Jump to content

AlphaBay

Page protected with pending changes
From Wikipedia, the free encyclopedia

AlphaBay
AlphaBay login screen
Type of site
Darknet market
Available inEnglish
OwnerDeSnake
Created byDeSnake[1]
RevenueOver USD$23M (total over operation)[2]
CommercialYes
RegistrationRequired
Users400,000+[3]
LaunchedSeptember 2014[2]
Current statusOffline

AlphaBaywas adarknet marketoperating at different times between September 2014 and February 2023.[2][4][5]At times, it was both anonion serviceon theTor networkand an I2P node onI2P.After it was shut down in July 2017 following law enforcement action in the United States, Canada, and Thailand as part ofOperation Bayonet,it was relaunched in August 2021 by the self-described co-founder and security administrator DeSnake.[1][6][7]The alleged original founder, Alexandre Cazes, a Canadian citizen born on 19 October 1991,[2][8]was found dead in his cell in Thailand several days after his arrest, with police suspectingsuicide.[9][10][11][12]

History

[edit]

AlphaBay reportedly launched in September 2014,[2]pre-launched in November 2014 and officially launched on December 22, 2014. It saw a steady growth, with 14,000 new users in the first 90 days of operation. The darknet informer website Gwern.net placed AlphaBay Market in the top tier of markets regarding the 6-month survival probability and it had proven to be successful.[13]In October 2015, it was recognized as the largest online darknet market according to Dan Palumbo, research director atDigital Citizens Alliance.[14]

Non-standard services included customizable digital contracts around building reputations.[15]

In May 2015, the site announced an integrated digital contracts and escrow system.[16]The contract system allows users to make engagements and agree to provide services in the future, according to the terms of thecontract.

By October 2015, AlphaBay had over 200,000 users,[3]and a claimed 40,000 sellers.[17]

At the time of its demise in July 2017, AlphaBay had over 400,000 users,[3]and around 300,000 listed items on their website.[18]

AlphaBay is noteworthy in the world of darknet markets for accepting othercryptocurrencyin addition tobitcoin;support forMonero,supposedly more anonymous, was implemented at the end of August 2016.[19]It also acceptedEthereum.[17]

Site breaches

[edit]

In April 2016, AlphaBay'sAPIwas compromised, leading to 13,000 messages being stolen.[20]In January 2017, the API was once again compromised, allowing over 200,000 private messages from the last 30 days and a list of usernames to be leaked. The attack was from a singlehackerwho was paid by AlphaBay for the disclosure. AlphaBay reported that the exploit had only been used in conjunction with this attack and not used previously.[21]

News coverage

[edit]

On March 28, 2015, AlphaBay Market made the news for selling stolenUberaccounts.[22][23]Uber made a statement regarding a potential data breach:

"We investigated and found no evidence of a breach. Attempting to fraudulently access or sell accounts is illegal and we notified the authorities about this report. This is a good opportunity to remind people to use strong and unique usernames and passwords and to avoid reusing the same credentials across multiple sites and services."

In October 2015, the London-basedtelecommunicationscompanyTalkTalksustained amajor hack.[24]The stolen data was put for sale on AlphaBay Market, which led to the arrest of a 15-year-old boy.[25]TalkTalkCEODido Hardingissued the following statement:

"TalkTalk constantly updates its systems to make sure they are as secure as possible against the rapidly evolving threat of cyber crime, impacting an increasing number of individuals and organisations. We take any threat to the security of our customers' data extremely seriously and we are taking all the necessary steps to understand what has happened here."

In August 2017, AlphaBay was revealed as a possible venue by which one of the perpetrators of the2017 Jewish Community Center bomb threatsmay have sold a "School Email Bomb Threat Service." This individual, Michael Kadar, made 245 threatening calls to schools and community centers. Criminologist David Decary-Hetu noted this event as notable for being the first example of criminal services being sold over a darkmarket. He said, "All the cases I have heard of so far turned out to be law enforcement trying to find people of interest," making this case unique in his experience to that point.[26]

Seizure and shutdown

[edit]
Main article:Operation Bayonet (darknet)

By July 2017, AlphaBay was ten times the size of its predecessorSilk Road[27](which was busted in October 2013), had over 369,000 listings,[2]400,000 users,[3]was facilitating US$600,000-$800,000 of transactions per day,[28]and had reportedly built a strong reputation.[2][29]However, a series of elementaryoperational securityerrors led to its downfall:

Notice left on the Tor hidden service after AlphaBay closed
  • About the time the service first began in December 2014, Cazes used hisHotmailaddresspimp_alex_91@hotmailas the 'From' address in system-generated welcome and password reset emails, which he also used for hisLinkedInprofile and his legitimate computer repair business in Canada.[2]
  • Cazes used apseudonym,Alpha02, to run the site which he had previously used (e.g., in carding and tech forums) since at least 2008, and variously advertised this identity as the "designer", "administrator" and "owner" of the site.[2][30]
  • When Cazes was arrested, he was logged into his laptop performing an administrative reboot on an AlphaBay server in direct response to a law-enforcement-created artificial system failure; furthermore, encryption was wholly absent on that laptop.[2][31]
  • Cazes' laptop reportedly contained an unencrypted personal net worth statement mapping all global assets across multiple jurisdictions, conveniently leading police to complete asset seizure.[2]
  • The servers were hosted at a company in Canada directly linked to his person.[2]
  • The servers contained multiple constantly open (unencrypted) hot cryptocurrency wallets.[2]
  • Cazes' flashy use of proceeds to purchase property, passports and luxury cars and frequent online boasting about his financial successes, including posting videos of himself driving luxury cars acquired through illegal proceeds, not only revealed his geographical location, but also made denying connection to the service impossible.[2]
  • Assets acquired through proceeds were held in a variety of accounts directly linked to Cazes, his wife and companies they owned in Thailand (the jurisdiction in which they lived), as well as directly held personal accounts in Liechtenstein, Cyprus, Switzerland and Antigua.[2]
  • Cazes' statements about the goal of the site — "launched in September 2014 and its goal is to become the largest eBay-style underworld marketplace" — helped to legally establish intent.[2]

Timeline

[edit]

Law enforcement took at least one month to obtain a US warrant, then over one month to obtain foreign warrants, prepare for and execute searches and seizures in Canada and Thailand:[2]

  • Early May 2017: Law Enforcement verifiably active on the site since at least this period.[2]
  • 1 June 2017: Warrant issued by United States District Court for the Eastern District of California for racketeering, narcotics trafficking, identity theft and access device fraud, transfer of false ID, trafficking in illegal device making equipment, and conspiracy to commitmoney laundering.[2]
  • 30 June 2017: Warrant is issued for Cazes' arrest in Thailand at US request.[32][33]
  • 5 July 2017
    • Canadian police raidEBX Technologiesin Montreal, Cazes' Canadian company and the reported location of the physical servers, as well as two residential properties in Trois-Rivières.[34]
    • Cazes is arrested in Bangkok at his dwelling at Phutthamonthon Sai 3 Road in Thawi Watthana district which is searched by the Royal Thai Police, with the help of the FBI and DEA.[2][32]
  • 12 July 2017: Cazes' suspected suicide by hanging while in custody at Thailand's Narcotics Suppression Bureau headquarters in Laksi district, Bangkok, was reportedly discovered at 7AM. He was due to face US extradition.[2][32]
  • 16 July 2017: Cazes' wife was reported as having been charged withmoney laundering.[35][36]
  • 20 July 2017; U.S. Attorney GeneralJeff Sessionsannounces shutdown of the site.[37]
  • 23 July 2017: Narcotics Suppression Bureau chief is interviewed and suggests that more suspects will be arrested soon.[38]

Relaunch

[edit]

AlphaBay was relaunched as early as 8 August 2021.[39]Details of the new operation surfaced after a conversation betweenWiredand a user with the same verifiedpublic keyas a former site administrator for AlphaBay. Using the alias DeSnake, the former vendor and self-described co-founder of the original AlphaBay now claims to operate the marketplace, placing a higher emphasis onoperations securitythan the previous administration, stating "there is no overkill" regarding the site.[1]

As part of the site's relaunch, multiple new features have been advertised and new rules announced. Notable among new features are AlphaGuard (which allegedly prevents users from losing funds even if seizures on all servers occur at the same time), an automatic system to resolve disputes between buyers and sellers, exclusive use ofMonerowallets, and the offering ofI2Pmirrors.[1]Concerning rules, items newly prohibited from sale includeCOVID-19 vaccines,firearms,products containing the narcoticfentanyl,pornography, and"hitman services".Furthermore, there is a ban on discussions of any public or private information related to the governments, organizations, or people ofRussia,Belarus,Kazakhstan,Armenia,andKyrgyzstan.[40]This has led to loose speculation that there is a connection between the site operators and the governments of these nations.[1]

In early February 2023, the market went into lockdown, preventing users with2FAverification from logging in. Accounts affected included all of the site staff and vendors. As admin team member TheCypriot explained in aRedditpost, the site went into partial lockdown due to one of itscanariesnot being signed in time by DeSnake.[41]They did not reappear to rectify the problem and have not been heard from since. With its owner missing and staff unable to sign the canary to lift the lockdown themselves, Alphabay de facto ceased operations. While a number of theories about the disappearance have been proposed, none have been substantiated with evidence.[42]

Further reading

[edit]
  • Greenberg, Andy(15 November 2022).Tracers in the Dark: The Global Hunt for the Crime Lords of Cryptocurrency.Knopf Doubleday Publishing Group.ISBN978-0-385-54810-6.
  • Greenberg, Andy (October 25, 2022)."The Hunt for the Dark Web's Biggest Kingpin, Part 1: The Shadow".Wired.
  • Greenberg, Andy (November 1, 2022)."The Hunt for the Dark Web's Biggest Kingpin, Part 2: Pimp_alex_91".Wired.
  • Greenberg, Andy (8 November 2022)."The Hunt for the Dark Web's Biggest Kingpin, Part 3: Alpha Male".Wired.
  • Greenberg, Andy (15 November 2022)."The Hunt for the Dark Web's Biggest Kingpin, Part 4: Face to Face".Wired.
  • Greenberg, Andy (22 November 2022)."The Hunt for the Dark Web's Biggest Kingpin, Part 5: Takedown".Wired.

References

[edit]
  1. ^abcdeGreenberg, Andy(September 23, 2021)."He Escaped the Dark Web's Biggest Bust. Now He's Back".Wired.Condé Nast Publications.Archivedfrom the original on September 23, 2021.
  2. ^abcdefghijklmnopqrstu"Forfeiture Complaint".Justice.gov. 20 July 2017. p. 27.Archivedfrom the original on 23 September 2020.Retrieved23 July2017.
  3. ^abcdCimpanu, Catalin (July 14, 2017)."AlphaBay Dark Web Market Taken Down After Law Enforcement Raids".Bleeping Computer.Archivedfrom the original on July 14, 2017.
  4. ^"AlphaBay Market".DarkNetLive.Archivedfrom the original on 2023-06-21.Retrieved2023-06-21.
  5. ^"dark.fail: Is a.onion site online?".Archivedfrom the original on 2022-07-16.Retrieved2023-06-21.
  6. ^Ilascu, Ionut (August 12, 2021)."Notorious AlphaBay darknet market comes back to life".Bleeping Computer.Archivedfrom the original on August 12, 2021.
  7. ^Statt, Nick (July 14, 2017)."Dark Web drug marketplace AlphaBay was shut down by law enforcement".The Verge.Vox Media.Archivedfrom the original on July 15, 2017.
  8. ^Tu Thanh Ha; Freeze, Colin (July 20, 2017)."Canadian allegedly behind shuttered Dark Web market AlphaBay".The Globe and Mail.The Woodbridge Company.Archivedfrom the original on July 21, 2017.
  9. ^Farivar, Cyrus (July 13, 2017)."AlphaBay taken down by law enforcement across 3 countries, WSJ says".Ars Technica.Condé Nast.Archivedfrom the original on July 13, 2017.
  10. ^Murdoch, Lindsay (July 15, 2017)."AlphaBay suspected co-founder Alexandre Cazes found dead in Thai jail".Brisbane Times.Nine Entertainment.Archivedfrom the original on July 16, 2017.Police said evidence points to Mr Cazes having taking his own life.
  11. ^"Massive blow to criminal Dark Web activities after globally coordinated operation".20 July 2017.Archivedfrom the original on 24 September 2020.Retrieved20 July2017.
  12. ^"AlphaBay, the Largest Online 'Dark Market,' Shut Down".Department of Justice, Office of Public Affairs. 20 July 2017.Archivedfrom the original on 23 September 2020.Retrieved21 July2017.
  13. ^Branwen, Gwern (30 October 2013)."Black-market risks - Gwern.net".Gwern.Archivedfrom the original on 22 November 2019.Retrieved19 January2017.
  14. ^"Buying Drugs Online Remains Easy".Southwest Coalition.Archivedfrom the original on 2020-09-23.Retrieved2015-11-02.
  15. ^Francis, Ryan (13 October 2016)."Darkweb marketplaces can get you more than just spam and phish".Archived fromthe originalon 16 October 2016.Retrieved16 October2016.
  16. ^Cox, Joseph (May 1, 2015)."This Dark Web Market Just Started Offering Contracts for Anything".Vice.Vice Media.Archivedfrom the original on November 8, 2020.
  17. ^ab"Office of Public Affairs | AlphaBay, the Largest Online 'Dark Market,' Shut Down | United States Department of Justice".justice.gov.2017-07-20.Archivedfrom the original on 2020-09-23.Retrieved2023-08-30.
  18. ^"Dark net markets AlphaBay and Hansa shut after huge international police sting".Sky News.Archivedfrom the original on 2023-08-30.Retrieved2023-08-30.
  19. ^C. Aliens (August 23, 2016)."AlphaBay and Oasis Markets to Begin Accepting Monero for Payments".Archived fromthe originalon November 5, 2016.
  20. ^Cox, Joseph (April 27, 2016)."Vulnerability in Huge Dark Web Marketplace Exposes Private Messages".Vice.Vice Media.Archivedfrom the original on April 28, 2016.
  21. ^Murdock, Jason (January 24, 2017)."AlphaBay leak: Over 200,000 private messages from Dark Web drugs marketplace hacked".International Business Times.IBT Media.Archivedfrom the original on January 25, 2017.
  22. ^Cox, Joseph (March 27, 2015)."Stolen Uber Customer Accounts Are for Sale on the Dark Web for $1".Vice.Vice Media.Archivedfrom the original on November 8, 2020.
  23. ^Nield, David (March 28, 2015)."Stolen Uber accounts on sale for $1 each".Digital Trends.Digital Trends Media Group.Archivedfrom the original on March 28, 2015.
  24. ^Brian, Matt (October 23, 2015)."TalkTalk hacked in 'significant and sustained cyberattack'".Engadget.AOL.Archivedfrom the original on October 23, 2015.
  25. ^Osborne, Charlie (October 27, 2015)."15-year-old arrested over TalkTalk hack".ZDNet.CBS Interactive.Archivedfrom the original on October 27, 2015.
  26. ^Gurman, Sadie (August 8, 2017)."Docs: Bomb threats suspect offered services on dark net".Associated Press.Archivedfrom the original on August 17, 2017.
  27. ^Leyden, John (July 20, 2017)."Cops harpoon two dark net whales in megabust: AlphaBay and Hansa".The Register.Situation Publishing.Archivedfrom the original on July 20, 2017.
  28. ^Popper, Nathaniel (July 6, 2017)."AlphaBay, Biggest Online Drug Bazaar, Goes Dark, and Questions Swirl".The New York Times.Archivedfrom the original on July 7, 2017.
  29. ^Leovy, Jill (July 20, 2017)."AlphaBay sold drugs, guns and hacking tools online — until a sting operation shut it down".Los Angeles Times.Archivedfrom the original on July 21, 2017.
  30. ^Cox, Joseph (July 20, 2017)."Alleged Dark Web Kingpin Doxed Himself With His Personal Hotmail Address".Vice.Vice Media.Archivedfrom the original on November 9, 2020.
  31. ^McCarthy, Kieren (July 20, 2017)."Alphabay shutdown: Bad boys, bad boys, what you gonna do? Not use your Hotmail..."The Register.Situation Publishing.Archivedfrom the original on July 20, 2017.
  32. ^abc"Dead Canadian fugitive lived in Thai luxury".Bangkok Post.July 14, 2017.Archivedfrom the original on July 14, 2023.RetrievedOctober 15,2021.
  33. ^Ngamkham, Wassayos (July 12, 2017)."Canadian drug suspect found hanged in cell".Bangkok Post.Archivedfrom the original on July 14, 2023.RetrievedOctober 15,2021.
  34. ^"RCMP's 'Dark Web' investigation leads to searches in Montreal, Trois-Rivières".Montreal Gazette.Postmedia Network.July 5, 2017.Archivedfrom the original on July 5, 2017.
  35. ^Swenson, Kyle (July 18, 2017)."Suspected AlphaBay founder dies in Bangkok jail after shutdown of online black market".The Washington Post.Archivedfrom the original on July 20, 2017.
  36. ^"Thailand seizes $21 million in assets from dead founder of dark net marketplace AlphaBay".Reuters.Thomson Reuters.July 24, 2017.Archivedfrom the original on June 9, 2018.
  37. ^"Sessions on dark web Alphabay and Hansa shut down".BBC News.BBC.July 20, 2017. Archived fromthe originalon July 23, 2017.
  38. ^"9 nations join probe into 'darknet' site".Bangkok Post.July 24, 2017.Archivedfrom the original on July 14, 2023.RetrievedJuly 24,2017.NSB poised to pounce on more suspects
  39. ^"AlphaBay Darknet Market is Back!".linkedin.Archivedfrom the original on 2021-10-22.Retrieved2021-10-22.
  40. ^"AlphaBay Marketplace Re-emerges".Flashpoint.2021-08-10.Archivedfrom the original on 2021-10-22.Retrieved2021-10-22.
  41. ^"A Slow Burn: Exploring the Uncertain Fate of AlphaBay 2".Tailored Access.2023-05-08.Archivedfrom the original on 2023-05-21.Retrieved2023-09-14.
  42. ^"What Really Happened to AlphaBay and DeSnake?".DarknetOne.2023-05-29.Archivedfrom the original on 2023-09-14.Retrieved2023-09-14.

See also

[edit]
Retrieved from "https://en.wikipedia.org/w/index.php?title=AlphaBay&oldid=1235127638"