HomeNewsHackers now have the access of most-secured corporate data files on Dark Web

Hackers now have the access of most-secured corporate data files on Dark Web

Reader's Pick

Cyber criminals now have access to the most-secured data files used to facilitate confidential communication between organisations’ servers and clients’ computers on the Dark Web, say researchers.

According to the team from Georgia State University and the University of Surrey, a thriving marketplace for Secure Sockets Layer (SSL) and Transport Layer Security (TLS) certificates exists on a hidden part of the Internet.

SSL and TLS are security technology (https protocol) that protects the transfer of data and information between computers and servers.

Networked machines use keys and SSL/TLS certificates to identify and authenticate themselves when connecting to each other, much like humans employ user names and passwords to go online.

- Advertisement -

According to the researchers, when these certificates are sold on the darknet, they are packaged with a wide range of crimeware that delivers machine identities to cybercriminals who use them to spoof websites, eavesdrop on encrypted traffic, perform attacks and steal sensitive data, among other activities.

“One very interesting aspect of this research was seeing TLS certificates packaged with wrap-around services — such as Web design services — to give attackers immediate access to high levels of online credibility and trust,” informed lead author David Maimon, Associate Professor in Georgia State.

A search of five marketplaces in the darknet uncovered 2,943 mentions for SSL and 75 for TLS.

In comparison, there were just 531 mentions for ransomware.

- Advertisement -

It was surprising to discover, he added, how easy and inexpensive it is to acquire extended validation certificates, along with all the documentation needed to create very credible shell companies without any verification information.

“This study found clear evidence of the rampant sale of TLS certificates on the Dark Net,” said Kevin Bocek, Vice President of Security and Threat Intelligence for cyber security firm Venafi.

“Every organisation should be concerned that the certificates used to establish and maintain trust and privacy on the Internet are being weaponised and sold as commodities to cyber criminals.”

close

Stay on top of Budget 2023 with our newsletter

We don’t spam! Read our privacy policy for more info.

close

Stay on top of Budget 2023 with our newsletter

We don’t spam! Read our privacy policy for more info.

- Advertisement -

Read latest Business News and Startup news on TechGraph. Watch live and latest news on TechGraph TV. Follow us on Facebook or follow us on Twitter and Instagram. Listen audio news from TechGraph Briefings on Spotify, Google Podcast, Amazon Music & on Apple Podcast.
 

Krishna Mali
Krishna Mali
Founder & Editor of TechGraph.

Latest News

Promoted Links

Related Stories

Japan approves 26 trillion yen as economic stimulus package to combat overseas risks

Japan's cabinet approved an economic stimulus package worth 26 trillion yen ($2...

Sino-US trade war offers Europe’s chance to bank more Chinese reserves: Analysis

Should European countries want the euro to replace the dollar as the world's do...

1Win App: Review India Apk for Android and iOS

The company 1Win has been successfully operating in the markets of many countri...

Employees union seeks FIR against Jet Airways boss Naresh Goyal, Vinay Dube and on SBI Chairman

The employee union of Jet Airways, which is facing its worst crisis, Friday sou...

Samsung Electronics asks its shareholders to use electronic voting for upcoming AGM

Technology giant Samsung Electronics has adopted electronic voting for the firs...

Rahul Gandhi hits on RCEP says, ‘Make in India’ has become ‘Buy from China’

Asserting that "Make in India" has become "Buy from China," Congress leader Rah...

NASA astronauts to carry first ever all-female spacewalk on 29 March

Two NASA astronauts are scheduled to carry out the first ever all-female spacew...

Google joins Progcap $40 million funding round

Progcap, a New Delhi-based fintech platform for small and mid-size businesses (...

How AI Is Crucial For Business Strategy Management

There is no doubt that AI has been reshaping the business strategies world over...

Ampere Electric to setup e-mobility manufacturing plant in Tamil Nadu

Electric Mobility Company Ampere Electric has announced a phased investment pot...