Dark-Web

Definition

The dark web is the part of the internet that isn’t indexed by regular search engines and can’t be accessed with a normal browser. Instead, it requires special tools — most famously the **Tor Browser** — to reach sites with addresses ending in `.onion`.

It’s “dark” not because it’s all criminal, but because it’s intentionally hidden. Traffic is routed through multiple encrypted layers (like an onion) and relayed across volunteer-run servers, making it hard to trace who’s visiting or hosting a site.

People use the dark web for different reasons:

* **Legitimate** – Journalists communicating with sources, citizens bypassing censorship in oppressive regimes, privacy-conscious users.
* **Illicit** – Marketplaces for drugs, stolen data, counterfeit goods, hacking tools; forums for criminal groups; ransomware “leak sites” where stolen data is published if victims don’t pay.

In cybersecurity investigations, the dark web often comes into play when:

* Tracking ransomware gangs and their data leak sites
* Monitoring for stolen credentials or intellectual property for sale
* Gathering threat intelligence from criminal forums
* Linking infrastructure (like domains or email addresses) used both in the open web and in hidden services

Real-world examples:

* **Silk Road** – An infamous dark web marketplace for drugs, shut down by the FBI in 2013.
* **LockBit and ALPHV Leak Sites** – Used to publish stolen data as part of double extortion ransomware campaigns.
* **Hansa Market Takedown** – Law enforcement ran the marketplace for a month in 2017 to gather intelligence before shutting it down.

Further reading:

* Tor Project – [https://www.torproject.org/](https://www.torproject.org/)
* Europol Dark Web Report – [https://www.europol.europa.eu/activities-services/publications/internet-organised-crime-threat-assessment](https://www.europol.europa.eu/activities-services/publications/internet-organised-crime-threat-assessment)
* CISA – [https://www.cisa.gov/news-events/news/understanding-different-parts-of-web](https://www.cisa.gov/news-events/news/understanding-different-parts-of-web)
* Recorded Future: Dark Web Monitoring – [https://www.recordedfuture.com/dark-web](https://www.recordedfuture.com/dark-web)

Explore More Terms

Practice in These Games

A Rap Beef: An Intro to Security Investigations

Great for first time KC7 Players! You don't need any cybersecurity experience to do this module! 🥳 First time? This is the perfect place to start! Two hip-hop artists are in the midst of a musical ...

View Game