A dark web market is an underground marketplace where criminals buy and sell illicit goods and services, such as stolen credentials, malware, access to compromised systems, and fraudulent documents. These venues are often hidden behind anonymity networks and use escrow, reputation systems, and private messaging to support trade while reducing trust problems among buyers and sellers.
In cyber security, dark web markets matter because they reveal demand and pricing for attacker resources. A rise in price can suggest that certain access types are scarce or especially valuable, while more listings can indicate oversupply or shifting supply chains. Defenders monitor these markets as threat intelligence, looking for mentions of their own organization, exposed credentials, or access brokers. That visibility can help prioritize hardening, credential resets, and incident response before stolen access is used in an attack.