ZeroFox Intelligence Brief - Introduction to Deep and Dark Web Forums

ZeroFox Intelligence Brief - Introduction to Deep and Dark Web Forums

Product Serial: B-2025-06-12b

TLP:CLEAR

In this Intelligence Brief, ZeroFox researchers report on the various forums that make up the deep and dark web marketplace, leveraged by threat actors in the facilitation of cybercrime.

Standing Intelligence Requirements

For the most up-to-date list of ZeroFox’s Intelligence Requirements, please visit:

https://cloud.zerofox.com/intelligence/advisories/14956

Link to Download

View the full report here

Key Findings

• Deep and dark web (DDW) forums and marketplaces operate in areas of the internet that are less visible to the majority of users. While most of the domains found within these areas serve legitimate purposes, many facilitate illegal activities.
• Many DDW forums and marketplaces have undergone varying degrees of “professionalization,” manifested by the widespread acknowledgement of “norms” by frequenting actors and the implementation of systems such as credibility rankings, escrow, and arbitration services.
• Instant messaging (IM) applications and platforms also fulfill a vital role in facilitating cybercrime sales and services, primarily due to the ease of accessibility, large target audiences, varying degrees of moderation, and encrypted messaging.
• DDW forums and marketplaces are almost certain to continue adapting to offer the services, accessibility, and anonymity demanded by an ever-growing number of cybercriminals, as well as minimizing the threat posed by external factors such as offensive law enforcement (LE) operations.