Darknet marketplaces attract the attention of both criminals and law enforcement agencies alike. In most cases, these marketplaces will eventually go offline, as they are infiltrated and taken over by a law enforcement agency. However, the Sanctuary darknet marketplace suffered from a different kind of hack. The culprit goes by the name of Cipher0007. Apparently, he used an SQL injection flaw to take over the platform.
It is not uncommon for hackers to go after darknet marketplaces. These underground platforms attract a lot of attention and often require users to pay a membership fee in Bitcoin. Moreover, most marketplaces offer an escrow service for all transactions, which means they control a lot of funds at any given time. Several marketplaces have lost a lot of funds due to hacks in the past.
It is unclear if that is what happened to the Sanctuary darknet market, though. To be more specific, a user by the name of Cipher0007 is responsible for breaching this platform. This is facilitated thanks to an SQL injection flaw to upload a shell onto the server. This backdoor allowed the hacker to access most of the platform’s backend. It also appears he dumped the master key related to the marketplace’s .onion URL.
Moreover, it appears the hacker successfully gained access to the phpMyAdmin backend and subsequently was able to access the user database. Additionally, he also got his hands on other login information. As of right now, the Sanctuary phpMyadmin page is still vulnerable to external connections as we speak. It is expected this problem will be addressed sooner or later, although it remains to be seen when this will happen exactly.
Although Sanctuary is one of the many smaller darknet marketplaces, this breach should not be taken lightly. In fact, it goes to show criminals and hackers will try to gain access to any system that can help them make money. Sanctuary is best known for selling digital information and nefarious tools, such as malware and data dumps. Guns and drugs sales take place on the platform as well, albeit they only generate a fraction of the sales volume.
The administrator of the underground marketplace has yet to comment on the situation, which raises a lot of questions. Most people think these marketplace owners spend their entire day monitoring the site, but that is not always the case. It is possible the owner will turn his or her back on the site now that it has been exposed, though. This negative attention is a PR nightmare among criminals, and fewer people will trust Sanctuary moving forward.
What is rather remarkable is how Cipher0007 is building up quite the reputation for hacking darknet marketplaces. He is the same person reporting a major flaw to the
AlphaBay admins earlier this year. That particular exploit would have potentially exposed all direct messages in the marketplace to prying eyes. Anyone using AlphaBay does not want their communication exposed by any means, that much is evident.If you liked this article, follow us on Twitter @themerklenews and make sure to subscribe to our newsletter to receive the latest bitcoin, cryptocurrency, and technology news.
As cryptocurrencies become increasingly integral to financial strategies, individuals are seeking more secure and profitable…
With the bull running in the crypto market, several cryptocurrencies are showing strong potential for…
For newcomers and veterans alike in the digital currency arena, securing a robust and user-friendly…
For those adept at deciphering market trends, pinpointing the next leading cryptocurrency is certainly achievable.…
Are you searching for the best crypto presale opportunities to maximize gains during the next…
All-time highs have been rolling in all summer for the hugely promising Web3 casino Rollblock…