Markets for Cybercrime Tools and Stolen Information: Hackers' Bazaar

Abstract

Markets are good because they facilitate economic efficiency, but when that efficiency facilitates criminal activity, such "black markets" can be deemed harmful. Criminal activities in cyberspace are increasingly facilitated by burgeoning black markets in both the tools (e.g., exploit kits) and the take (e.g., credit card information). As with most things, intent is what can make something criminal or legitimate, and there are cases where goods or services can be used for altruistic or malicious purposes (e.g., bulletproof hosting and zero-day vulnerabilities). This report describes the fundamental characteristics of these markets and how they have grown into their current state in order to give insight into how their existence can harm the information security environment. Understanding the current and predicted landscape for these markets lays the groundwork for follow-on exploration of options that could minimize the potentially harmful influence these markets impart.

Open PDF

Document Details

Document Type
Technical Report
Publication Date
Jan 01, 2014
Accession Number
ADA603661

Entities

People

  • Andrea A. Golay
  • Lillian Ablon
  • Martin C. Libicki

Organizations

  • RAND Corporation

Tags

DTIC Thesaurus Topics

  • Computer Networks
  • Computer Program Documentation
  • Computer Program Reliability
  • Computer Programs
  • Computers
  • Cyberattacks
  • Cybersecurity
  • Cyberspace Operations
  • Electronic Commerce
  • Electronic Mail
  • Electronic Messaging
  • Geography
  • Internet
  • National Security
  • Social Media
  • Text Messaging
  • Web Browsers

Readers

  • Cybersecurity.
  • Naval Personnel Management
  • Political Violence and Terrorism Studies.

Technology Areas

  • Cyber