2016年暗网现状（英文版）

报告摘要

2016 State of the Dark Web Summary

1.0 Overview

2016 was a dynamic year for the dark web, marked by significant changes in both technology and law enforcement activities. New cryptocurrencies emerged alongside Bitcoin (BTC), and the dark web markets evolved from primarily offering illicit drugs to focusing on financial fraud. Several high-profile hacker forums and marketplaces disappeared, with new ones replacing them. Policy and enforcement efforts intensified, prompting discussions and adaptations among dark web users and developers.

2.0 Deep Web, Dark Web, and Darknet

Deep Web: Refers to parts of the internet not indexed by search engines due to technical or access restrictions.
Dark Web: A small portion of the deep web that requires specific software, configurations, or authorization to access, such as Tor or I2P.
Darknet: Frameworks like Tor, I2P, and Freenet that provide anonymity by masking user identities and IP addresses.

3.0 Different Darknets

Tor: The most popular darknet framework, though not impervious to adversaries.
I2P: An anonymity network using Java, offering similar but distinct privacy features.
Freenet: A P2P network designed to resist censorship and surveillance, though its limited node count poses risks.
Zeronet: A P2P network based on BitTorrent and BTC cryptography, allowing IP masking.
Netsukuku: A decentralized, physical network with dynamic routing, not reliant on centralized servers.
Riffle: An MIT project offering faster and more secure anonymity than Tor.

4.0 Tor Project Shakeups

Shari Steele became the new director of the Tor Project in December 2015.
Jacob Applebaum resigned in May 2016, leading to a new board of directors and relocation of the headquarters to Seattle.
Lucky Green, a key contributor, left the project with critical nodes and relays.

5.0 Tor Marketplace Shifts

Nucleus Market disappeared in April 2016, suspected as an exit scam.
Sheep Marketplace owner Tomáš Jiríkovský stole approximately $40 million in BTC.
TheRealDeal market’s admin vanished, and the site became unreachable by late 2016.

6.0 Underground Economy Trends on Tor Markets

Dark web markets shifted focus from drugs to financial fraud, including malware, PII, and compromised accounts.
Prices for single and bulk accounts dropped to around $1 per account, due to increased availability and cybercriminal activity.
Marketplaces became hubs for inexperienced hackers trading tools and services.

7.0 Hacker Forum Whack-a-Mole

Hell forum reappeared with a new admin after being shut down in 2015.
Darkode forum, linked to LizardSquad, was taken down in 2015 and reappeared on clearnet.
Nulled forum was hacked, highlighting the vulnerability of such platforms.

8.0 New Dark Web ISPs and VPNs

Brass Horn Communications launched an ISP using OnionDSL to anonymize traffic through Tor.
TGVPN offers a multi-layer encrypted service using Tor or I2P, with custom cryptography and no log retention.

9.0 Cryptocurrency Movement

9.1 Bitcoin

BTC saw significant growth in 2016, doubling in value and gaining 126%.
It became the dominant currency on the dark web, with over 98% of BTC trading in China.
Stability and ease of use made BTC a preferred choice for cybercriminals and privacy advocates.

9.2 Monero

Monero was adopted by dark web markets like AlphaBay and Oasis.
It experienced a 669% price increase and reached a market cap of $185M.
Monero offers anonymous transactions via ring signatures and stealth addresses, with potential I2P integration.

9.3 Zcash

Zcash debuted in 2016 with a high initial valuation, though it declined later.
It uses zk-SNARKs for privacy, allowing transactions to be verified without revealing participants.
Zcash may become a viable alternative to BTC in 2017, though it faces limited investor interest.

10.0 Dark Web Leveraged for Attacks

Malicious traffic using Tor was observed, including DDoS, SQLi, and RCE attacks.
Tor exit nodes were used to obfuscate attacks, though not in large volumes.
Akamai recommends using WAFs to block malicious traffic while allowing legitimate Tor users.

11.0 Legal and Law Enforcement Action

George Cottrell was arrested by the FBI for dark web-related crimes.
Italian Mafia Brussels gang was taken down for MDMA trafficking.
Kyle Hall, Richard Sinclair, Stephen Rodgers were arrested for drug dealing on the dark web.
Abdullah Almashwali and Chaudhry Ahmad Farooq were indicted for large-scale drug trafficking on AlphaBay.
IcyEagle was caught selling identity fraud services.
Michael Andrew Ryan was apprehended for selling handguns via dark web markets.
In response to the Munich mass shooting, Germany’s BKA intensified efforts against dark web-based weapons trafficking.
Austria passed amendments to its Weapons Act to combat dark web weapon distribution.
Europol dismantled the NapoliGroup, a counterfeiting organization using dark web and BTC.

12.0 2017 and Beyond

Dark web markets are expected to evolve into integrated privacy-oriented social platforms.
ShadowCash is developing UMBRA, a platform with encrypted chat, wallet management, and a P2P marketplace.
Komodo is building a platform using Zcash’s zero-knowledge proofs and dPoW to enhance user anonymity.
These platforms aim to improve digital privacy and security for future dark web users and vendors.