Solaris (darknet marketplace)

History

2023: Hijacking by Hackers

In mid-January 2023, it became known that the Solaris site, a major player in the darknet market specializing in drugs and illegal substances, was seized by a smaller competitor.

It is reported that the attack was carried out by members of the Kraken cyber group. Allegedly, Solaris systems were hacked on January 13, 2022. The Solaris site located on Tor networks is redirected to Kraken addresses. Information security experts explain the situation by Kraken's desire to lure a wider competitor audience.

Solaris, a major darknet market player specializing in drugs and illegal substances, was captured by a smaller competitor.

On January 13, 2023, Kraken announced that they had taken over the Solaris infrastructure, the GitLab repository and all the project's source codes thanks to "several huge code errors." According to hackers, it took only a few days to conduct such a large-scale cyber operation.

The Kraken post claims it took them three days to steal open text passwords and keys stored on Solaris servers. After that, access was obtained to the infrastructure of the platform, which is located in Finland. Then the organizers of the cyber attack were able to download confidential data. Moreover, it is reported that this did not amount to much difficulty. It is said that during the cybercriminal campaign, the Solaris bitcoin server was disabled. Hackers say they will continue attacks on other similar platforms.

The project has several huge bugs in the code that remain relevant to this day, they can be used over and over again. And storing passwords and keys from your servers in clear text is an even greater mistake than that of schoolchildren on the fifth desk [meaning the most disinterested users]. This attack took us three days in leisurely mode and we downloaded absolutely EVERYTHING that is possible in such cases, and no one stopped us, "Kraken said in an announcement.[1]

Notes