Exploring the Dark Web

0:00There's a lot of mystique around the

0:02dark web, but really it's still just the

0:05internet with extra steps. And I mean

0:08that literally because the dark web

0:10requires some special software to be

0:12able to access it. Things like the tour

0:15browser. And when you hear words like to

0:17or the onion router, you can think of

0:19those as literally different steps or

0:22different hops across the internet where

0:24you have a handful of servers or

0:26computers that are receiving your

0:28network traffic but only knowing where

0:30it came from and where it's going to.

0:32All of your traffic is bundled up like

0:35an onion and then each server peels off

0:37one layer of the onion and sends it to

0:39the next. So the final destination where

0:42you're trying to go on the dark web

0:44never knows where you came from. So the

0:47dark web is a tool to protect you

0:49against tracking, surveillance, and

0:51censorship, but with that added privacy

0:55might come some cyber criminal activity.

0:58Now note this video is for educational

1:01purposes. Cyber crime isn't cool. But in

1:03this video, we'll explore some of the

1:05shady, darkest corners of the internet

1:07on the dark web and see what fresh new

1:10tour onion sites have popped up online.

1:13But here's the thing. When you're

1:15exploring the dark web, you're not going

1:17to regular online websites or domains

1:20like facebook.com or google.com. You're

1:24going to aunion URL. And these are

1:27usually long complex strings of random

1:30letters and numbers. So you don't always

1:33know the link to get to where you want

1:35to go. These onion addresses are

1:38generated with some cryptography magic

1:40and make for a tour hidden service.

1:43Since all of these websites are meant to

1:45be hidden to hidden services with

1:48anonymity and privacy in mind, it can be

1:50pretty tough to crawl or index the dark

1:53web like you would on the internet. So

1:55search engines like a Google equivalent

1:58are hard to come by and not all that

2:00effective. I'm here at dark search, one

2:03of the dark web search engines like

2:05Google on the clearet, but we could

2:08search for whatever we want, but it will

2:10only return what this has indexed. Let

2:13me search for hackers for hire. Haha, he

2:17he a little jokes there. And there are

2:20no results. As I mentioned, these can be

2:22pretty ineffective. Let's try searching

2:24for hacking. How about that? Okay, some

2:28results here. Exploit.in, N a popular

2:30Russianspeaking hacking forum with

2:32various information tools and services

2:34related to cyber security and malware.

2:37Omega Darknet Army Klopp one ransomware

2:41gang ramp another Russian hacking forum

2:43and marketplace verified a Russian cyber

2:46crime forum. No secrets there. Maybe we

2:49searched for ransomware. Couple extra

2:52results. We see Klopp and Ramp again.

2:54even a ransomware group sites just a

2:57different list or sort of catalog of

2:59different ransomware groups Everest

3:01group ransom look ransom x and that's

3:04the only page of results as I had

3:07mentioned though there are a lot of

3:09different tour or dark web search

3:11engines dark search is by no means the

3:14only one of course you might be familiar

3:16with maybe you've heard of haystack

3:18torch is another one granted this has a

3:21lot of the crazy wild advertisements

3:24with flashing lights and sensory

3:26overload of oh cards, drugs, guns,

3:30whatever, and some not safe for work,

3:32vulgar stuff that I will redact and

3:34blur. And again, you got to have the

3:36fortitude to go look around at some of

3:37this stuff. But it is still extremely

3:40worthwhile to know what information is

3:42out there on the dark web because what

3:45if it's your information? What if your

3:47data, your passwords, your identity is

3:50out and about just in the wind for

3:52hackers and cyber criminals to take

3:54advantage of? There could be data about

3:57where you work or data from your work or

4:00any of the data breaches and hacks and

4:03intrusions and compromises we see all

4:05the time in the news. Let me zoom in to

4:07the Klopp ransomware gang as one of

4:09these results from our search engine

4:11here because for some time Klopp has

4:14been running a muck in a lot of recent

4:16incidents and intrusions we saw all over

4:18the news. Ransomware groups like Klopp

4:21will encrypt all the data and all the

4:24files in your network or computer

4:25systems and then they'll blackmail you

4:28or extort you to pay whatever amount of

4:30Bitcoin or cryptocurrency. So, there's

4:33some anonymous payment and they've got

4:35their own getaway car and they'll use

4:36that as a ransom and demands or

4:39otherwise if you don't pay the money,

4:41they'll publish all that data out on the

4:43internet or their dark web leak site

4:46like this. So, that is out and about and

4:48more damage done, reputational tarnage,

4:51all of that bad stuff. And these

4:52hackers, the cyber criminals make light

4:54of it. Hey, dear companies, KOP is one

4:56of the top organizations that offers

4:59penetration testing services after the

5:01fact. Yeah. Okay, this is an

5:03announcement to educate companies who

5:05used the progress Move it product. The

5:07chances we downloaded a lot of your data

5:09as part of our exceptional exploit.

5:12Folks might be familiar with the move it

5:15data breach some time ago. Klopp says

5:17we're the ones who performed this attack

5:19and relax cuz your data is safe. Yeah,

5:22right. Uh here you can see some redacted

5:25information for companies that they've

5:26published and everything that's listed

5:28at the top of all the different victims.

5:31you could see the data that's now

5:33available for download. There are tons

5:36of these and this is just one ransomware

5:38group, one cyber criminal syndicate

5:41amongst however many other dark web

5:43marketplaces, forums, telegram chat

5:46groups, and other illegal illicit stuff.

5:49So, finding your information on the dark

5:51web can take hours, if not days or weeks

5:55of manual labor. But the sponsor of

5:57today's video, Flare, can help security

6:00teams continuously and automatically

6:03find that data for you. I use Flare

6:05personally for security research and

6:07cyber threat intelligence to see what

6:09threat actors, hackers, and cyber

6:11criminals are up to on the dark web

6:13because they collect actively collect

6:16all of these different sources across

6:18the dark web. Think of all those

6:20different search engines, those indexes

6:22that didn't work all that well, but all

6:24those different ransomware leak sites or

6:27forums or marketplaces or Telegram or

6:29signal chats where all of that illicit

6:32activity is happening and you're

6:34automatically notified when any of your

6:36information is exposed. Like from the

6:38events page, we could literally

6:40genuinely search across all of these

6:42different categories with any date range

6:44or any query or even severity that we'd

6:47like. Just as an example, I know we were

6:49just looking at that Klopp ransomware

6:52gangs leak site. We could toggle and

6:54filter for ransom leaks and search for

6:56specifically Klopp leaks. And when I

6:59search for this, there's no recent

7:01events because they haven't done much in

7:03the past couple months. Some of these

7:04hits are from July, June, but nothing in

7:07August or September timeline. But that's

7:09across,200

7:10different events. And I could click into

7:12any of these and go take a look at

7:14really what it all entails. While you

7:16can manually search across all that

7:18data, you can also track down exposed

7:20credentials like usernames or passwords,

7:22some supply chain threats from

7:24ransomware that might have hit a third

7:25party, even build out threat

7:27intelligence reports, or add your own

7:30identifiers so you're automatically

7:32notified when your information is out

7:33there. Flare has a 7-day free trial with

7:36the link in the video description. So,

7:38seriously, nothing stopping you. Go

7:40check them out. See what personal

7:41details or business details are exposed.

7:44and another risk and threat to you or

7:46your company. Big thank you to Flare for

7:48sponsoring this video. But let's get

7:50back to exploring the dark web. Since

7:53using these dark web search engines

7:55isn't that effective, you might have

7:57better luck using like a catalog or list

8:00of onion URLs that are already

8:02categorized. So, I'm here on tour links,

8:05one of those sites that is a list of all

8:08these different categorized different

8:09onion URLs or places to go and explore

8:12on the dark web. Some of these are

8:14funny. We'll explore a tour scam list

8:16where even things were known to be

8:19proven as oh a scam or a lie where it's

8:22pretty clear a lot of these could very

8:24well just be fake or I don't know

8:26something for show stupid silly stuff

8:28that's just out there on the internet.

8:30I'm more interested in the hacking

8:32section since that's pretty pertinent to

8:33what we do. Granted, there's still not a

8:36lot here. One of these Pathfinder is

8:38this remote access Trojan, remote access

8:41toolkit or RAT that's supposed to be

8:43some FUD or fully undetectable back door

8:47for surveillance, monitoring, just

8:49watching and controlling what another

8:51computer might do. This is a pretty

8:53common reference on a lot of these

8:55different dark web catalog sites. So,

8:57I'll admit I don't know if Pathfinder is

9:00bogus or not, something silly. Maybe

9:03it's worth exploring in another video,

9:05but it looks and tries to sound cool.

9:08Anyway, whether or not you believe it,

9:10you can take everything with a grain of

9:12salt here on the dark web. But it says,

9:14"Oh, a key logger to record calls,

9:17intercept text messages, browse files,

9:20realtime geoloccation, and recording

9:22audio through a microphone remotely."

9:24Uh, but it costs whatever Bitcoin crap.

9:28Let's take a look at the hackers union

9:30uh for hacking web servers, computers,

9:32and smartphones. Malware development for

9:34any operating system, social media

9:36hacking, or changing grades in school

9:38and university. Oh, that one is dead.

9:41Another occurrence you'll probably run

9:43into quite frequently looking around at

9:45dark web or onion URLs. Some stuff just

9:48isn't online anymore. So, let's go back

9:50and take a look at our tour scam list

9:53and see what that covers. A good many of

9:56these could very well be honeypotss or

9:58things just to catch bad actors. Hey,

10:01folks that don't know any better but are

10:02trying to look around for this stuff out

10:04online. You know, all the folks that

10:06say, "Oh, I want to find a hacker for

10:08hire on the dark web or hitman for hire

10:11or something silly." And I guess this is

10:14a tour scam list because there is no

10:17honor amongst thieves. This individual

10:19writes, "Sometime ago, in my stupidity,

10:21I tried to make several transactions on

10:23the dark internet. You know how many

10:24times I was deceived? Six freaking

10:27times. And that's already too much. Some

10:29good profanity here and there. Let's

10:31take a look at the scam links. These

10:34include the Onion URL. And again, some

10:36may or may not still be online or

10:39offline, but uh look, the drugs empire

10:43to guns. Tons of stuff here. You Bitcoin

10:48scams, cryptocurrency that is always

10:50running a muck. Credit card scams. I

10:53want to get to hack. Look at how many of

10:55these there are. Hacker scams, black

10:58hackers, and dark web hackers. Let's

11:01look at dark web hackers. That sounds

11:03exactly like what we're looking for,

11:05right?

11:07Welcome to the dark web hackers. Have

11:10you ever tried to buy hacking services

11:12in the dark web before? Not happy with

11:14the results? Only empty promises, but no

11:16one getting the job done? Then you

11:18should try Vladimir and George, the dark

11:21web's most trusted hackers for getting

11:23things done. This is this is dumb. This

11:25is this is clearly not real or

11:27legitimate. This is obvious honeypot and

11:30scam. But hello, my name is Vladimir.

11:32I'm the technical expert at dark web

11:34hackers. Here's a list of my services.

11:37Remote control of someone's phone,

11:40Facebook and Twitter hacking, other

11:42social media hacks, network, Reddit,

11:45Instagram, DOS. DOS hacking web servers,

11:49game servers, or other internet

11:51infrastructure. Oh, and here's George

11:53here. My hacking skills are not as

11:55perfect as Vladimir's, but I'm really

11:57good with social engineering, and I like

11:59messing with people. I don't care what

12:00you want to do to them. There's

12:02something I can't do, then Vladimir will

12:03help and teach me for next time.

12:06Destroying someone's life. Okay, there's

12:10that. Uh, don't take this seriously,

12:13please. Oh, I like this one. spreading

12:16false information about someone on

12:17social media. Not as lifer ruining as

12:19the other destroying someone's life

12:22service, but still nasty. What does that

12:25mean, George? Can you tell me more? I'm

12:27curious. I'm curious, George. Anyway,

12:30let me get back to dark search because

12:32this one does have some neat feature

12:34where you could kind of, I don't know,

12:36uh, get a little bit risky. You could go

12:38to a random onion URL or check out some

12:42of the more recent and now fresh onions

12:44that have just popped up on the dark

12:46web. Well, let's get to the fresh

12:48onions. See what's out there and then

12:50wrap things up because I know I've been

12:51rambling for quite a bit. Ooh, Dig, your

12:54helpful AI assistant. Anonymous and

12:57uncensored. Click anywhere to continue.

13:01Uh, okay. I don't know if I trust this.

13:03I don't know where I'm at right now. Hi,

13:05I'm Dig, your anonymous and uncensored

13:07AI assistant. The placeholder text is,

13:09"What is the meaning of life?" So, I

13:11will follow suit. I'd love to get that

13:13from a dark web uh AI chatbot. Do it.

13:16Send it. I didn't know this existed. I

13:18didn't know these are out there. Okay,

13:20that's a pretty real response. Nothing

13:24crazy wild there. What strange things

13:28can I find on the dark web? What you

13:30got? Tell me something weird, dig. The

13:32dark web is a mysterious encrypted part

13:34of the internet where users can access

13:36content and services that are hidden

13:37from standard search engines. You might

13:39find illegal goods and services like

13:41drugs, weapons, stolen data, fake IDs,

13:43passports. Okay, that what the we're

13:46done. We're out of here. We're out.

13:47We're piecing out later. Well, while we

13:50have obviously only just scratched the

13:53surface of kind of what's out there on

13:55the dark web while we were still poking

13:57around and exploring, uh there's weird

13:59stuff, right? you really do kind of have

14:02to have the stomach for it or the

14:03fortitude to just see what's out there.

14:06Of course, with the profanity and

14:08vulgarity and all of that that comes

14:11with that world. But it is still

14:14important just to know, okay, what are

14:16actual hackers? What are real threat

14:18actors? That's not some stupid silly

14:20scam honeypot dumb fake thing. But the

14:23cyber criminals that are doing real

14:25damage like with ransomware, what

14:27information is out there? That's still

14:29the importance of threat intelligence

14:31that should really be a part of your

14:33security strategy, not just for your

14:35company, business, or whatever, but for

14:36your own personal wherewithal. So, I

14:39hope that at least shines a little bit

14:40of a light on the dark web, whatever it

14:43may be, whatever shape or form, but it's

14:46generally weird. Anyway, I'm done

14:49yapping. Thank you so much for watching.

14:51Special thank you to Flare for

14:52sponsoring this video. There's a link

14:54below in the video description. I hope

14:55you check them out and I'll see you in

14:57the next