Overall, sports services made up 15% of accounts in the streaming category that were listed for sale. The high volume of listings for hacked credentials for Russian streaming services were limited to Russian markets, which explains the lower prices (60% less on average). Streaming was by far the largest category in our dataset, with 1,174 listings of accounts for sale across 150 services.
As of 2023’s first quarter, top-quality malware sold for $4,500 per 1,000 installations. High-quality malware with a slightly lower success rate went for $1,500–$1,600 (depending on the target region), and medium-quality malware with a 70% success rate sold for up to $700. The company’s comprehensive security portfolio includes leading endpoint protection and a number of specialized security solutions and services to fight sophisticated and evolving digital threats. Over 400 million users are protected by Kaspersky technologies and we help 270,000 corporate clients protect what matters most to them. Such information can be used for financial gain or for doxing, which is the public de-anonymization of a person online. In recent years, there’s been significantly higher turnover in dark web marketplaces.

It shows the top 20 only, to see the full list download the data sheet. If we were to exclude data from Russian markets then PayPal would be tied with NordVPN as the most popular brand. More generally, payment services were highly prevalent, even with bank accounts and credit cards excluded.
Most Popular
One of the biggest problems cybersecurity teams face isn’t a lack of tools — it’s too many alerts. Although some of these markets prohibit certain extreme content such as violence or exploitation, most operate with very few rules beyond ensuring the security and anonymity of their users. Given the rise of digitalisation (today we live online and our digital identity is an extension of the real one), it is always important to remember the significance of cyber hygiene and protection. We must be aware and promote safe practices, not only at work but also in our daily lives.
Over a third (35%) of the 148 listings in this category were for these four platforms, which was an outsize proportion given we found account details for 36 learning platforms in total. Codecademy account credentials were the most frequently offered for sale, with 18 listings. There was also a wide spread in average prices across the 20 most popular brands, ranging from around $2 to $18. The larger international platforms were generally at the higher end of the price range (Netflix, Hulu, Spotify, HBO, YouTube and Prime Video all had average prices over $10).
Darknet Market Price Index: 2018 Report
In the last year, it seems like new markets are opening for business every month, each promising better security, or trying to make it big with a new gimmick. We’ve noticed an increasing number of markets also hosting a forum section on their website, encouraging product and vendor reviews, as well as generating discussion around various fraud “methods”. In April 2023, ZeroFox, a US-based cybersecurity company, acquired LookingGlass for an undisclosed amount. With this acquisition, ZeroFox aims to enhance its presence in the cybersecurity market and offer a strong end-to-end external cybersecurity platform. LookingGlass Cyber Solutions, Inc. is a US-based cybersecurity company that delivers comprehensive threat intelligence services, including dark web intelligence, to help organizations mitigate risks. Bohemia, Nemesis and, to a lesser extent, Blacksprut were the three biggest darknet markets for hacked payment platform credentials, playing host to 49% of all such listings.
According to a recent trend, the dark marketplaces faced a decline in revenue. Chainanalysis, a blockchain analysis firm, conducted research that shows that the revenue decreased from $3.1 billion (2021) to $2 billion (2024). On the dark web, you don’t need to be a technical expert to design ransomware, and that’s dangerous. Even people with little to no knowledge can buy ready-made ransomware and launch attacks on their victims.
Is There A Future For Dark Web Marketplaces?

Data sold on the dark market can be used for extortion, execution of scams and phishing schemes, and direct theft of money. Certain types of data, such as access to personal accounts or password databases, can be also be abused for reputational harm and other types of social damage, including doxing. Although, when it comes to ransomware, most sellers provide this on a Cybercrime-as-a-Service (CaaS) basis for a rental fee. CyberNews researchers found it was possible to buy ransomware building packages designed for attacking large corporates for a monthly $800 (£645) fee. The most expensive items on the cybercrime shopping list were banking Trojans.
Cybercriminals Train AI Chatbots For Phishing, Malware Attacks

The following table shows which hacked account credentials were most popular on the darknet markets in terms of individual brands. For this latest report, we have switched our primary focus from the average pricing of hacked accounts on the darknet markets to investigating which stolen log-ins were most frequently listed for sale. By A Zaunseder 2020 Cited by 2 This points to the application of mechanisms for automatic price adaptations on the market level. Prices range between 500 (360) and 750 for doses spurdomarket darknet market of AstraZeneca, An advert on one marketplace claiming to sell Covid-19 vaccines. The best darknet hit-for-hire idea I’ve seen is the one that uses a prediction market.
How Complex Are Dark Web Marketplaces Currently?
According to a study by the IT Association, the scope and quality of attacks on companies have increased dramatically. The security experts believe that in 2018 alone cybercriminals generated worldwide revenues of at least US$1.5 trillion – more than the gross domestic product generated by Spain or Australia, for instance. Where listings offered a selection of accounts at specific prices, each account was treated as an individual listing.

Russian Darknet Markets
BlackSprut placed first in a recent ranking of Dark Web marketplaces based on the amount of money deposited between January and November 2022. Known for drug trafficking and its alleged links to Russia, BlackSprut was the subject of a media controversy when several billboards for the marketplace were spotted in Moscow in early 2023. According to news reports at the time, it was unclear if these were paid ads or if the electronic billboards were hacked.
New Dark Web Pricing Analysis From Flashpoint
Stolen documents of this nature – intercepted in the mail, for example, or stolen and sold to criminals by corrupt officials – fetch very high prices. Genuine physical identity documents, such as passports and drivers licenses, are incredibly valuable for identity theft. Typically this means fraudulently opening lucrative lines of credit in the passport-holder’s name, which is then swiftly drained, leaving the unwitting victim with a huge debt. Log-ins for everyday services like Netflix and Spotify primarily offer a route into potential identity theft, since it remains so common for people to reuse their passwords. Widespread password re-use across multiple accounts means hackers only need one set of login details to run a credential stuffing attack 1 and instantly gain access to many more. Moreover, demand for the login credentials of other online services such as Netflix, HBO Max, and Hulu has increased, leading to an influx of information for sale on the Dark Web.
AI On The Frontline In Iberpay’s Fight Against Financial Fraud
BidenCash was launched in 2022, and since it became a hot spot for cybercriminals to sell and buy illegal things, including stolen card information and personal data. However, in June 2025, BidenCash’s relevant domains (around 145) were seized by the US Department of Justice. Whether you want some pharmaceutical products (drugs) or digital items, you will probably find the products here, and that too at affordable prices. Vice City listens to the problems faced by its customers and vendors and solves them so that they can keep using the platform with ease. To access the marketplace, dark web users must register first and pass the CAPTCHA test to prove they are human. Just as there are new entrants, the dark web has its veteran markets too, and Brian’s Club is one such market.
- Find out more about DARKNET (Darknet) prices and information here on OKX today.
- The company has investigated twelve relevant platforms and forums on the underground web.
- These tools scan dark web forums and marketplaces for any signs of your compromised credentials.
- Given the rise of digitalisation (today we live online and our digital identity is an extension of the real one), it is always important to remember the significance of cyber hygiene and protection.
- The following table shows the online payment platforms whose hacked account credentials were most frequently listed for sale on the darknet markets.
- This causes websites to crash or gamers to be booted out of live-action online games.
The Dark Web Is Flooded With Offers To Purchase Corporate Network Access
Kraken, Nemesis and Kingdom markets were home to the most stolen VPN credentials, with 60% of all such listings found on these three sites. The goal of our research was to determine which accounts were most popular with cybercriminals and therefore most at risk of hacking. However, you can trace its roots to the development of technologies like the Tor network or Freenet. In March 2000, an Irish grad student named Ian Clarke created the software application, Freenet.