created links to games that included
1:03:18ads and that's how I made money . Lolly
1:03:29Candy members shared child pornography
1:03:31among themselves using shortened links .
1:03:33By clicking these links , members would
1:03:35open advertisements . They were paid per
1:03:37click . They profited from visitors to
1:03:46the website and collected 0.0001 . They
1:03:51could earn anywhere from 70 cents up to
1:03:5440 a month . Enough to buy a prepaid
1:03:58data plan . Another administrator often
1:04:01shared photos and videos expecting
1:04:03commissions in the form of mobile
1:04:05top-ups . They ranged between 1.50 and
1:04:0750 dollars . I think the members '
1:04:11intentions were diverse . Someone having
1:04:13financial problems might have shared
1:04:15many photos and others did it for their
1:04:19sexual satisfaction . Are you interested
1:04:28in children ? No , not at all . I was
1:04:36curious before , but I wasn't really
1:04:37interested in them . I was only curious
1:04:46because in the video I saw , the girl
1:04:48looked like she had already been taught
1:04:49, she wasn't scared . Children are
1:04:55innocent . If someone asks them to do
1:04:57something , they are usually afraid . But
1:05:00what I saw was the opposite . I read
1:05:09that there were six children who were
1:05:10your victims . Three admitted that you
1:05:13approached them . They forced me to
1:05:18confess and when I asked for forensic
1:05:20evidence , there wasn't any . It wasn't
1:05:23even mentioned in the trial . It is easy
1:05:25to verify . There was no forensic
1:05:28evidence in the trial to prove that I
1:05:30had a victim . This is one of your posts
1:05:41. It was one of the duplicate accounts .
1:05:46Many claimed to be me . My original
1:05:49account didn't use a real photo , it
1:05:51only used my old game icon . Wan claims
1:06:07he is not the creator of the multiple
1:06:09Facebook accounts linked to his alias .
1:06:19He uploaded six photos . Our evidence
1:06:30proves the opposite of what he claims
1:06:37in addition to sharing and creating
1:06:38photos and videos also assaulting among
1:06:51his victims were his neighbor and his
1:06:53niece . He would lure minors to play
1:07:01with him before molesting and sexually
1:07:03penetrating them . According to
1:07:10Indonesia's child protection law ,
1:07:12children are understood as any person
1:07:13under 18 years of age . In 2016 ,
1:07:15Indonesia passed controversial laws
1:07:17allowing chemical castration and the
1:07:19death penalty for perpetrators of
1:07:20sexual violence against minors . Despite
1:07:22this , reports show that Indonesia is
1:07:24the Asian country with the highest
1:07:25number of pedophilia cases . Tourist
1:07:29destinations in Indonesia are often
1:07:31called a pedophile paradise . UNICEF
1:07:33Indonesia stated that there were 40,000
1:07:36victims of child sexual exploitation
1:07:38each year between 2010 and 2015 . It is
1:07:41alarming . I don't know why they choose
1:07:45Indonesia . Sex education remains a
1:07:48taboo . Here , it is difficult to explain
1:07:50how sexual abuse can occur through
1:07:52interacting with strangers . The
1:07:55government has to raise awareness among
1:07:56people and enforce the law . We were not
1:08:08alert enough . Indonesia . A paradise for
1:08:11pedophiles . Sexual abuse against minors
1:08:14does not cease despite harsher
1:08:15penalties . Pedophilia is an alarming
1:08:19issue in Indonesia . We must be rigorous
1:08:22about it . Vigilance and awareness in
1:08:27society must be improved . Children must
1:08:31dare to say no . They have to be brave .
1:08:36If something happens , it is not the
1:08:38time to be polite . When you talk to
1:08:58them , they are very nice and articulate
1:09:01. Dr. Cader , forensic psychologist . You
1:09:06wouldn't know they have been abusing
1:09:08children if no one told you . It is
1:09:11those qualities that make a child warm
1:09:13up to such a person because they don't
1:09:15seem threatening at all . It is a modus
1:09:19operandi . Seeming nice , open , and
1:09:23trustworthy , parents leave their
1:09:26children with these people , and then
1:09:28they take advantage of the kids . They
1:09:34have developed a technique that has
1:09:36proven very advantageous for them . It
1:09:40is a grooming process . In which the
1:09:49person establishes a connection with
1:09:50you with the intention of totally
1:09:52exploiting you . Members talked about
1:09:59becoming preschool teachers to attract
1:10:02victims more easily . When the children
1:10:06finished exercising , they could smell
1:10:09their sweat . They boast . I took a
1:10:16picture of my neighbor . I managed to
1:10:19share a photo of my niece . It involves
1:10:22their own relatives . They even used
1:10:24violence and recorded it to share it
1:10:26among themselves . They even committed
1:10:29violence , then filmed it and shared it
1:10:31among themselves . We have to realize
1:10:36that we usually think pedophiles are
1:10:38only men . Women can also be pedophiles .
1:10:43They can obtain sexual satisfaction by
1:10:44having relations with young boys . They
1:10:47can also be victims . Men can also be
1:10:53victims . Sija admitted that he was in
1:11:03the group , but did not share photos of
1:11:05children . He said he does not like
1:11:11younger boys and that he was more
1:11:13attracted to adults . Pedophilia can be
1:11:20caused by genetic factors . But also
1:11:23environmental ones . A genetic factor is
1:11:27something that affects psychosexual
1:11:28development . Environmental factors can
1:11:32include situations where a former
1:11:34victim becomes an abuser out of a
1:11:36desire for revenge , or pressure from
1:11:38friends and their surroundings . In some
1:11:48cases of sexual exploitation or
1:11:50violence , the perpetrators are punished
1:11:52, but the victims are forgotten . Like a
1:12:02wound that is not treated quickly , the
1:12:04scar deforms the skin . A psychological
1:12:08deformation could later turn into
1:12:10something very complicated . That could
1:12:14turn them into aggressors in the future
1:12:15. This also includes what he said . I
1:12:41was 7 years old when I was sexually
1:12:43abused . He was a distant neighbor . I
1:12:47would pass by his house on my way to
1:12:49school . I was afraid . I didn't tell
1:12:54anyone because he threatened me . I kept
1:12:56my mouth shut . I was afraid to talk to
1:13:03people about it . I couldn't confide in
1:13:12anyone , so I just kept it all inside .
1:13:23Indonesia has one of the largest
1:13:24numbers of internet users in the world .
1:13:26WhatsApp and Facebook are among the top
1:13:29three social media platforms . It is the
1:13:32fourth country in the world in terms of
1:13:33the number of Facebook users . The group
1:13:45used social media for the same purpose
1:13:47they were built for . They needed to
1:13:51communicate with people . That is why
1:13:54they used the same strategy : creating a
1:13:56profile , creating groups , and inviting
1:13:58like-minded people to join and share
1:14:00information . Many tools are easy to
1:14:05access and public , but most of the
1:14:07people who run these syndicates have no
1:14:10computer skills . They can misuse these
1:14:14platforms and commit crimes . Didn't you
1:14:48know that child pornography is a crime ?
1:14:53At first , I didn't know . I thought it
1:14:55was a new type of porn . I found out
1:15:00later .
1:15:04Wan , administrator of the pedophile
1:15:06group Lolly Candy .
1:15:12When I found out it was a crime , I
1:15:14wanted to leave the group . Just when I
1:15:16wanted to leave it , I was arrested . I
1:15:21didn't have time to leave before I was
1:15:23caught . I use social media every day
1:15:48after I send my children to school and
1:15:50when my husband goes to work .
1:15:54Risrona , housewife . Simor Kir ,
1:15:55whistleblower . Risona is a member of
1:15:58the Facebook group Fanfan Centicius ,
1:16:01made up of other stay-at-home mothers .
1:16:03The members often share stories and
1:16:05advice with each other .
1:16:08Someone mentioned on seor.com a group
1:16:10called Lolly Candy . I shared it on
1:16:12Fanfan Centicius . I told them there was
1:16:15a group called Lolly Candy that was
1:16:17interested in children . My friends
1:16:25didn't believe it at first . They
1:16:28thought I was too paranoid and that I
1:16:30was spreading rumors . There is a lot of
1:16:40fake news in Indonesia . Se lendra
1:16:42persada , editor at tempo.co . Our
1:16:47fact-checking team has to verify five
1:16:49times a day whether a news story is
1:16:51real or not . In a month , it could be
1:16:54150 million . They check the
1:16:56authenticity every day . Just imagine ,
1:16:59if in a month there are 150 million ,
1:17:02that is truly massive . Four of us
1:17:08joined the Lolly Candy group to see if
1:17:10it was real or not . Lolly , to see if it
1:17:14really existed . It shocked me to see
1:17:21that the group had thousands of members
1:17:23. Actually , there were so many photos ,
1:17:27thousands of photos of children .
1:17:36Sharing photos of infants and toddlers .
1:17:47What is shocking is that they weren't
1:17:48just interested in children from their
1:17:50own neighborhood . They also took photos
1:17:56from other people's social media
1:17:58accounts and made sexually explicit
1:18:00comments . One topic I saw was how to
1:18:11avoid bleeding when raping underage
1:18:13girls . How to prevent children from
1:18:20telling their parents . I used to post
1:18:33photos of my children on my social
1:18:35media , but since this pedophilia
1:18:40incident , I have stopped doing it . I
1:18:43restrict the visibility of the photos
1:18:46so only my family members can see them .
1:18:51We collected screenshots , photos of
1:18:53children , and of their victims . We felt
1:19:06relieved and grateful that the police
1:19:08took us seriously . There was also
1:19:25another shocking rule in the group .
1:19:26They had to prove that the photos and
1:19:29videos they shared were original
1:19:31content . Dani Arayanda , Deputy Chief of
1:19:35the Cybercrime Unit of the Jakarta
1:19:37Regional Police . Tday is one of the
1:19:39administrators of the Lolly Candy group
1:19:41. He had shown that by sharing original
1:19:44photos and videos , one could gain great
1:19:45popularity in the group . Center for
1:19:53Strategic Informatics and Tactical
1:19:55Operations . Participation in the group
1:19:58is not limited to sharing content , but
1:19:59also interactions and exchanges . You
1:20:03must show that you are active in the
1:20:04group . They have to attach the location
1:20:08where the photo was taken to convince
1:20:10people it is authentic . Where it comes
1:20:16from , to convince others that the photo
1:20:19is real , so they don't get kicked out .
1:20:25Matching what was mentioned earlier ,
1:20:28they also always had to prove that the
1:20:30content they shared was original by
1:20:33indicating the date or the name of the
1:20:35person they wanted to send it to . Yes ,
1:20:40it was proven that they were the ones
1:20:42who actually recorded the video and
1:20:44hadn't taken it from other social media
1:20:46.
1:20:54Facebook is very strict in filtering
1:20:56posts , which is why they use certain
1:20:59codes . For example , they used the term
1:21:03CP instead of child , which is a vulgar
1:21:06term . And others , to hide that they
1:21:10weren't mentioning that in a vulgar way
1:21:12. They banned it because Facebook would
1:21:19automatically ban it . It is better to
1:21:21censor your content if you want to post
1:21:22something very vulgar , like censoring
1:21:26nipples or intimate parts with another
1:21:28color or emoticons . You also cannot
1:21:32share blue links . When you post a link ,
1:21:39it automatically turns blue when it is
1:21:42active . They instructed members to
1:21:45include an extra space between the
1:21:47characters of the link . That would keep
1:21:51the link from turning blue . No. No ,
1:21:58that will turn blue . Let’s take a URL
1:22:04example . Dr. Magda Shelly ,
1:22:08cybersecurity expert . If that URL
1:22:12contains a keyword , it will be detected
1:22:15by the software , but if it is shortened
1:22:17, the keywords do not appear in the URL
1:22:19and the software may not detect them .
1:22:29Today , search engines and the
1:22:31information they index represent only 5
1:22:34% of the total internet . Therefore , we
1:22:42then have what we call the deep web and
1:22:44the dark web . The dark web is a hidden
1:22:48part of the internet . Ali Faceli ,
1:22:52digital forensics specialist . It is
1:22:56obvious that they must have a platform
1:22:58on social media because they need to
1:22:59inform other members about information
1:23:01available on the dark web . How old is
1:23:09she ? Fantastic . You have more . They
1:23:16stored uncensored photos or videos on
1:23:19special sites . Members interested in
1:23:22seeing the full version would contact
1:23:24the administrator , who provided them
1:23:25with the link . The number of members
1:23:29grew so fast because the sites created
1:23:31by them and others that stored
1:23:33uncensored videos have low-security
1:23:35firewalls . It was not necessary to
1:23:39click repeatedly on the server to reach
1:23:41the domain . Three clicks are enough to
1:23:45get to the main page . It only takes
1:23:54about three clicks to get to the main
1:23:56site . As part of their investigation ,
1:24:14the Indonesian police infiltrated to
1:24:15try to access the Loli Candy Facebook
1:24:17group . a challenge , and we realized
1:24:22that we could not remain undercover for
1:24:24long because we would not have been
1:24:26able to share the videos or photos the
1:24:28members demanded . Therefore , while the
1:24:33four administrators were authorizing us
1:24:35as members , we prepared excuses to buy
1:24:37time while simultaneously searching for
1:24:40information on the authors . We turned
1:24:54to Facebook for help to provide us with
1:24:57information . We checked if the accounts
1:25:03were real or anonymous , but then we
1:25:05discovered they had posted their real
1:25:07mobile phone numbers . Well , but we also
1:25:11found there at that time a contact
1:25:13person , which happened to be their
1:25:15phone number . Thanks to the phone
1:25:24numbers , the police were able to
1:25:25identify the real accounts . That way ,
1:25:27they were able to locate the suspects
1:25:29and follow the leads . Wan posted a
1:25:31photo of a 5 - year-old girl in the Lolly
1:25:34Candy Facebook group . WWAN photographed
1:25:37his neighbor , photographed a little
1:25:38girl , and shared the image in the group
1:25:40. That allowed the police to locate him
1:25:43because a motorcycle with a license
1:25:44plate could be seen in the photo . We
1:25:47decided to form a team and split into
1:25:52four groups to arrest them together . It
1:25:57was a real challenge for us . March 2017
1:26:05, mission briefing . We have recently
1:26:16managed to identify the four subjects
1:26:19involved in the Lolly Candy case , whom
1:26:21we will arrest shortly . The four are in
1:26:24different locations . We have realized
1:26:29that we have to arrest them
1:26:30simultaneously . We cannot do it
1:26:33separately because , according to our
1:26:36analysis , they have an agreement . If
1:26:40anything happens , they will shut
1:26:42everything down and we will lose all
1:26:43the data we need . And we will lose the
1:26:50data we need . At that moment , we had
1:27:03found a neighbor who told us that Guan
1:27:05might be in a specific house . We
1:27:09rechecked the photo on his Facebook and
1:27:11realized that there was a building that
1:27:14matched one in the photo . That photo
1:27:16proved to us that it had been taken
1:27:18from Wan’s house . He had a strong
1:27:28network in his area . Someone warned him
1:27:33that he was being looked for . He
1:27:36updated his status and posted . If you
1:27:40are truly my friend , be sincere , there
1:27:42is no need to ask . With this update , we
1:27:46were sure that Wawan was in that house .
1:27:53Well , with that update , we were more
1:27:56convinced that the house was indeed the
1:27:59one where Wawan lived . Social media
1:28:08fell once again into irresponsible
1:28:10hands . A Facebook group invited its
1:28:13members to share pornographic content .
1:28:15The police arrested two pedophiles and
1:28:17two criminals for distributing the
1:28:19videos . One of them was a 17 - year-old
1:28:22girl . It was created in September 2016 .
1:28:27There were 7,479 members . There were
1:28:31other groups besides those on Facebook
1:28:33and WhatsApp , and they had saved the
1:28:35photos on their mobile phones . WhatsApp
1:28:42that had the photos in it The images
1:28:46were on the mobile phone in question .
1:28:49For members outside of Indonesia , we
1:28:51contacted law enforcement agencies like
1:28:53the FBI .
1:28:59The FBI identified Lolly Candy members
1:29:01from 63 other countries and shared the
1:29:03data with local authorities . Another 17
1:29:05suspects were arrested in El Salvador ,
1:29:07Chile , and Guatemala . We recovered
1:29:10three mobile phones from Huawan and
1:29:11several USB drives . We found about 2000
1:29:14files , photos , and videos related to
1:29:16child pornography . that . And from those
1:29:20flash drives , we were able to obtain
1:29:22about 2000 files containing photos and
1:29:25videos of child pornography . The Candy
1:29:31administrators were convicted of
1:29:33distributing inappropriate content
1:29:35under the law on electronic information
1:29:37and transactions . Due to the time
1:29:39elapsed between the alleged crime and
1:29:41the trial , Hawan could not be charged
1:29:43with child sexual abuse . Facebook has
1:29:48removed the Lolly Candy group , but
1:29:49other groups continue to grow , many of
1:29:51them formed by former Lolly Candy
1:29:53members . In 2018 , the Indonesian police
1:29:56dismantled a new Lolly Candy group on
1:29:58Facebook . Oh .