Tormarket Hacked – Database Leaked By… Dread Pirate Roberts
Posted by: DeepDotWeb December 14, 2013 in Featured, News Updates 3 Comments
Following our previous report regarding the mutual DDOS attacks of the darknet markets, the situation has just escalated to a full marketplace Cyberwar as Dread Pirate Roberts posted a proof showing that he has the database of the competing market TOR marketplace (link to the original thread on SR2 Forums: http://silkroad5v7dywlc.onion/index.php?topic=8598.0):
=======================START QUOTE===================
To start, I would like to make this clear to everyone involved that Silk Road does not have malicious intentions or an anti-competition attitude, we actually require competition to keep us motivated and for the diversity of the network but in order to fulfill that function the competition must be a safe one which does not put people in harms way or subject to possible exploit. This post I hope will demonstrate to you why claims a market makes does not correlate to the true story and we would like to demonstrate this with Tormarket.
At this moment in time, I also want to clarify in light of recent events the full disclosure everyone deserves to know. This investigation started under the suspicion that Tormarket was behind the ongoing DDOS against Silk Road but has since taken another turn when we looked below the surface a little more. I have no conclusive proof Tormarket did or did not order the DDOS currently hitting us and personally I don’t believe I ever will so I won’t go on about this much more as it is actually not something that matters any more since we are definitely en route to fixing it if you have watched our recent developments, but over Tor such attacks are not trivial to correct. All of this is done in the name of safety and I hope the owners of Tormarket can take this seriously, go away and rethink their strategies because as I will discuss later we didn’t even put much effort in to extracting this data.
What is it I am attempting to prove?
To take it from the home page of Tormarket, I wish to publicly overturn the rumors and falsehoods of some of the below:
Quote from: TorMarketDarknet Market done right
Secure codebase, competent operators, and common sense.
Common sense I will allow that to pass as a subjective matter and how they wish to operate their market is none of my business. Competent operators – again it would depend on your individual definition of that. Secure codebase – let us put that to the test.
Let’s start with the basics
One of the most valuable pieces of any website is the database. It controls so many parts of the site and without it there could be no effective market, so we started trying to extract the information from that. Surprise surprise, it didn’t take long to grab the structure:
Code: [Select]Now we’ve had a sneak peak at their table structure, it was decided to have a trawl through the messages that vendors had sent to customers. We will list a little segment below, some vendors here might recognize their own messages with of course sensitive information removed from below.</p>
Up to this point we weren’t looking for any kind of mass data extraction, but in the interest of ensuring the users of Tormarket are safe, we had to do it anyway. The summary of some of the data we went through was to see who the top buyers were, something of equal interest to law enforcement as vendors except it is more likely a buyer will have leaked personal information on the site than a vendor. So who are the top buyers:
Code: [Select]So user icq has the highest amount of products purchased. We investigated a little further to see precisely what he bought (and we could do this for every buyer I would like to point out):</p>
Updated: 2013-12-14