AlphaBay


AlphaBay Market was an online darknet market which operated on an onion service of the Tor network. It was shut down after a law enforcement action as a part of Operation Bayonet against it in the United States, Canada, and Thailand, reported 13 July 2017. The alleged founder, Alexandre Cazes, a Canadian citizen born on 19 October 1991, was found dead in his cell in Thailand several days after his arrest; suicide is suspected.

History

AlphaBay was reportedly launched in September 2014, pre-launched in November 2014 and officially launched on December 22, 2014. It saw a steady growth, with 14,000 new users in the first 90 days of operation. The darknet informer website Gwern.net placed AlphaBay Market in the top tier of markets regarding the 6-month survival probability and it had proven to be successful. In October 2015, it was recognized as the largest online darknet market according to Dan Palumbo, research director at Digital Citizens Alliance.
Non-standard services included customisable digital contracts around building reputations.
In May 2015, the site announced an integrated digital contracts and escrow system. The contract system allows users to make engagements and agree to provide services in the future, according to the terms of the contract.
By October 2015, AlphaBay had over 200,000 users.
At the time of its demise in July 2017, AlphaBay had over 400,000 users.
AlphaBay was noteworthy in the world of darknet markets for accepting another cryptocurrency in addition to bitcoin; support for Monero, supposedly more anonymous, was implemented at the end of August 2016.

Site breaches

In April 2016, AlphaBay's API was compromised leading to 13,000 messages being stolen. In January 2017, the API was once again compromised, allowing over 200,000 private messages from the last 30 days and a list of user names to be leaked. The attack was from a single hacker who was paid by AlphaBay for the disclosure. AlphaBay reported that the exploit had only been used in conjunction with this attack and not used previously.

News coverage

On March 28, 2015, AlphaBay Market made the news for selling stolen Uber accounts. Uber made a statement regarding a potential data breach:
"We investigated and found no evidence of a breach. Attempting to fraudulently access or sell accounts is illegal and we notified the authorities about this report. This is a good opportunity to remind people to use strong and unique usernames and passwords and to avoid reusing the same credentials across multiple sites and services."

In October 2015, the London-based telecommunications company TalkTalk sustained a major hack. The stolen data was put for sale on AlphaBay Market, which led to the arrest of a 15-year-old boy. TalkTalk CEO Dido Harding issued the following statement:
"TalkTalk constantly updates its systems to make sure they are as secure as possible against the rapidly evolving threat of cyber crime, impacting an increasing number of individuals and organisations. We take any threat to the security of our customers' data extremely seriously and we are taking all the necessary steps to understand what has happened here."

In August 2017, AlphaBay was revealed as a possible venue by which one of the perpetrators of the 2017 Jewish Community Center bomb threats sold a "School Email Bomb Threat Service." This individual, Michael Kadar, made 245 threatening calls to schools and community centers. Criminologist David Decary-Hetu noted this event as notable for being the first example of criminal services being sold over a darkmarket. He said, "All the cases I have heard of so far turned out to be law enforcement trying to find people of interest," making this case unique in his experience to that point.

Seizure and shutdown

By July 2017, AlphaBay was ten times the size of its predecessor Silk Road, had over 369,000 listings, 400,000 users, was facilitating US$600,000-$800,000 of transactions per day, and had reportedly built a strong reputation. However, a series of elementary operational security errors lead to its downfall:
Law enforcement took at least one month to obtain a US warrant, then over one month to obtain foreign warrants, prepare for and execute searches and seizures in Canada and Thailand: