The dark web. The name raises all kinds of questions. What is the dark web, really? Where is it? Can anyone use it?<\/p>\n
Answering these questions can help you stay safer online.<\/p>\n
The story of the dark web is a complicated one. It\u2019s a small and highly anonymous portion of the internet. As a result, it has a reputation for harboring criminal activity. We often mention the dark web in our blogs, typically when the conversation turns to identity theft, data breaches, and stolen personal info. Rightfully so. Plenty of cybercrime can be traced right back to the dark web.<\/p>\n
Yet cybercriminals didn\u2019t create the dark web. And they\u2019re far from the only people who use it. News outlets like the BBC and the\u00a0New York Times<\/em>\u00a0have a presence there, as does the U.S. Central Intelligence Agency (CIA). Journalists, activists, and everyday citizens use it as well, often to work around oppressive censorship. Even Facebook is there, providing people access to the social media site in regions where it\u2019s blocked.<\/p>\n Anonymity reigns on the dark web. It was designed to work that way. With that, it\u2019s home to a mixed bag of activity, legitimate and illicit alike. Yet that anonymity doesn\u2019t stop us from putting a face onto the dark web \u2014 from understanding what it is, where it is, and what happens there.<\/p>\n That starts with a look at the internet and the two primary layers that make it up.<\/p>\n The layers of the internet: The surface web and the deep web\u00a0<\/strong><\/p>\n If you visualize the internet as an ocean, you\u2019ll find it populated with websites and collections of data at all depths. Yet, the typical internet user only has access to the first few feet, a layer of the internet known as the surface web.<\/p>\n The sights you\u2019ll see within the surface web will look familiar. It\u2019s all the blogs, shops, social media sites, and so on that you visit regularly. And it\u2019s easy to get to. You only need to fire up your browser and go. All the sites are public-facing. With a quick search, you can find them.<\/p>\n In all, the surface web contains any destination you can reach through search. To put it more precisely, the surface web accounts for areas of the internet that search engines can \u201ccrawl\u201d and index for search. Estimates vary, yet the surface web accounts for roughly 4 to 5% of the internet.<\/p>\n Now, enter the deep web, the next 95% of the internet that is not searchable. Yet, that\u2019s not to say that you don\u2019t travel down into its depths from time to time. In fact, you likely do it daily. Any time you go through a paywall or use a password to access internet content, you\u2019re entering the deep web. The content found there is hidden from search. Examples include logging into your bank account, accessing medical records through your healthcare provider, or using corporate web pages as part of your workday. Even streaming a show can involve a trip to the deep web. None of that content is searchable.<\/p>\n As such, the overwhelming majority of activity within the deep web is legitimate. So while this layer of the internet runs deep, it isn\u2019t necessarily dark. The dark web is something altogether different.<\/p>\n What is the dark web?\u00a0<\/strong><\/p>\n The dark web lives within the deep web. Like the other depths of the deep web, it\u2019s not searchable from the surface web. The people behind the sites and repositories on the dark web keep themselves anonymous. And the reasons vary. Some of them are entirely legitimate, others questionable, and several are outright illegal in nature.<\/p>\n Its origins go back to the 1990s when the U.S. Department of Defense developed the dark web as a means of sending anonymous and encrypted communications. That story might sound familiar. It\u2019s quite like the origin story for the broader internet. That had its roots in the Department of Defense as well. So, just as the broader internet eventually became available to the public, so too did the dark web.<\/p>\n Getting there calls for a special browser because the protocols for the dark web differ from the surface web. Moreover, these browsers strip web traffic of identifiable info, encrypt it, and send it through a series of server jumps. The browsing traffic will appear to go through a server in one country, then a different server in another, and then another.<\/p>\n These steps make it highly difficult to identify the person using the browser. On the flip side, it also makes it difficult to identify the people hosting the sites and services on the dark web.<\/p>\n Without question, privacy is everything on the dark web. For good and for bad.<\/p>\n While the notion of the dark web typically gets raised in the context of cybercrime and other illegal activity, it has legitimate uses. Some of these use cases include:<\/p>\n Circumventing censorship\u00a0\u00a0<\/strong><\/p>\n Well-regarded news outlets such as the BBC and Pro Publica maintain a presence on the dark web to ensure that anyone can access their reporting. This includes people in nations and regions where certain news sources are censored.<\/p>\n Private communication\u00a0<\/strong><\/p>\n For the particularly privacy-conscious, the dark web hosts several resources for encrypted communication. That includes email clients, internet chat, and even social media sites.<\/p>\n Whistleblowing\u00a0<\/strong><\/p>\n Anonymous tips are a part of national security, law enforcement, and journalism as well. The private nature of the dark web confers an added degree of anonymity to tipsters.<\/p>\n The dark web isn\u2019t a place everyday internet users will need, or even want, to go. It\u2019s far more complicated than the surface web\u2014and going in without taking several security measures can make the trip a risky one.<\/p>\n This is where the rubber meets the road from an online protection\u00a0standpoint. The dark web is also a marketplace for hackers and bad actors. In several ways \u2014 as a place to buy or rent malware, a repository for stolen info, and a place to communicate and coordinate attacks.<\/p>\n For starters, the dark web is populated with dark marketplaces. And difficult-to-trace cryptocurrency is the coin of the realm. With dark web stores stocked with ready-made malware kits, bad actors can launch attacks with little technical expertise. Others have done the work for them.<\/p>\n Cybercrime groups of all sizes prop up these shops, which they also use to rent out other services for attacks. For example, a small-time bad actor could easily lease a\u00a0botnet<\/a>\u00a0to wage an attack that slows a targeted website to a crawl. Some cybercrime groups will provide hackers who can run attacks on someone else\u2019s behalf, creating a mercenary \u201chacker for hire\u201d gig economy.<\/p>\n Likewise, info stolen from a data breach can end up in dark web marketplaces as well. The personal info posted in these marketplaces can range anywhere from emails and passwords to in-depth info like tax ID numbers, health info, and driver\u2019s license numbers.<\/p>\n Some of it goes up for sale. Some of it gets dumped there for free. With the right info in hand, cybercriminals can commit acts of identity theft. That includes claiming unemployment benefits and tax refunds in someone else\u2019s name. In extreme cases, it can lead to bad actors outright impersonating their victims, racking up debts and criminal records along the way.<\/p>\n In all, if it\u2019s hackable and has value, it\u2019s likely for sale on the dark web.<\/p>\n With all this shady activity on the dark web, you might wonder how you can protect yourself. In fact, you can take several steps to help prevent your info from finding its way there. And you also can take other steps if your info, unfortunately, ends up on the dark web.<\/p>\n Installing online protection software is the first step. Online protection software can help prevent many of the attacks that bad actors can buy on the dark web. It protects against ransomware, adware, spyware, and all manner of malware, whether it\u2019s pre-existing or entirely new.<\/p>\n Yet today\u2019s online protection goes far beyond antivirus.\u00a0Comprehensive protection like ours protects your privacy and identity as well<\/a>. It can keep tabs on your identity and credit, create strong passwords, and clean up your personal info online.<\/p>\n Monitor your identity:<\/strong><\/p>\n An identity monitoring service<\/a>\u00a0can actively\u00a0scan\u00a0the dark web for personal info like your date of birth, email addresses, credit card numbers, personal identification numbers, and much more. In the event you fall victim to identity theft, our\u00a0identity theft coverage and restoration<\/a>\u00a0can provide up to $1 million\u00a0in coverage to cover the costs.\u00a0Plus,\u00a0it provides the services of a recovery expert with limited power of attorney to help you repair the damage done.<\/p>\n Keep an eye on your credit:<\/strong><\/p>\n If you spot unusual or unfamiliar charges or transactions in your account, bank, or debit card statements, follow up at once. In general, banks, credit card companies, and many businesses have countermeasures to deal with fraud. Moreover, they have customer support teams that can help you file a claim if needed.<\/p>\n Given all the accounts you likely have\u00a0a credit monitoring service can help<\/a>. McAfee\u2019s credit monitoring service can help you keep an eye on changes to your credit score, report, and accounts with prompt notifications and provide guidance so you can tackle identity theft.<\/p>\n Create strong, unique passwords:<\/strong><\/p>\n With the high number of accounts you need to protect, creating strong, unique passwords for each one can get time consuming. Further, updating them regularly can become a time-consuming task.\u00a0That\u2019s where a password manager comes in<\/a>.<\/p>\n A password manager does the work of creating strong, unique passwords for your accounts. These will take the form of a string of random numbers, letters, and characters. They will not be memorable, but the manager does the memorizing for you. You only need to remember a single password to access the tools of your manager.<\/p>\nLegitimate uses of the dark web\u00a0<\/strong><\/h2>\n
The dark web as a marketplace for cybercrime\u00a0<\/strong><\/h2>\n
Protect yourself from hackers and bad actors on the dark web\u00a0<\/strong><\/h2>\n