Skip to content

What is the dark web and how does it work?

The dark web is the underworld of the internet. A place where criminality thrives and anything is available—for a price.

Nobody knows for sure how large the dark web is. The best estimates suggest dark web markets handle around $1.7 billion annually. Data accounts for a huge chunk of that activity.

Dark websites buy and sell every type of personal data, from credit card numbers to voter registrations. Criminals use that data to profile targets and make cyber attacks more deadly.

That’s why understanding the dark web is a cybersecurity must. Companies and private users need protection against data theft and know how to respond if their data is compromised.

This blog will explore the darkest corners of the web. We will examine the dark web and how it differs from the deep web. We will also provide tips for protecting your data from dark web sellers.

Key takeaways

  • The dark web includes web content that search engines cannot access and users cannot reach with standard browsers.

  • Dark web content differs from the surface web, which is accessible via Google and browsers. The deep web is not indexed by search engines but can be accessed by browsers. The dark web is inaccessible without a Tor browser.

  • The dark web initially sought to evade censorship and ensure privacy. However, it later became linked to criminality as anonymous marketplaces and cryptocurrencies emerged. Law enforcement bodies routinely close markets, but buying and selling continues.

  • Goods available on the dark web often include narcotics, counterfeit medications, weapons, and stolen data. Users can purchase almost any illegal items via anonymous payment methods. Many customers are cybercriminals, intent on leveraging personal data to access bank accounts or company networks.

  • Safeguard data to keep it away from dark web sellers. Security measures include using VPNs, applying strong password policies, and controlling network access. Businesses should use dark web monitoring to detect potential data breaches early and mitigate the risk.

Dark web definition

The dark web refers to encrypted internet sites that are not indexed by traditional search engines. Users can only access dark web content with the Tor browser.

This browser anonymizes a user’s identity and traffic by encrypting and “bouncing” data around a series of globally distributed nodes. This process, known as onion routing, makes it difficult for outsiders to tell what content users access, enabling surveillance-free transactions or communication.

How does the dark web work?

The public internet or surface web is constructed from visible servers and web content identified by public IP addresses.

The dark web also features server-hosted content, but dark web sites lack standard identifiers or are excluded from indexing by website owners. Search engines cannot dark web sites to their indexes and search results.

Almost 99% of web content is thought to evade search engines. This includes data protected by password portals, obsolete files, and anything Google’s algorithms decide is irrelevant. However, not all this data qualifies as part of the dark web.

To be part of the dark web, sites must be invisible to a standard web browser and search engines.

How the dark web ensures anonymity

The dark web requires non-standard protocols and encryption techniques. Browsers like Tor (The Onion Router) use special protocols to generate encrypted entry points. These protocols use a layered encryption model. This wraps data packets in many layers.

Tor also plots complex pathways for dark web data. As data passes between nodes, layers of encryption peel away, like the skin of an onion. There is no traceable connection between the entry point and the destination. Users remain anonymous as long as Tor operates.

Tor differs from standard browsers in other ways. No identifiable traffic passes between users and their ISP. Tor clears cookies and browsing data after every session. It also disables geolocation features that can reveal a user’s location.

What is the dark web and how does it work scheme

Standard browsers can access most internet content, even if it does not appear in Google results. But the dark web is different.

Experts estimate the dark web comprises around 0.03% of unindexed content. The amount of hidden data is rising, though, and even 0.03% is a large amount of information.

Difference between surface web, deep web, and dark web

Before we dive deeper, let’s clear up a common misconception by defining some key terms. We cannot talk about the “dark web” without understanding how it excludes the surface web and the deep web.

surface web deep web dark web

Surface web

The surface web is the outer layer of the internet that web browser users see. When you run a Google query, the search engine delivers results from the surface web.

Algorithms process indexed data, assessing its relevance and quality. In the process, search engines miss a huge amount of data. Ideally, this doesn’t matter because indexers collect the most relevant information and ignore everything else.

For instance, Google might return a set of Amazon landing pages for a query about sports jackets. Searches won’t include back-end metadata or private vendor pages that require passwords. Users only see publicly accessible product listings.

Estimates vary, but it’s safe to say the surface web comprises about 10% of the total internet.

Deep web

The deep web comprises internet data that is not indexed by search engines. Deep web data is not really “hidden” from ordinary browsers. Content may only be accessible with login credentials, but you don’t need Tor or similar layered encryption tools.

Deep web content includes data stored behind log-in portals or paywalls. Social media profiles are a good example. However, most deep web content is mundane website data like unused or out-of-date files. Site owners use the robots.txt file to redirect search engines and avoid excessive traffic.

Estimates vary about the size of the deep web, but it forms around 90% of internet content.

Dark web

The dark web is a subset of the deep web that exists in the shadows. This hidden web features everything we cannot see without special tools.

Because of this, estimating dark web traffic is almost impossible. The same applies to monitoring dark web criminal activity. It’s hard to know whether your personal data is being sold online. Companies cannot tell when hackers conspire beyond surveillance to plan attacks.

When was the dark web created?

The dark web started life in 1999 in the research lab of University of Edinburgh student Ian Clarke. As part of his computer science degree, Clarke wrote a landmark paper on “a Distributed, Decentralised Information Storage and Retrieval System.”

In 2000, he released a working version of his project called Freenet. Clarke’s goal was to provide members of the public with total anonymity. As concerns about online privacy and government censorship grew, Freenet was a natural progression. Nobody called it the “dark web’ —at least not yet.

Ironically, US intel agencies made the next leap forward, releasing the Tor network in 2004. Scientists at the Office of Naval Research created Tor to enable anonymous battlefield and intelligence activity. However, the creators successfully argued for public release.

The designers realized that decentralized routing and layered encryption needed a large community of users. That’s why they launched the Tor Project and fine-tuned the Tor browser in 2008.

Tor could not function without a large user community, even if that meant the government losing control—which is exactly what happened.

In 2009, a shadowy website called Silk Road started to make headlines. Based on the dark web, Silk Road thrived as cryptocurrencies expanded. Dark web marketplaces soon sold everything from narcotics and firearms to pornography, pirated software, and prescription medication.

The FBI raided Silk Road founder Ross Ulbricht in 2013 and closed the site, but the dark web remains a thriving marketplace. Silk Road 2.0 appeared immediately, followed by Diabolus Market and OpenBazaar.

The dark web has also become notorious for more than illegal goods. A 2022 study found 24.6 billion pairs of credentials available for purchase. The dark web now functions as a credentials brokerage, providing access to vast private databases.

Cyber attackers obtain passwords via data breaches. Other criminals buy stolen data to use in phishing or other cyber attacks. Prices are easily affordable, with credit card details retailing for around $120 and single passwords costing just $10. It’s a cybersecurity nightmare.

Why does the dark web exist?

Given the criminal activity associated with the dark web, it’s natural to ask why the dark web exists. Scientists developed the underlying technology with noble purposes in mind. The ONS and Ian Clarke never wanted to encourage crime, but their creations made the dark web possible.

The dark web’s creators set out to protect individual privacy. By the late 1990s, early enthusiasm about the internet gave way to fears about crime and surveillance. People needed ways to browse and communicate anonymously. Tor and Freenet were effective solutions.

The dark web is still a valuable privacy tool. Media organizations like the BBC, the New Yorker, and ProPublica use dark web tools to allow censorship-free browsing in repressive countries.

Is the dark web illegal?

The legal situation surrounding the dark web is pretty simple. Using dark web tools is legal, but using the dark web to commit criminal acts is not.

The benefits above are probably why the dark web remains legal and supported by some governments. Tor is the most reliable way to escape the attention of authoritarian states.

Balancing anonymity against credential thefts and illicit selling is hard, but states tend to see legality as a better option.

Note: Some countries suppress dark web usage. China, Russia, and Vietnam all prohibit Tor usage (with variable success). Keep that in mind if you use Tor when traveling.

Types of threats on the dark web

The dark web may be legal, but it’s not safe. Many critical threats make the dark web dangerous. Here are just a few of the most concerning examples:

  • Illegal activity. When users access the dark web, it’s easy to become involved in criminal activities. Dark web marketplaces peddle illicit drugs, firearms, and even stolen information like medical and legal documents. Buying stolen or prohibited items brings the risk of legal consequences.

  • Malicious software. The dark web is unregulated. Dark web forums you visit could direct you to malware and compromise your device. They could also direct you to illegal content without warning. There’s no way of knowing.

  • Hacking. Dark websites are havens for data thieves and other hackers. These actors are happy to target customers or casual dark web visitors alike.

  • Ransomware-as-a-Service. Dark web vendors now sell off-the-shelf ransomware kits, allowing almost anyone to mount cyber-attacks. Groups like REvil and GandCrab provide specialized software that leverages stolen data.

  • Webcam attacks. One of the scariest dark web hazards is webcam hijacking. Attackers target visitors with unsecured cameras. They may then deploy remote administration tools to blackmail targets or use the camera to gather data.

  • Data breaches. The dark web is a global hub for originating and executing data breaches. Nobody is safe. For instance, in March 2024, communications giant AT&T reported a data breach involving 73 million records. Stolen data was available on the dark web from 2019. And AT&T is just the tip of the iceberg.

  • Law enforcement. Criminality is everywhere on the dark web, but so is law enforcement. Users risk detection and prosecution if they engage in illicit behavior. Never assume that contacts are who they say they are.

What is the dark web usually used for?

As the list above suggests, much dark web activity is either borderline or totally illegal. However, not all dark web activities break the law.

Almost anything prohibited by national laws appears on dark web markets. It’s common to find vendors selling drugs, weapons, medical records, prescription medications, and illegal images or videos. There are few limits on what is bought and sold.

Researchers investigating the cross-border wildlife trade found 153 endangered species for sale on 50 dark web forums. Democracy is even on the shelves. One incident found 40 million US voter registrations selling for $2 each.

Anything goes. Marketplaces are hard to track as they come and go. After Silk Road closed, Dream Market became a go-to vendor for opiates. AlphaBay expanded the use of niche crypto-currencies, while DarkMarket focused on selling personal information. All have closed, but successors continue.

The dark web has other uses, though. It’s not all about selling illegal goods. The dark web is also used to:

  • Access paywalled academic journals and enable research sharing.

  • Evade censored or geo-blocked content.

  • Search the web without ads or cookies of any kind.

  • Share information confidentially, for example, about protests or whistle-blowing.

  • Find essential medications at affordable prices.

Is your business data on the dark web?

There are some positive uses of the dark web, but we need to be aware of the dangers. Most importantly, every internet user and company must know if their data is available via dark websites. And we need ways to prevent this.

Let’s start with a simple process to check whether your information is on the dark web.

Firstly, don’t enter the dark web alone. Individual users lack the contextual data and tools to penetrate dark web defenses. Logging onto Tor and searching your name won’t work.

Companies worried about leaked credentials should use in-depth threat exposure management platforms like NordStellar.

Dark web monitoring solutions leverage huge databases of exposed credentials. Scanners constantly analyze databases of compromised credentials and scan dark web forums and marketplaces for keywords related to your business data.

How to keep your company data off the dark web

Searching the dark web for confidential data can be imprecise. A smarter solution is preventing the disclosure of your company data in the first place.

Dark web criminals are clever and ruthless, but cybersecurity measures deter even the most skilled data leeches. Many companies fail to put those barriers in place. That’s why dark web markets thrive, but it doesn’t have to be like that.

Here are some tips to secure your data and ruin the bottom line of dark web data vendors:

  • Protect traffic with a Business Virtual Private Network (VPN). VPNs encrypt traffic and hide your data in transit. Secure every endpoint with VPN coverage to block data thieves.

  • Guard your credentials like a hawk. Credential theft or brute forcing allows criminals to access your network and steal user or customer data. Enforce strong, regularly-changed passwords. Add multi-factor authentication for all log-ins. Apply Zero Trust principles to minimize access to sensitive data.

  • Be smart about phishing. Phishing encourages users to click dangerous links, leading to malware infections and data loss. Implement advanced DNS filtering solutions to prevent access to websites used in phishing attacks. Train employees to spot phishing emails and explain why phishing awareness is a critical data protection issue.

  • Use dark web monitoring. Dark web monitoring is a must-have for companies handling sensitive data. Remember the AT&T case. It took 5 years to uncover the data breach, resulting in millions of dark web sales. Monitoring informs you immediately about data exposure. It also helps you tweak your security posture to prevent cyber attacks.

  • Put in place holistic dark web protection. Don’t apply password security, VPN coverage, and access controls independently. Gather everything together in one, like NordLayer’s threat protection setup. That way, you can anticipate and neutralize threats before they cause problems.

The tips above will protect companies who do not intend to access the dark web.

But what if you need to use the dark web safely? In that case, extra data security measures come into play.

  • Be very cautious about exposing confidential information on dark web forums. Never mention your name, employer, phone number, or address.

  • Never trust dark websites. There is no SSL encryption on the dark web, and nobody certifies dark web sites as safe to use. Remember that when entering discussions or buying goods.

  • Don’t click links on forum posts. The same applies to links. Dark web links could easily be malicious or lead you to illegal content. As a rule, avoid clicking unknown links if possible.

  • Disable Java and ActiveX. You may already have done this, but disable these frameworks before firing up Tor. Both are notoriously vulnerable to exploits, especially by dark web residents.

  • Separate dark web browsing from critical assets. Ideally, only use Tor inside a well-defended network segment. Create a secure zone with minimal east-west movement. If the worst happens, this should restrict the damage.

Tips on how to protect business information from data theft

Hidden data marketplaces are alarming, but could also be a good thing. Knowledge about the dark web should motivate us to update our data security practices.

How can you safeguard sensitive information and stay one step ahead of data thieves? Let’s finish this blog with some data security essentials.

Check statements for financial anomalies

Cyber fraud often shows up first in your company finances. Don’t assume everything is fine. Checking cash flows for unusual payments is always a wise move.

Criminals often take small amounts regularly instead of withdrawing huge sums in one transaction. Minor unauthorized payments could be an early warning that business data and credentials are available on the dark web.

Lock down critical business data

If users in your business access the dark web, network segmentation is essential. Network segmentation creates secure zones within the network architecture. These zones are protected by firewalls and access controls, admitting authorized users but blocking everyone else.

Protect sensitive data within safe zones, and consider creating quarantine zones for dark web browsing. The more barriers there are between business data and dark web users, the better.

Monitor the dark web for data breaches

Stay aware of known data leaks and monitor dark web marketplaces for your business data. Dark web monitoring services scan materials on the dark web, alerting you rapidly should data theft occur.

Take advantage of security alerts provided by financial companies and online vendors. Banks and payment processors like PayPal enable customized alerts to flag suspicious activity.

The same applies to everyday business tools like social media and email. Google and Facebook enable activity alerts and they supplement dark web monitoring.

Remember: thieves may buy social media credentials on the dark web and use them to acquire more information. Any alerts are potentially worrying.

Update your security tools

Finally, only use reputable security software to safeguard devices and apps. Avoid free VPNs or virus checkers. These tools may not work effectively and could even deliver malicious software. Stick to trusted vendors and regularly patch security tools to stay ahead of attackers.

The dark web is one part of the cybersecurity puzzle, but it provides a great reason to improve your cybersecurity game. Safeguard data, learn about dark web threats, and adopt a cautious approach. But if you have any concerns, expert help is easy to find.

Contact the NordLayer team to discuss dark web threats and fine-tune your business security.

About Version 2 Digital

Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

About NordLayer

NordLayer is an adaptive network access security solution for modern businesses – from the world’s most trusted cybersecurity brand, Nord Security. The web has become a chaotic space where safety and trust have been compromised by cybercrime and data protection issues. Therefore, our team has a global mission to shape a more trusted and peaceful online future for people everywhere.

About NordLayer
NordLayer is an adaptive network access security solution for modern businesses – from the world’s most trusted cybersecurity brand, Nord Security.

The web has become a chaotic space where safety and trust have been compromised by cybercrime and data protection issues. Therefore, our team has a global mission to shape a more trusted and peaceful online future for people everywhere.

38 Cybersecurity Subreddits Every MSP Must Join

Want to learn what cyber buyers are saying? 

Or hear about the latest breaches and ways to increase overall security measures?

Or maybe you’re looking to improve your Facebook ads to increase conversions?

You’ll find all of that and more on Reddit. Reddit has 267.5 million weekly active users as of Q4 2023. Engaging conversations. Great threads. Tons of value. Expert insights. 

Reddit isn’t just a place for celebrity news and funny cat memes that go viral. It’s a place where MSPs and other IT professionals come together in targeted subreddits to discuss the latest breaches, compare vendor technologies, discuss pricing models, and implement innovative marketing techniques to scale a business. Good enough reasons to join, right?

We’ve put together a list of 38 cybersecurity subreddits for MSPs and IT professionals. Make sure you join them all. 

  1. r/msp 

The largest MSP subreddit has over 188K members with topics that range from securing clients to product reviews from fellow industry professionals. This is THE subreddit for MSPs. 

  1. r/cybersecurity 

Whether you’re looking for endpoint security solutions or different ways to implement security measures across your organization, this subreddit is the place for you. You can also filter out the topics in the search bar as the volume of posts is incredible. 

  1. r/sysadmin  

r/sysadmin involves more technical threads geared specifically at IT professionals. A good portion of the discussions revolve around cloud services. Lots of discussions centered around Office 365. Licensing is also a very popular topic. 

  1. r/netsec  

r/netsec is a hub of technical information and security content curated by the community. It is comprised of researchers, security practitioners, students, and hackers that help moderate the discussions.

  1. r/Information_Security 

Password managers, MFA, and passwordless authentication are hot topics in this subreddit. You’ll also find plenty of insights on access management and security controls here.

  1. r/Malware 

Everything you need to know about malware. The community features malware reports, analysis, and information for [anti]malware professionals and enthusiasts. The malware analysis threads are exceptional. Learn about the latest malware stealers here.

  1. r/ComputerSecurity 

r/ComputerSecurity consists of IT security news, articles, and tools. “What exactly can hackers see?” was one of the most engaging topics. Kind of makes you wonder if your security measures are up-to-date, right? 

  1. r/ITdept  

IT pros come here to share their frustrations and talk shop. You’ll find the occasional vent or rant. The threads are very specific to IT pain points and employee training, a topic that appears often.

  1. r/MSSP 

r/MSSP covers best practices and industry knowledge that every MSP can benefit from tremendously. Compliance is a popular topic. Endpoint management is another one. Lots of vendor comparisons and reviews make this subreddit really valuable.

  1. r/IdentityManagement  

This subreddit digs a bit deeper into IAM and user access. Learn about credential management, who wins in a head-to-head comparison between SSO vs. MFA, and a very interesting thread on Using Auth0 to Collect Consent for Newsletter Signups. 

  1. r/MSPJobs 

Considering a new role? Need advice fixing up your CV? Maybe you want to just check the current job market or hire someone exceptional to join your team? This is THE subreddit for MSP job opportunities.

  1. r/datarecovery 

r/datarecovery is a place to discuss the ins and outs of data recovery, both logical and physical. Whether it’s an external hard drive or 400GB of data wiped out from a corrupted server, this subreddit offers support, advice, and recommendations for recovering lost or stolen data.

  1. r/SmallMSP  

Are you a small MSP owner or technician? Want to get insights on pricing models and advice on how to manage customer calls better? You will definitely want to check out this informative subreddit.

  1. r/InfoSecNews 

Get the latest information security-related news from around the web. Find out about the latest breaches, policies, and privacy updates from this highly engaged group of 18K InfoSec professionals.

  1. r/ISO27001 

Compliance is a huge concern for MSPs and security leaders. This subreddit focuses on everything ISO 27001 related to keep you in the loop and maintain the best ISO 27001 compliance practices.

  1. r/devops 

Managing a team of developers? Maybe you’re just curious to learn the latest CI/CD strategies to keep your clients’ pipelines and software supply chains secured? r/devops is an incredibly connected community of over 347K developers. Sharpen your technical skills here.

  1. r/networking 

r/networking is another massive subreddit that has over 348K members. Get insights on the best firewalls, routers, and switches to power up your MSP business. Tons of community-generated product reviews and gear talk.   

  1. r/networkautomation 

Networking + AI. Discover ways to automate data and workflow processes with this growing community of network automation specialists.

  1. r/outages 

There is nothing more frustrating and costly than a service disruption. Outages happen. Whether it’s an AWS outage or Safari, you’ll be kept up to speed in this community.

  1. r/ITProfessionals 

Need some cable management assistance? Untangle those cables, gain insights to improve workplace engagement, and soak in some great advice from a community of IT professionals in this subreddit.

  1. r/Hosting 

Hosting is a big part of running a successful website. Get the inside scoop on shared hosting, WordPress website hosting, cloud hosting, VPS providers, dedicated servers, and other hosting-related services here.

  1. r/macsysadmin 

Operate a Mac? It’s ok if you don’t. Your clients’ certainly do and have many connected Apple devices that you have to secure 24/7. Make sure you join the subreddit for all things related to the administration of Apple devices. 

  1. r/pwned 

Need to know which devices were recently compromised in the latest breach? Hopefully, not yours. Make sure your data is safe. Although the posts aren’t as consistent as other communities, you can still learn a lot.

  1. r/threatintel 

DDOS attacks. Trending IOcs. The latest cybersecurity challenges placing a financial dent in your business. All here. This subreddit will provide you with a wealth of information about threats, trends, vulnerability findings, and tools

  1. r/techsupportmacgyver 

302k curious minds that love to build and break apart cool tech things, just like MacGyver. You’ll find ingenious ways to put USB flash drives together and how to repair broken servers. Get ready to say “wow”. Seriously.

  1. r/windows

With over 316k members, r/windows is the largest unofficial community for Microsoft Windows. Plenty of interesting threads centered around Copliot and DYI videos for Windows-related troubleshooting issues and Windows installs.

  1. r/linuxadmin 

Linux user or admin? This subreddit covers all things Linux-related. It also has a very engaged community of 213K strong.

  1. r/aws 

Securing AWS cloud environments and S3 buckets is part of an MSP’s day-to-day. This massive subreddit covers everything AWS-related. From S3, EC2, DynamoDB, IAM, VPC, and more, you’ll find what you’re looking for here.

  1. r/talesfromtechsupport 

Everyone loves a good tech support story, especially when you get to help someone out. This subreddit is one of the best out there. You’ll find a community of 771k genuinely awesome people happy to lend a helping hand. Don’t be shy to ask a question here.

  1. r/homelab 

r/homelab is a place where over 700k techies and sysadmins unite to share their labs, projects, and builds. Draw inspiration from some of the most unique homelabs you will come across.

  1. r/SEO 

As an MSP, you’re constantly looking for innovative ways to market your business. SEO is the lifeblood of content and website optimization. Discover what type of content performs well and how you can optimize existing content to attract more clients.

  1. r/PPC 

Running paid Facebook or Google ads? Want to see the latest ad hacks and updates? Discover what paid tactics work from actual campaigns and experiments involving real money.

  1. r/SocialMediaMarketing 

Social media marketing. A topic that comes up quite often in almost every MSP discussion. Which paid social channels yield the best results? Maybe you need to outsource your ads to a good agency. You’ll find that, along with other creative ways to improve your ad campaigns.

  1. r/FacebookAds 

Facebook is one of the best places to target clients and is super popular among fellow MSPs. This subreddit will show you what type of Facebook ads perform best and ways to improve ROAS or return on ad spend.

  1. r/CybersecurityMemes 

Need a good laugh? Funny Wi-Fi names and passwords so easy to guess, you simply cringe. This subreddit will provide you with a daily dose of laughter and reality. We’re certain you can relate to some of these memes and jokes.

  1. r/phishing 

Are phishing emails bypassing your spam filters? You might want to check in with the r/phishing community before you click any suspicious-looking URL. Discover ways to spot phishing emails and what you need to be prepared for. 

Here are 33 Phishing Attack Statistics Every MSP Should Know About

  1. r/ransomwarehelp 

Has a client been hit by a ransomware attack? There might be a way to recover those encrypted files and restore those systems without paying the ransom fees. This connected community might have those answers for you.

  1. r/websecurity 

Is your website secure? How about your clients’? This subreddit is for website owners, developers, and pen testers looking to prevent web vulnerabilities such as XSS and CSRF.

And there you have it. 38 Cybersecurity Subreddits Every MSP Must Join

Just a little head’s up first. Make sure you thoroughly go over the Rules of Reddit and familiarize yourself with the reddiquette before you begin. 

Always follow the group rules or risk being kicked out in a heartbeat.

Found this insightful? We’ve got some more great resources for you. 

Here are 11 Valuable YouTube Channels Every MSP Must Follow and 14 Essential Podcasts for MSP Success. 
Make sure you follow Guardz on LinkedIn to learn about the latest cybersecurity news and tips to build a thriving MSP business.

Start Free Trial

About Version 2 Digital

Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

About Guardz

Guardz is on a mission to create a safer digital world by empowering Managed Service Providers (MSPs). Their goal is to proactively secure and insure Small and Medium Enterprises (SMEs) against ever-evolving threats while simultaneously creating new revenue streams, all on one unified platform.

ESET Research investigates the Gamaredon APT group: Cyberespionage aimed at high-profile targets in Ukraine and NATO countries

  • ESET Research examined the operations of Russia-aligned advanced persistent threat (APT) group Gamaredon, which is currently the most engaged APT group in Ukraine.
  • The majority of Gamaredon’s cyberespionage attacks are directed against Ukrainian governmental institutions.
  • ESET saw a few attempts to compromise targets in several NATO countries – namely Bulgaria, Latvia, Lithuania, and Poland – but no successful breaches were observed.
  • Gamaredon notably improved its cyberespionage capabilities, and developed several new tools in PowerShell, with a focus on stealing valuable data – from email clients, instant messaging applications such as Signal and Telegram, and web applications running inside internet browsers.
  • ESET Research discovered PteroBleed, an infostealer that also focuses on stealing data from Ukrainian military system.
BRATISLAVA — September 26, 2024 — ESET Research examined the operations of Gamaredon, a Russia-aligned APT group that has been active since at least 2013 and is currently the most engaged APT group in Ukraine. Gamaredon has been attributed by the Security Service of Ukraine (SSU) to the Russian 18th Center of Information Security of the FSB, operating out of occupied Crimea. ESET believes this group to be collaborating with another threat actor that ESET Research discovered and named InvisiMole. The majority of Gamaredon’s cyberespionage attacks are directed against Ukrainian governmental institutions. However, in April 2022 and February 2023, ESET also saw a few attempts to compromise targets in several NATO countries, namely Bulgaria, Latvia, Lithuania, and Poland, but no successful breaches were observed. Gamaredon is using ever-changing obfuscation tricks and numerous techniques used for bypassing domain-based blocking. These tactics pose a significant challenge to tracking efforts, as they make it harder for systems to automatically detect and block the group’s tools. Nevertheless, during ESET’s investigation, ESET researchers managed to identify and understand these tactics and kept track of Gamaredon’s activities. The group has been methodically deploying its malicious tools against its targets since well before the 2022 invasion began. To compromise new victims, Gamaredon conducts spearphishing campaigns and then uses its custom malware to weaponize Word documents and USB drives accessible to the initial victim, expecting them to be shared with further potential victims. During 2023, Gamaredon notably improved its cyberespionage capabilities, and developed several new tools in PowerShell, with a focus on stealing valuable data – from email clients, instant messaging applications such as Signal and Telegram, and web applications running inside internet browsers.    However, PteroBleed, an infostealer ESET discovered in August 2023, also focuses on stealing data related to a Ukrainian military system – and from the webmail service used by a Ukrainian governmental institution. “Gamaredon, unlike most APT groups, does not try to be stealthy and remain hidden as long as possible by using novel techniques while conducting cyberespionage operations, but rather, the operators are reckless and do not mind being discovered by defenders during their activities. Even though they do not care so much about being noisy, they still put in a lot of effort to avoid being blocked by security products and try very hard to maintain access to compromised systems,” explains ESET researcher Zoltán Rusnák, who investigated Gamaredon. “Typically, Gamaredon attempts to preserve its access by deploying multiple simple downloaders or backdoors simultaneously. The lack of sophistication of Gamaredon tools is compensated by frequent updates and the use of regularly changing obfuscation,” adds Rusnák. “Despite the relative simplicity of its tools, Gamaredon’s aggressive approach and persistence make it a significant threat. Given the ongoing war in the region, we expect Gamaredon to continue in its focus on Ukraine,” he concludes. For a more detailed analysis and technical breakdown of Gamaredon’s tools and activities, check out the latest ESET Research white paper “Cyberespionage the Gamaredon way: Analysis of toolset used to spy on Ukraine in 2022 and 2023” on WeLiveSecurity.com. Make sure to follow ESET Research on Twitter (today known as X) for the latest news from ESET Research.

Seven-day moving average of unique machines attacked in Ukraine

About Version 2 Digital

Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

About ESET
For 30 years, ESET® has been developing industry-leading IT security software and services for businesses and consumers worldwide. With solutions ranging from endpoint security to encryption and two-factor authentication, ESET’s high-performing, easy-to-use products give individuals and businesses the peace of mind to enjoy the full potential of their technology. ESET unobtrusively protects and monitors 24/7, updating defenses in real time to keep users safe and businesses running without interruption. Evolving threats require an evolving IT security company. Backed by R&D facilities worldwide, ESET became the first IT security company to earn 100 Virus Bulletin VB100 awards, identifying every single “in-the-wild” malware without interruption since 2003.

Expanding Innovation: Maximizing Business Offerings With REST-API Integration

In today’s fast-paced tech environment, integrating new solutions swiftly and efficiently can make all the difference in maintaining your competitive advantage. REST-API integration is one such solution that has the potential to accelerate innovation and optimize efficiency by bridging the gap between existing systems and new platforms. At our Platform 2024 event in Las Vegas, Scale Computing’s VP of International Sales, Scott Mann led the “Expanding Innovation: Maximizing Business Offerings With REST-API Integration” panel, showcasing how REST-APIs can transform the way companies manage and deploy a variety of solutions.

REST-APIs provide a standardized way to allow software applications to communicate with one another. They are particularly powerful because they enable different services to work together seamlessly, regardless of the underlying technology. This interconnectivity has become increasingly critical in today’s heterogeneous IT environments, where businesses often need to integrate multiple third-party applications, platforms, and systems.

In addition to Scott, the panel also featured Andy Brauer, CTO at EnchaCloud, a leading cloud service provider based in Pretoria, South Africa as well as Ian Smith, Technical and Alliances Director for EMEA at Scale Computing who also introduced UPONSCALE a self-service cloud platform developed by 365IT, a leading IT solutions provider in France.

Ian explains how the UPONSCALE platform was built on top of the SC//Platform to underpin their own MSP offering and how they leverage REST-APIs to provide users with greater control and flexibility over their virtual environments, helping them to tailor their environments to meet the specific needs of their customers, including:

  • Multi-Tenancy: Users can manage multiple tenants in isolated environments, ensuring data security and customized configurations for each client.
  • Self-Service Portal:The platform allows customers to create and manage their own VMs, set up networks, and even control backup and disaster recovery processes.
  • Built-In Container Management: Utilizing REST-APIs, the platform also integrates container orchestration, allowing businesses to deploy and seamlessly manage Docker containers.

Andy from EnchaCloud also shared insights into “Nav Engine,” a cloud marketplace platform that was designed to meet the needs of SMEs seeking a reliable and customizable cloud solution. Nav Engine was also built atop the SC//Platform and utilizes REST-APIs to deliver a user-friendly, self-service experience.

Andy goes on to detail how automated provisioning via REST-APIs has enabled users of the Nav Engine platform to quickly spin up new products, deploy new VMs, or configure a complex network in a more streamlined and efficient manner. As he noted during the discussion, “everything that we’ve done, we’ve done via APIs and we’ve abstracted the layers of administration and the end user portal so that it makes everything easy to use and fully secured.”

Andy further explains how using REST-APIs in the SC//Platform have enabled Nav Engine to offer a range of new services including white-label options so their customers could customize their cloud services under their own brand as well as the ability to extend their platform to new geographies.

But perhaps the most salient takeaway from both Ian and Andy’s presentations was the importance of listening to customer needs and continuously innovating to meet those demands. By using REST-APIs in conjunction with the SC//Platform, both UPONSCALE and Nav Engine have been able to quickly adapt to changing market conditions so they could deliver more robust, flexible, and user-friendly solutions.

You can watch the entire video on our YouTube channel. 

About Version 2 Digital

Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

About Scale Computing 
Scale Computing is a leader in edge computing, virtualization, and hyperconverged solutions. Scale Computing HC3 software eliminates the need for traditional virtualization software, disaster recovery software, servers, and shared storage, replacing these with a fully integrated, highly available system for running applications. Using patented HyperCore™ technology, the HC3 self-healing platform automatically identifies, mitigates, and corrects infrastructure problems in real-time, enabling applications to achieve maximum uptime. When ease-of-use, high availability, and TCO matter, Scale Computing HC3 is the ideal infrastructure platform. Read what our customers have to say on Gartner Peer Insights, Spiceworks, TechValidate and TrustRadius.

Five strong password ideas to boost your security

What is a good password? 

You might think that the answer to this question would be very subjective, but that’s far from the case. In simplest terms, a good password is one that’s difficult to crack. The stronger your password is, the better it works to protect your accounts from hackers and other malicious actors. A strong, reliable password can sometimes take millions of years to crack, which means that the hackers are less likely to even try to gain them.

When you’re thinking of good password ideas, you need to keep the following criteria in mind:

  • The password should be at least 12-15 characters long.

  • It should use a combination of letters, numbers, and special characters. Spaces are also allowed.

  • It should not be a common word, product, character, name, or anything you can easily find in a dictionary.

  • It should be a combination that only you know and others could not easily predict. We’ll cover some creative password ideas shortly.

  • Each password should be unique and you shouldn’t reuse them for several accounts. If a password you use on several platforms is cracked, that puts all of your accounts at risk.

What is considered a weak password?

Weak passwords consist of sequential letters or numbers, are fewer than eight characters long, or use common words and phrases. The most popular passwords are well-known by malicious actors and are usually what they try first.

According to NordPass’ annual top 200 most common passwords list, “123456” and “password” are the most commonly used and vulnerable passwords. Another example of a weak password would be using the name of a fictional character like “Superman,” “Batman,” or “Joker.”

Examples of bad passwords

Here are some more examples of weak, easy-to-crack passwords:

  • 123456789

  • abc123

  • qwerty

  • iloveyou

  • hello

  • computer

  • password123

If you’re wondering whether your passwords might be weak links, check out the list of the top 200 most common passwords. You’ll find even more examples, as well as some fun facts about the most common passwords around the world.

 

The most common password-cracking techniques

Brute-force attack

During a brute-force attack, a malicious actor uses software that tries every possible combination to find the right one. An eight-character password consisting of upper- and lowercase letters, numbers, and special characters can be cracked in just two hours. Good passwords will take months or even years to break through, depending on their uniqueness and complexity.

Dictionary attack

While brute-force attacks try various combinations of special characters, numbers, and letters, a dictionary attack uses a program that goes through a prearranged list of words. Essentially, if your password can be found in a dictionary, specialized software can easily crack it.

Phishing

Phishing is a social engineering method to trick people into revealing their credentials. Phishing attacks often use email services as a medium: hackers send emails pretending to be reputable sources and refer users to fake login pages. A user then inputs their login credentials themselves and inadvertently grants this information to the hackers.

Credential stuffing

Credential stuffing is a popular method for hackers to gain access by collecting usernames and passwords used in previous attacks and trying them on other platforms. This method often proves successful because people tend to reuse the same password for all their accounts.

Keylogging

Keylogging involves a specific type of malware, known as keylogger, infecting the victim’s device. The keylogger can then track the user’s keystrokes and device activity, depending on the software and the device. This can include copied and pasted data, phone calls, location, and screenshots. Using this information, hackers can easily access passwords and other sensitive information, allowing them to launch further attacks on the individual or data from their place of work.

How to create a strong password

  • The longer your password is, the better. Many websites ask you to create eight-character passwords, but we recommend going for at least 15 characters.

  • Avoid ties to your personal information, such as your name, surname, address, or date of birth.

  • Use a combination of numbers, symbols, and upper- and lowercase letters in random order.

  • Don’t use sequential letters and numbers.

  • Avoid substitution: “kangaroo” and “k@ng@r00” are both equally weak passwords, and a brute-force attack can easily crack them.

  • Don’t reuse the same password for multiple accounts.

With our free password security tool, you can check your password strength and if it has been exposed in any data breaches. You can also try the Password Health feature with NordPass Premium. It scans all passwords that you’ve saved in your Vault and checks for vulnerabilities.

Top 5 strong password ideas

Coming up with a strong and unique password can be a challenge. To make this process easier for you, we’ve gathered some examples that will help protect your data and accounts from being breached and taken over. We’ve also included some formulas and passphrase examples that you can try yourself. However, we highly recommend you don’t use the example passwords for your accounts.

1. Shorten each word

Think of a phrase and remove the first three letters of each word (in some cases, that might mean deleting full words, but that’s fine):

“Laptop running free in the jungle” -> “top ning e gle”

Sounds like gibberish? That’s exactly what we want. Just don’t forget to add special characters and numbers to make it more complicated. It would take 94,000 years to crack this password.

2. Create your own formula

Create a formula that will help you remember the password. For example, you can take a phrase and replace every letter with the next one in the alphabet:

“Cucumbers are tasty” -> “dvdvncfst bsf ubtuz”

Another clever way of creating strong passwords is to turn song lyrics into acronyms. This means using only the first letter of each line of your favorite song.

So, “Shine on you crazy diamond” by Pink Floyd becomes “rsnsybccystswrcc.”

The time needed to crack this password is 746 million years.

3. Play with the vowels

This one is much easier to implement and memorize: take a random nonsensical phrase and replace one vowel with another (for example, “a” with “e”):

“A car is floating in a pan” -> “e cer is floeting in e pen”

Don’t forget – spaces are allowed in passwords, and we highly encourage you to use them. The combination of having spaces and switching the vowels around means the above password would take 583 million trillion years to crack.

4. Mix the codes of your favorite countries

This one is quite fun and easy to memorize. You will always generate good passwords with this method. Simply make a list of the ISO codes of your favorite countries and put them together:

“Mexico, Ireland, France, Germany, Japan” -> “mex irl fra deu jpn”

You wouldn’t think so, but a hacker would require a staggering six thousand trillion years to crack this password!

If you want to spice things up and make them even more difficult to crack, you can also add each country’s calling code:

“mex54 irl353 fra33 deu49 jpn81”

Such a password would take 12 decillion years years to crack. How impressive is that?

5. Use a password manager

If creating and remembering random phrases for all your accounts seems too complicated, you can use a password manager, such as NordPass. It’s an easy-to-use app that lets you generate strong, unique passwords and securely store them in an encrypted Vault. You can also easily use NordPass to autofill online forms and fields.

You can add as many passwords as you need and access them from any device. This way, you can get the best of both worlds by combining your creative password ideas with one-of-a-kind secure ones created by the password manager for each account without the risk of forgetting them. You can use a special code and get an additional month of NordPass Premium for free when you purchase a two-year plan.

Additional tips

Here are some more tips to keep in mind when you’re looking for good password ideas:

  • In order to protect your data, remember that passwords must be difficult to predict. Including special characters and spaces increases the time it takes for your password to be cracked.

  • Take your phone security into consideration. According to research, pattern locks are successfully replicated around 64% of the time. Instead, set up a PIN or use our guide to generate some strong phone password ideas.

  • Don’t forget to implement new password ideas for work. Don’t reuse your personal passwords because if they ever get breached, your work accounts could be in danger, too.

  • Always use multi-factor authentication (MFA). Even if your password is definitively strong, accidents can happen and your first line of defense might be breached. Using MFA means that no one can access your accounts without accessing your authentication device. NordPass uses multi-factor authentication to add an additional layer of security to your password vault.

About Version 2 Digital

Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

About NordPass

NordPass is developed by Nord Security, a company leading the global market of cybersecurity products. The web has become a chaotic space where safety and trust have been compromised by cybercrime and data protection issues. Therefore, our team has a global mission to shape a more trusted and peaceful online future for people everywhere.

Need help? Our team is just a message away