Dark web marketplace sells Iranian, Indian official websites’ databases

Hacker group and dark web marketplace CRYP70N1C0D3 hacks and sells the databases of official websites, and hires more hackers to do the same.

Share this Intel:

A marketplace on the dark web, that goes by the name CRYP70N1C0D3, claims to have hacked the database of Iranian Intelligence Agency’s official website, Vaja.ir, and that of Indian Institute of Management, Ahmedabad (iima.ac.in), among several others. The data is now being sold on the hackers’ site. 

CRYP70N1C0D3 sells databases of several Iranian, American, and Indian websites
CRYP70N1C0D3 sells databases of several Iranian, American, and Indian websites

The site that claims to be “the best market for databases and tools,” maintains a list of all website databases that are for sale. Along with the name of the website, CRYP70N1C0D3 has also listed the value at which it is being sold, and the status of the sale. The databases of sites such as vaja.ir and iima.ac.in have an OPEN status, which means that they can be sold more than one time. 

Moreover, in an effort to sell the data, the website was found inviting freelance hackers to join the team. 

They use Protonmail email service and in fact require all buyers, job applicants, and advertisers to contact them through [email protected]. They have also left specific instructions for anyone trying to contact them, on the website.

CRYP70N1C0D3’s instructions on how to contact them via mail
CRYP70N1C0D3’s instructions on how to contact them via mail

Be informed about these Threats in your Inbox

Sign up now to our Threat intelligence Newsletter and be the first to know about these threats first in your inbox.