TY - GEN
T1 - Get Rich or Keep Tryin’ Trajectories in dark net market vendor careers
AU - Booij, Tim M.
AU - Verburgh, Thijmen
AU - Falconieri, Federico
AU - van Wegberg, Rolf S.
PY - 2021
Y1 - 2021
N2 - Dark net markets are a competitive environment. As these anonymous markets enable criminals to trade illicit goods or services, this causes vendors to operate under pseudonyms, rather than real-world identities. The constant battle between market admins and law enforcement makes the typical lifespan of a market two years. When a market disappears, active vendors migrate to other markets with the intention to continue their business, or have already pro-actively done so in an effort to ensure business continuity. To secure their reputation across markets, they can try to obtain the same pseudonym on multiple markets, but other individuals could beat them to the punch. A much safer method therefore, is to generate a PGP-key and use the public key as identification across markets. This way, vendors signal their continued trustworthy and reputable service on markets to buyers. In this paper, we leverage the use of PGP-keys to map careers of dark net market vendors. We parse and analyze scraped data from over 90 dark net markets (2011-2015), and discern 2,925 unique careers. By employing group based trajectory modelling, a type of latent class analysis, we infer three different career trajectories - differentiating ‘established’, ‘challenger’ and ‘failed’ vendor careers. We show that these trajectories are heavily unbalanced in terms of longevity and success. We find that on average 80% of careers last just four months and generate very little sales. Only a small group (∼2%) of highly successful vendors have a long and uninterrupted career that lasts years and spans multiple markets. This group is also responsible for at least 31% of the total revenue in our data.
AB - Dark net markets are a competitive environment. As these anonymous markets enable criminals to trade illicit goods or services, this causes vendors to operate under pseudonyms, rather than real-world identities. The constant battle between market admins and law enforcement makes the typical lifespan of a market two years. When a market disappears, active vendors migrate to other markets with the intention to continue their business, or have already pro-actively done so in an effort to ensure business continuity. To secure their reputation across markets, they can try to obtain the same pseudonym on multiple markets, but other individuals could beat them to the punch. A much safer method therefore, is to generate a PGP-key and use the public key as identification across markets. This way, vendors signal their continued trustworthy and reputable service on markets to buyers. In this paper, we leverage the use of PGP-keys to map careers of dark net market vendors. We parse and analyze scraped data from over 90 dark net markets (2011-2015), and discern 2,925 unique careers. By employing group based trajectory modelling, a type of latent class analysis, we infer three different career trajectories - differentiating ‘established’, ‘challenger’ and ‘failed’ vendor careers. We show that these trajectories are heavily unbalanced in terms of longevity and success. We find that on average 80% of careers last just four months and generate very little sales. Only a small group (∼2%) of highly successful vendors have a long and uninterrupted career that lasts years and spans multiple markets. This group is also responsible for at least 31% of the total revenue in our data.
KW - Cybercrime
KW - Dark net markets
KW - PGP-keys
KW - Vendor careers
UR - http://www.scopus.com/inward/record.url?scp=85119063368&partnerID=8YFLogxK
U2 - 10.1109/EuroSPW54576.2021.00028
DO - 10.1109/EuroSPW54576.2021.00028
M3 - Conference contribution
SN - 978-1-6654-1013-7
T3 - Proceedings - 2021 IEEE European Symposium on Security and Privacy Workshops, Euro S and PW 2021
SP - 202
EP - 212
BT - Proceedings - 2021 IEEE European Symposium on Security and Privacy Workshops, Euro S and PW 2021
PB - IEEE
T2 - 2021 IEEE European Symposium on Security and Privacy Workshops (EuroS&PW)
Y2 - 6 September 2021 through 10 September 2021
ER -