Examine our research from the last year in the ReliaQuest 2024 Annual Cyber-Threat Report
Reduce Alert Noise and False Positives
Boost your team's productivity by cutting down alert noise and false positives.
Automate Security Operations
Boost efficiency, reduce burnout, and better manage risk through automation.
Dark Web Monitoring
Online protection tuned to the need of your business.
Maximize Existing Security Investments
Improve efficiencies from existing investments in security tools.
Beyond MDR
Move your security operations beyond the limitations of MDR.
Secure with Microsoft 365 E5
Boost the power of Microsoft 365 E5 security.
Secure Multi-Cloud Environments
Improve cloud security and overcome complexity across multi-cloud environments.
Secure Mergers and Acquisitions
Control cyber risk for business acquisitions and dispersed business units.
Operational Technology
Solve security operations challenges affecting critical operational technology (OT) infrastructure.
Force-Multiply Your Security Operations
Whether you’re just starting your security journey, need to up your game, or you’re not happy with an existing service, we can help you to achieve your security goals.
Detection Investigation Response
Modernize Detection, Investigation, Response with a Security Operations Platform.
Threat Hunting
Locate and eliminate lurking threats with ReliaQuest GreyMatter
Threat Intelligence
Find cyber threats that have evaded your defenses.
Model Index
Security metrics to manage and improve security operations.
Breach and Attack Simulation
GreyMatter Verify is ReliaQuest’s automated breach and attack simulation capability.
Digital Risk Protection
Continuous monitoring of open, deep, and dark web sources to identify threats.
Phishing Analyzer
GreyMatter Phishing Analyzer removes the abuse mailbox management by automating the DIR process for you.
Integration Partners
The GreyMatter cloud-native Open XDR platform integrates with a fast-growing number of market-leading technologies.
Unify and Optimize Your Security Operations
ReliaQuest GreyMatter is a security operations platform built on an open XDR architecture and designed to help security teams increase visibility, reduce complexity, and manage risk across their security tools, including on-premises, clouds, networks, and endpoints.
Blog
Company Blog
Case Studies
Brands of the world trust ReliaQuest to achieve their security goals.
Data Sheets
Learn how to achieve your security outcomes faster with ReliaQuest GreyMatter.
eBooks
The latest security trends and perspectives to help inform your security operations.
Industry Guides and Reports
The latest security research and industry reports.
Podcasts
Catch up on the latest cybersecurity podcasts, and mindset moments from our very own mental performance coaches.
Solution Briefs
A deep dive on how ReliaQuest GreyMatter addresses security challenges.
White Papers
The latest white papers focused on security operations strategy, technology & insight.
Videos
Current and future SOC trends presented by our security experts.
Events & Webinars
Explore all upcoming company events, in-person and on-demand webinars
ReliaQuest ResourceCenter
From prevention techniques to emerging security trends, our comprehensive library can arm you with the tools you need to improve your security posture.
Threat Research
Get the latest threat analysis from the ReliaQuest Threat Research Team. ReliaQuest ShadowTalk Weekly podcast featuring discussions on the latest cybersecurity news and threat research.
Shadow Talk
ReliaQuest's ShadowTalk is a weekly podcast featuring discussions on the latest cybersecurity news and threat research. ShadowTalk's hosts come from threat intelligence, threat hunting, security research, and leadership backgrounds providing practical perspectives on the week's top cybersecurity stories.
March 26, 2024
About ReliaQuest
We bring our best attitude, energy and effort to everything we do, every day, to make security possible.
Leadership
Security is a team sport.
No Show Dogs Podcast
Mental Performance Coaches Derin McMains and Dr. Nicole Detling interview world-class performers across multiple industries.
Make It Possible
Make It Possible reflects our focus on bringing cybersecurity awareness to our communities and enabling the next generation of cybersecurity professionals.
Careers
Join our world-class team.
Press and Media Coverage
ReliaQuest newsroom covering the latest press release and media coverage.
Become a Channel Partner
When you partner with ReliaQuest, you help deliver world-class cybersecurity solutions.
Contact Us
How can we help you?
A Mindset Like No Other in the Industry
Many companies tout their cultures; at ReliaQuest, we share a mindset. We focus on four values every day to make security possible: being accountable, helpful, adaptable, and focused. These values drive development of our platform, relationships with our customers and partners, and further the ReliaQuest promise of security confidence across our customers and our own teams.
More results...
The Olympus cybercriminal marketplace has been caught up in another PR disaster, with the owners reportedly conducting an exit scam and stealing user funds. Early this month, discussions on the online Dread forum hinted that the highly regarded (emphasis on the past tense) Olympus went offline, though this was unconfirmed. Reasons for its sudden inactivity remained unclear at the time, although Hugbunter – a respected user in the community – suggested that an exit scam had taken place as the site admins were unreachable and order finalization was no longer working. With an exit scam appearing likely, Hugbunter issued warnings to vendors, imploring them to withdraw their money.
One of the sites moderators, Ori, reached out to Hugbunter two weeks later confirming that the site admins had disappeared; the suspicions became a reality. The Olympus exit scam is a telling illustration that the marketplace model continues to struggle in a post-Alphabay and Hansa Age.
Figure 1: Ori, Olympus moderator, confirms that Olympus has shut down
Olympus was one of the bookmaker’s favorites when it came to dark web markets, with some going far as claiming it would be the next generation market to replace AlphaBay and Hansa. So, with the odds in its favour, why did Olympus make an exit? We look at the three potential reasons:
In a post- Alphabay and Hansa age, the fall of Olympus has become a symbol of the shifting behaviour in dark web vendors. As we’ve highlighted before, trust is one of many important factors that determine the success of a marketplace. Users don’t naturally trust new markets, often for fear that they’re law enforcement in disguise. A new market like Olympus would not have been immune from such suspicion and scrutiny.
To overcome this obstacle and appear legitimate, HugBunter alleged that Olympus listed fake sales, bloating the market to make the market appear bigger than it was.
Figure 2: Hugbunter performs a post-analysis of the exit scam
Olympus went into the market either underprepared or underfinanced, or both. Like any business, you need a wealth of resources to kick things off the ground, including start-up capital, e-commerce skills (for user experience) and marketing budget (you’ve got to get your name out there). You might need multiple employees to execute jobs such as moderators, customer service and site maintenance. These employees need to be paid, and that means more costs. Finally, marketplaces and forums need to protect themselves from attackers, rival sites and law enforcement, so security services such as bullet-proof hosting are also a financial consideration.
Olympus may have underestimated the hidden costs associated with a dark web market and failing to accumulate such capital stifled both its ability grow and succeed. We don’t know this for sure, but an exit scam may have been the easy way out of such a scenario.
Customers are your biggest advocates. Olympus was only shooting itself in the foot when it claimed it was in the process of hacking Dread, a reddit-style community with a big cult following, earlier this year. The claim only served to irk Olympus vendors, rallying them behind Dread. Though Olympus admins retracted their claim and added they would hire ‘good PR’, how they handled the situation impacted the way Olympus was perceived, and its reputation never recovered.
Vendors may flock to other markets, with Rapture market and Berlusconi offering some appeal to former Olympus advocates.
Figure 3: One user highlights how Olympus vendors may move to other markets
That said, vendors are vying for a secure, trusted and respectable market to fill the hole left by AlphaBay and Hansa, but the sudden rise and fall of Olympus demonstrates that new markets are very volatile. Vendors may choose to stick with what they know – whether that be an older, established marketplace, or alternative platforms altogether.
Figure 4: Dreddit user suggests all new markets should be distrusted
Distrust is rife within the cybercriminal ecosystem. When Olympus went offline with no direct communication to the vendors, this only heightened tension and suspicion. And although Ori, one of Olympus moderators, reached out two weeks later apologising for the situation, the message was long overdue. The silence that followed Olympus’ inactivity would have been enough for users to assume that law enforcement had infiltrated the market. Timing is everything.
Adding to that, vendors are claiming that the Olympus admins have stolen credentials. Whether true or not, such claims can only perpetuate suspicion within the community and vendors will approach new markets with even more apprehension.
Figure 5: Reddit user claiming Olympus credentials were stolen and reused on rival markets
Time, money and fear of getting caught are proving to be a high price to pay for vendors whose dark web markets just vanish. Such behaviour will only mean that vendors will turn to more secure and reliable methods of communication – just look at our blog which highlights that cyber criminals are switching to messaging platform, like Telegram and Discord.
Olympus’ fall consolidates Digital Shadow’s assessment that the traditional marketplace model is rapidly in decline. Whether it recovers remains to be seen.
To stay up to date with the latest Digital Shadows (now ReliaQuest) threat intelligence and news, subscribe to our threat intelligence emails here.