Repository logo
 

Follow the money: The relationship between currency exchange and illicit behaviour in an underground forum

Accepted version
Peer-reviewed

Type

Conference Object

Change log

Authors

Atondo Siu, Jose Gilberto 
Collier, Ben 

Abstract

Underground forums are used to discuss and organise cybercrime (as well as more conventional social activities). These forums are also commonly used for exchanging various digital currencies, either gained through the profits of crime or through less controversial means. Understanding the link between discussions of illicit behaviour and currency exchange can provide insights to identify money laundering and other parts of the cybercrime supply chain. In this paper we use natural language processing to classify posts from HackForums by crime type over a period of more than 10 years. To the best of our knowledge, this is the first time that this type of classification has been used for this large forum dataset. Although the majority of conversations in the forum were identified as relating to non-criminal discussions, we concentrate on the types of crimes being discussed by those exchanging currencies. We find the most popular topics are related to trading credentials and bots and malware. PayPal was one of the most widely advertised digital currencies and we observe significant displacement from Liberty Reserve to Bitcoin after the former was taken down in 2013. Rather than an explicit 'cashing out' mechanism, in which cryptocurrencies gained through crime flow into state-backed fiat currencies, we instead see a circulation of capital between different forms, as cash is held and then cashed back and forward according to movements in the wider currency market. We continue our examination of discussions of cryptocurrencies and explore how the underground market has reacted to new opportunities, with a qualitative case study about Facebook's putative 'Diem' coin. We find that while most discussions are related to the technical details and potential investment opportunities, some potential cybercrime use-cases are raised.

Description

Keywords

Journal Title

Conference Name

WACCO 2021: 3rd Workshop on Attackers and Cybercrime Operations co-located with the 6th IEEE European Symposium on Security and Privacy 2021

Journal ISSN

Volume Title

Publisher

Rights

All rights reserved
Sponsorship
EPSRC (EP/V026178/1)
ESRC (ES/T008466/1)
This work is supported by the Engineering and Physical Sciences Research Council (EPSRC) [grant number EP/V026178/1] and the Economic and Social Research Council (ESRC) [grant number ES/T008466/1]