Phishing Explained
7 min read
Phishing is one of the most common threats on the dark web. Understanding how it works is essential for staying safe.
What is Phishing?
Phishing attacks attempt to trick you into revealing sensitive information or visiting fake sites that steal your credentials.
Dark Web Phishing Methods
- Phishing Clones: Fake copies of legitimate markets
- Impersonation: Attackers posing as vendors or admins
- False Links: Messages with malicious .onion URLs
- Profile Hijacking: Compromised accounts sending fake messages
How to Identify Phishing
- Check the .onion address character-by-character
- Look for anti-phishing signals (CAPTCHA, PGP 2FA)
- Verify against multiple independent sources
- Be suspicious of urgent messages
- Avoid entering credentials from messages
Anti-Phishing Signals
- CAPTCHA Gates: Real markets often have CAPTCHA at entry
- PGP 2FA: Encrypted login challenges
- On-Site Verification: Built-in address checkers
- Vendor PGP Keys: Verified vendor public keys
Conclusion
Always verify addresses and avoid trusting links from messages. Cross-check against trusted directories.