A new site was discovered on the dark web that allows hackers to upload stolen data and sell the data to criminals or criminal groups.
The site, called Ran$umBin, models the user-friendly themes of the crowd-sourcing movement in an apparent attempt to bring best practices of established businesses to the criminal operations. The website is billed as a ‘one-stop' ransom marketplace and receives a commission on data that criminals upload to extort ransomware victims.
Cymmetria's head of threat intelligence research, Nitsan Saddan, told SCMagazine.com that the site advertised on Twitter, although the Twitter account went silent in February. The site launched on the dark web two months ago.
The ease with which criminals can post information opens up the door to repeated extortion of victims, although the site claims it will remove user information from the Ran$umBin platform once victims pay ransom.
“Once the fee has been paid we will remove your information from our site. Note: the reason our site is not always full of DOXs is because we remove them,” the dark web site stated. However, Saddan cautioned potential victims against placing too much stock in these reassurances. “These are criminals,” he warned.
Ran$umBin also offers a service that allows criminals to request the personal information about an individual target for $150.
