Operation Onymous

Europol HQ in The Hague

Operation Onymous was an international law enforcement operation targeting darknet markets and other hidden services operating on the Tor network.

Raids

On 5 and 6 November 2014, a number of websites, initially claimed to be over 400, were shut down including drug markets such as Silk Road 2.0, Cloud 9 and Hydra.[1][2][3] Other sites targeted included money laundering sites and "contraband sites". The operation involved the police forces of 17 countries.[4] In total there were 17 arrests.[2] A 26-year-old software developer was arrested in San Francisco and accused of running Silk Road 2.0 under the pseudonym 'Defcon'.[5] Defcon was "one of the primary targets".[2] Within hours of the seizure a third incarnation of the site appeared, 'Silk Road 3.0'; Silk Road had previously been seized in October 2013, and then resurrected, weeks later, as 'Silk Road 2.0'.[6]

$1 million in Bitcoin was seized, along with €180,000 in cash, gold, silver and drugs.[7] Of the "illicit services" that were initially claimed to have been shut down,[4] few were online marketplaces like Silk Road. A complaint filed on 7 November 2014 in the United States District Court for the Southern District of New York, "seeking the forfeiture of any and all assets of the following dark market websites operating on the Tor network", referred to just 27 sites, fourteen of which were claimed to be drug markets; the others allegedly sold counterfeit currency, forged identity documents or stolen credit cards.[8]

US and European agencies sought to publicise the claimed success of their six-month-long operation, which "went flawlessly".[1][9] The UK National Crime Agency sent out a tweet mocking Tor users.[10] The official Europol press release quoted a US Homeland Security Investigations official, who stated: "Our efforts have disrupted a website that allows illicit black-market activities to evolve and expand, and provides a safe haven for illegal vices, such as weapons distribution, drug trafficking and murder-for-hire."[7][9]

Other leading drug markets in the Deep Web were unaffected, such as Agora, Evolution and Andromeda. Whereas Silk Road did not in fact distribute weapons, or offer contract killings, Evolution did allow trade of weapons as well as drugs.[11] Prior to the closure of Silk Road 2.0, Agora already carried more listings than Silk Road, and Evolution was also expected to overtake it.[2][12] Agora and Evolution are more professional operations than Silk Road, with more advanced security; the arrest of the alleged Silk Road manager is thought to have been largely due to a series of careless mistakes.[10][11][13]

The figure of 414 dark net sites, which was widely reported internationally, and appeared in many news headlines,[14][15][16] was later adjusted without explanation to "upward of 50" sites.[10][17][18] The true figure is thought to be nearer to 27 sites, to which all 414 .onion addresses direct.[13][17][19][20] Australian journalist Nik Cubrilovic claimed to have discovered 276 seized sites, based on a crawl of all onion sites, of which 153 were scam, clone or phishing sites.[21]

Tor 0-day exploit

The number of sites that police initially claimed to have infiltrated led to speculation that a weakness in the Tor network had been exploited. This possibility was downplayed by Andrew Lewman, a representative of the not-for-profit Tor project, suggesting that execution of traditional police work such as following Bitcoins[22] was more likely.[23][10][24] Lewman suggested that such claims were "overblown" and that the authorities wanted to simply give the impression they had "cracked" Tor to deter others from using it for criminal purposes.[22] A representative of Europol was secretive about the method used, saying: "This is something we want to keep for ourselves. The way we do this, we can’t share with the whole world, because we want to do it again and again and again."[25]

It has been speculated that hidden services could have been deanonymized if law enforcement replicated the research by CERT at Carnegie Mellon University up until the July 30th patch to mitigate the issue.[26] If sufficient relay nodes were DDOSed, an attacker could perform traffic confirmation attacks in conjunction with a Sybil attack, by forcing traffic to route over law enforcement controlled nodes, a theory partially supported by logs released by the administrator of Doxbin.[27] Court documents released in November 2015[28] generated serious research ethics concerns in the Tor and security research communities[29][30] about the warrantless exploit[31] (which presumably had been active from February 2014 to July 4, 2015).[32] The Tor Project patched the vulnerability and the FBI denied having paid Carnegie Mellon $1 million to exploit it.[33] Carnegie Mellon also denied receiving money.[34]

References

  1. 1 2 Caleb Chen. "Operation 'Onymous' Also Shut Down Dark Net Markets Cloud 9 Hydra and Maybe More". CryptoCoinsNews, 6 November 2014.
  2. 1 2 3 4 Andy Greenberg. "'Operation Onymous' Arrests 17, Seizes Hundreds Of Dark Web Domains". Wired.
  3. ↑ Andy Greenberg. "Not Just Silk Road 2: Feds Seize Two Other Drug Markets and Counting". Wired.
  4. 1 2 Tom Fox-Brewster (7 November 2014). "Silk Road 2.0 targeted in 'Operation Onymous' dark-web takedown". The Guardian. Retrieved 7 November 2014.
  5. ↑ Robert McMillan (10 November 2014). "Alleged Silk Road 2 Mastermind Worked for Ex-Googler's Secret Startup". Wired. Retrieved 12 November 2014.
  6. ↑ James Cook (7 November 2014). "There's Already A Silk Road 3.0". UK Business Insider. Retrieved 8 November 2014.
  7. 1 2 "Global Action Against Dark Markets On Tor Network". Europol. 7 November 2014. Retrieved 9 November 2014.
  8. ↑ Kate Vinton (7 November 2014). "So Far Feds Have Only Confirmed Seizing 27 "Dark Market" Sites In Operation Onymous". Forbes. Retrieved 8 November 2014.
  9. 1 2 James Cook (7 November 2014). "More Details Emerge Of How Police Shut Down Over 400 Deep Web Marketplaces As Part Of 'Operation Onymous'". UK Business Insider. Retrieved 9 November 2014.
  10. 1 2 3 4 Patrick Howell O'Neill (7 November 2014). "The truth behind Tor's confidence crisis". The Daily Dot. Retrieved 10 November 2014.
  11. 1 2 Andy Greenberg (18 September 2014). "The Dark Web Gets Darker With Rise of the 'Evolution' Drug Market". Wired. Retrieved 7 November 2014.
  12. ↑ Christopher Ingraham (6 November 2014). "The FBI promises a perpetual, futile drug war as it shuts down Silk Road 2.0". Washington Post. Retrieved 7 November 2014.
  13. 1 2 Alex Hern (11 November 2014). "Operation Onymous may have exposed flaws in Tor, developers reveal". The Guardian. Retrieved 12 November 2014.
  14. ↑ Jane Wakefield (7 November 2014). "Huge raid to shut down 400-plus dark net sites". BBC. Retrieved 10 November 2014.
  15. ↑ Alistair Charlton (7 November 2014). "Operation Onymous: Six Britons Arrested as Police Bust 400 Drug Dealing Dark Websites". International Business Times. Retrieved 10 November 2014.
  16. ↑ Martyn Williams (7 November 2014). "Biggest ever Tor raid hits 410 underground sites; 17 arrested". PC World. Retrieved 10 November 2014.
  17. 1 2 Patrick Howell O'Neill (7 November 2014). "Just how many Dark Net sites did cops really shut down?". The Daily Dot. Retrieved 10 November 2014.
  18. ↑ Benjamin Weiser and Doreen Carvajal (7 November 2014). "International Raids Target Sites Selling Contraband on the 'Dark Web'". New York Times. Retrieved 10 November 2014.
  19. ↑ Dave Lee (10 November 2014). "Dark net experts trade theories on 'de-cloaking' after raids". BBC. Retrieved 11 November 2014.
  20. ↑ phobos (9 November 2014). "Thoughts and Concerns about Operation Onymous". Tor blogs. Retrieved 12 November 2014.
  21. ↑ Nik Cubrilovic (17 November 2014). "Large Number of Tor Hidden Sites Seized by the FBI in Operation Onymous were Clone or Scam Sites". Retrieved 14 January 2015.
  22. 1 2 Lee, Dave (10 November 2014). "Dark net raids were 'overblown' by police, says Tor Project". Retrieved 22 August 2015.
  23. ↑ Wakefield, Jane (7 November 2014). "Huge raid to shut down 400-plus dark net sites". Retrieved 9 August 2015.
  24. ↑ Shawn Knight (7 November 2014). "Operation Onymous seizes hundreds of darknet sites, 17 arrested globally". Techspot. Retrieved 8 November 2014.
  25. ↑ Greenberg, Andy (7 November 2014). "Global Web Crackdown Arrests 17, Seizes Hundreds Of Dark Net Domains". Retrieved 9 August 2015.
  26. ↑ Gingold, Naomi (8 December 2014). "Did the FBI Break Tor?". Retrieved 9 August 2015.
  27. ↑ "Did Feds Use DDoS Attacks to Deanonymize Darknet Sites Seized in Operation Onymous?". 11 November 2014. Retrieved 9 August 2015.
  28. ↑ "Court Docs Show a University Helped FBI Bust Silk Road 2, Child Porn Suspects". Motherboard.
  29. ↑ "Why the attack on Tor matters". Ars Technica.
  30. ↑ "Did the FBI Pay a University to Attack Tor Users?".
  31. ↑ "Tor Project claims FBI paid university researchers $1m to unmask Tor users".
  32. ↑ Kate Knibbs. "Attack on Tor Has Likely Stripped Users of Anonymity". Gizmodo. Gawker Media.
  33. ↑ "FBI: "The allegation that we paid CMU $1M to hack into Tor is inaccurate"". Ars Technica.
  34. ↑ https://nakedsecurity.sophos.com/2015/11/20/carnegie-mellon-denies-fbi-payment-for-tor-cracking-technique/
This article is issued from Wikipedia. The text is licensed under Creative Commons - Attribution - Sharealike. Additional terms may apply for the media files.