The Use of Online Crime Markets by Cybercriminal Networks: A View From Within

Abstract

In this article, we study the various functions of online cybercriminal meeting places from a unique perspective: We do not take the criminal meeting place as a starting point, but the users—the criminal networks. This allows not only for a view of what is happening on online meeting places, but it also places online meeting places into perspective. Our data consisted of detailed case descriptions of 40 cybercriminal networks active in the Netherlands (18), Germany (3), the United Kingdom (9), and the United States (10). Reconstructions were made based on analysis of police files and/or interviews with case officers and public prosecutors. Online meeting places play a role in the majority of our cases: to meet co-offenders, to buy tools, or to sell data. However, from a crime script perspective, the role of forums is much more modest. Forums, for example, can be used to find suitable co-offenders, but in the majority of our cases the core members did not meet at forums. Offline meeting places still play an important role in cybercriminal networks. Furthermore, forums can be viewed as online versions of offline offender convergence settings—physical locations such as a bar—where criminals can meet, and ensure continuity and structure. However, forums might be more accessible than physical criminal meeting places. For a curious newbie, it is, for example, easier to visit all sorts of forums than it is to visit all sorts of criminal bars. Finally, our cases show that the learning function of forums should not be underestimated.