Dark Reading Confidential: A Guided Tour of Today's Dark Web

According to Dark Reading Confidential: A Guided Tour of Today's Dark Web, Episode 9 of the podcast features Keith Jarvis of Sophos' Counter Threat Unit discussing how the Dark Web and Tor networks are central to both cybercrime and cybersecurity research.

The conversation covers why ransomware operators predominantly use the Tor network to publish leaked data and market malware, while some maintain clear Web sites for operational security, and how law enforcement has been increasing cooperation to seize sites and secure private keys. The speakers note that credential markets such as Russian Market remain active on Tor, with broader collaboration improving attribution by linking Dark Web activity to real‑world attacks.

They also discuss the impact of OFAC sanctions on forcing some groups to rebrand, and the ongoing use of AI and network analysis to scale Dark Web research and improve threat attribution. The discussion, published on 28 August 2025, highlights both the evolving collaboration between public and private sectors and the challenges of translating Dark Web insights into concrete protections for organisations.