DarkLeakMarket emerged in 2019 as a prominent dark web data leak marketplace, distinguishing itself by primarily functioning as a data resale platform rather than a traditional ransomware operator. The group's core motivation is financial gain, achieved by selling stolen data often sourced from other ransomware groups' leak sites and various hacking forums. They monetize compromised information, frequently threatening to leak sensitive data if ransom demands are not met. This operational model sets them apart, as they facilitate the illegal trade and distribution of already exfiltrated data, with prices for such data typically ranging from $100 to $9,000.
Tecnicas MITRE
T1071, T1047, T1082, T1486, T1070
RansomLook pivots
Data, inteligencia y referencias externas para contrastar actividad ransomware del actor.