• XSS.stack #1 – первый литературный журнал от юзеров форума

chinese forums for real shit

Chinese underground market
Chinese peddlers of malware and illegal services are in complete contrast with the Russians. First off, they do not enjoy the same level of access to tools and information because of the Great Firewall of China that controls that imposes web traffic restrictions.

Along with the language barrier, this isolates the Chinese underground communities from the rest of the world, creating more of a local market for lower-skilled hackers. Access to better tools is possible on sites hosted in Tor network by more advanced hackers, but access to them requires "jumping" the Great Firewall, a skill not many have.

A core difference from Russian communities is the fact that Chinese hackers encourage socialization and camaraderie. They help each other out and often share the source code of the tools they make for peer review purposes and in exchange for advice on how to improve it.

Because of government regulations, members of the underground forums face more challenges in doing their business. The ban on cryptocurrencies gives them fewer payment alternatives that may not hide their identity.

AliPay and bank transfers are the generally accepted payment methods advertised by forums, while Russians moved to Monero and Bitcoin for some while, spurring the emergence of cashout services that make the exchange to fiat.

"Chinese forums are also usually not as compartmentalized as their Russian counterparts, and are more community focused rather than business focused," says the report.

As for the content for sale, the Chinese have different tastes and interests. Distributed denial-of-service (DDoS) tools and remote access trojans are in high demand, as are antivirus evasion techniques and penetration testing utilities. There is also a market for programming and hacking tutorials.

The proceedings from data breaches are kept within the Chinese community, most likely because of the language barrier and the domestic technology and services, which are more difficult to understand for an outsider.

Another product commonly seen on Chinese forums are virtual private network services, which is understandable given the online access restriction.

Since the government asked VPN providers to be licensed by Chinese officials, the advertisements for these services increased on underground forums. And once the ban came into effect in March this year, the activity saw a rapid increase, the researchers noticed.
https://www.bleepingcomputer[.]com/...ent-purposes-for-russian-and-chinese-hackers/
 

The Top 5 Chinese Platforms on the Deep and Dark Web in 2023​


Chang’An Sleepless Night
Platform type: Marketplace (with an associated Telegram channel)
Launched: December 2021
Main topics: Services (hacking and money laundering), stolen PII and PHI (Protected Health Information), carding and CVV, physical items (IDs and drugs), leaked databases, and counterfeit document templates.
Chang’An Sleepless Night is a rising dark web marketplace known for its diverse listings, from stolen data to hacking services. The platform’s user-friendly interface, escrow service, and adaptability to multiple cryptocurrencies make it a preferred choice for many users.

By operating an official Telegram channel which is used to increase user engagement and share updates, it has quickly established a reputation as a reliable source within the dark web community.


Exchange Market (交易市场), also known as DeepMix
Platform type: Marketplace (originally a forum)
Launched: Founded in 2013 (as a forum), transitioned into a marketplace in 2015
Main topics: Illicit goods, hacking tools, financial fraud tools, and cybercrime services
Founded as the “Chinese Darknet Forum” in 2013, Exchange Market (交易市场), also known as DeepMix, evolved into a marketplace by 2015. The platform, which has prioritized user anonymity, offers a range of illicit goods and services, predominantly catering to Chinese users. Despite facing DDoS attacks and rebranding challenges, it has remained a significant player in the Chinese darknet ecosystem.


FREECITY
Platform type: Marketplace and forum
Launched: 2016
Main topics: Compromised data and accounts, physical and virtual goods, WeChat stolen data, credit cards (CVV & BIN no.), dark web news, digital asset information, hacking discussion, developer tools, and resource sharing
FreeCity is a multifaceted platform that operates in English, Chinese, and Korean. It is divided into two main sections – forum and marketplace, and offers a diverse range of goods and services, from compromised accounts to physical items. The operators of this site remain anonymous but maintain an active presence on Telegram.


I love cracking (52pojie)
Platform type: Forum
Launched: March 2008
Main topics: Software encryption, decryption, Android cracking, virus analysis
I love cracking (52pojie) is dedicated to software security, with a particular emphasis on hacking-related topics such as software encryption and decryption. The forum stands out for its high user activity and the quality of its posts. It has managed to thrive for over a decade in the often controversial field of software cracking, due to the proactively of its admin team. Because the forum has remained loyal to its offering, it has established a loyal following, making it a prominent Chinese platform for discussions on hacking-related topics.


Tea Horse Road Market Telegram channels
Platform type: Telegram Channel
Launched: 2021
Main topics: Trade of goods (virtual and physical), money laundering, sale of stolen data, and offering services, and jobs related to these topics
Tea Horse Road, a Chinese dark web marketplace, began operations in April 2020 and ceased in November 2021, lasting approximately 19 months. After its sudden shutdown, images of its main page surfaced in cybercrime combat reports.

Since the web platform of Tea Horse Road Market shut down, loyal vendors of this site operate Telegram channels associated with this market. The vendors now use these Telegram channels as a platform to keep this community alive and contact other vendors to trade various illicit goods and services.


 
Пожалуйста, обратите внимание, что пользователь заблокирован

The Top 5 Chinese Platforms on the Deep and Dark Web in 2023​


Chang'an Sleepless Night
Platform type: Marketplace (with an associated Telegram channel)
Launched: December 2021
Main topics: Services (hacking and money laundering), stolen PII and PHI (Protected Health Information), carding and CVV, physical items (IDs and drugs), leaked databases, and counterfeit document templates.
Chang'An Sleepless Night is a rising dark web marketplace known for its diverse listings, from stolen data to hacking services. The platform's user-friendly interface, escrow service, and adaptability to multiple cryptocurrencies make it a preferred choice for many users.

By operating an official Telegram channel which is used to increase user engagement and share updates, it has quickly established a reputation as a reliable source within the dark web community.


Exchange Market (交易市场), also known as DeepMix
Platform type: Marketplace (originally a forum)
Launched: Founded in 2013 (as a forum), transitioned into a marketplace in 2015
Main topics: Illicit goods, hacking tools, financial fraud tools, and cybercrime services
Founded as the “Chinese Darknet Forum” in 2013, Exchange Market (交易市场), also known as DeepMix, evolved into a marketplace by 2015. The platform, which has prioritized user anonymity, offers a range of illicit goods and services, predominantly catering to Chinese users. Despite facing DDoS attacks and rebranding challenges, it has remained a significant player in the Chinese darknet ecosystem.


FREECITY
Platform type: Marketplace and forum
Launched: 2016
Main topics: Compromised data and accounts, physical and virtual goods, WeChat stolen data, credit cards (CVV & BIN no.), dark web news, digital asset information, hacking discussion, developer tools, and resource sharing
FreeCity is a multifaceted platform that operates in English, Chinese, and Korean. It is divided into two main sections – forum and marketplace, and offers a diverse range of goods and services, from compromised accounts to physical items. The operators of this site remain anonymous but maintain an active presence on Telegram.


I love cracking (52pojie)
Platform type: Forum
Launched: March 2008
Main topics: Software encryption, decryption, Android cracking, virus analysis
I love cracking (52pojie) is dedicated to software security, with a particular emphasis on hacking-related topics such as software encryption and decryption. The forum stands out for its high user activity and the quality of its posts. It has managed to thrive for over a decade in the often controversial field of software cracking, due to the proactively of its admin team. Because the forum has remained loyal to its offering, it has established a loyal following, making it a prominent Chinese platform for discussions on hacking-related topics.


Tea Horse Road Market Telegram channels
Platform type: Telegram Channel
Launched: 2021
Main topics: Trade of goods (virtual and physical), money laundering, sale of stolen data, and offering services, and jobs related to these topics
Tea Horse Road, a Chinese dark web marketplace, began operations in April 2020 and ceased in November 2021, lasting approximately 19 months. After its sudden shutdown, images of its main page surfaced in cybercrime combat reports.

Since the web platform of Tea Horse Road Market shut down, loyal vendors of this site operate Telegram channels associated with this market. The vendors now use these Telegram channels as a platform to keep this community alive and contact other vendors to trade various illicit and goods services.


thanks mate. do you have the urls of these forum?
 
A core difference from Russian communities is the fact that Chinese hackers encourage socialization and camaraderie. They help each other out and often share the source code of the tools they make for peer review purposes and in exchange for advice on how to improve it.
Блипинг, пидорасы, свою пропаганду умудряются пихать даже в новости :) У нас типа никто никому не помогает и советов не дает.

Тот факт, что ни на одном рынке кроме русскоязычного не развит так бизнес, говорит просто о том, что хуево у всех наших зарубежных коллег с организацией. И к теме как к бизнесу относятся лишь единицы, для остальных это просто так - поиграться, пока не выросли или не приняли.
 
Блипинг, пидорасы, свою пропаганду умудряются пихать даже в новости :) У нас типа никто никому не помогает и советов не дает.

Тот факт, что ни на одном рынке кроме русскоязычного не развит так бизнес, говорит просто о том, что хуево у всех наших зарубежных коллег с организацией. И к теме как к бизнесу относятся лишь единицы, для остальных это просто так - поиграться, пока не выросли или не приняли.
Вот что пишут в той статье

Russian underground market
Contrary to what many people would think, most Russian cybercriminal communities are still reachable over the clearnet, with forums setting up servers in the Tor network as a backup in case of a takedown, and for users without VPN services.

Administrators resort to other methods to keep their forums up and running, and blockchain-based DNS is one of them.

On closed forums - completely private communities, access is possible upon showing the proving illegal service offered by the applicant, or if a current member vouches for them. Rippers are quickly banned and exposed for others to avoid.


Website exposing rippers, or kidalas
According to Recorded Future, the forums where Russian cybercriminals gather are well organized, and members are interested only in doing business.

They are carefully guarding their resources (read: malware source code) and adopt a money-making business strategy.

"Malicious programs on the underground, like banking trojans and loaders, are sold in the form of “builds,” which are similar to individual software licenses," Recorded Future explains.

A common practice is for the author of the malware to have full control of the source code. This not only ensures maximum monetization but also protects the property against competition creating derivative or similar malware.

The type of illegal content and services peddled on these forums is the same as always but adapted to modern times:

"Ransomware, loaders, trojans, exploit kits, installs, spam bots, web traffic, forged documents, money mules, banks accounts, and credit cards are all still present and accounted for," the report says.

However, some things have changed. For instance, large amounts of stolen data are now available via automated services, where carders can order the credit and debit card info they want without having to interact with another user.

Hosting services are the backbone for illegal services, so infrastructure that offers anonymity and is outside the jurisdiction of law enforcement, aka bulletproof and fast-flux hosting, is always in demand. Prices from a provider operating for over a decade are as little as $100 per month.
 
Many sites do not work onion and clearnet, it seems that many forums have died or switched to telegram






 
Пожалуйста, обратите внимание, что пользователь заблокирован
Хорошая борда много технической информации, как переводы так и уникальной

bbs.pediy.com (bbs.kanxue.com)

Но это не про блек =)
 


Напишите ответ...
  • Вставить:
Прикрепить файлы
Верх