Technical vulnerabilities prevent full-proof anonymity when browsing the dark web

The dark web can expose anonymous users to potentially dangerous environments

Browsing the dark web requires onion routing, which prevents visitors from being identified and the locations from which they connect from being traced. This has been useful to activists in environments affected by political oppression or instability. However, those unfamiliar with navigating the space may encounter malware and network attacks from denizen hackers.

A US Department of Defense research lab developed the technology for the dark web

Although encryption existed to mask the content of communications across the internet before the 1990s, those managing overseas network infrastructure could determine a spy's affiliation based on where they saw data sent to and received from. To keep this information secret, the US Naval Research Laboratory developed onion routing, which enabled anonymized web browsing. The release of the technology to the public obscured sensitive communications further by growing the volume of anonymous data.

A 2020 study suggests just 6.7% of Tor network users visit sites on the dark web

It did not distinguish between visits to malicious sites and traffic to legitimate institutions with .onion domains, such as the BBC or Buzzfeed, and thus claimed that 6.7% of anonymized users engage in nefarious activity. The low percentage still highlights that most users of the technology underlying the dark web do not use it to browse the hidden portion of the internet.

Explore metrics on the Tor network, the infrastructure of the dark web

While internet traffic within the network is concealed, public, nonsensitive data can be used to estimate the number of active users, the number of relay servers, network performance speed and reliability, etc. Researchers can use this data to indirectly identify political upheavals or censorship campaigns worldwide, such as the Arab Spring.

The dark web cannot be stumbled upon by accident

Many pages on the dark web are not publicly broadcast and are available only to relevant parties on a need-to-know basis. Although some online directories list the URLs for these webpages, connecting to them still requires specialized software, as these pages block connections from traditional web browsers such as Chrome.

Accessing the dark web is legal in the US, the EU, and most countries worldwide

As long as users do not pay for illegal goods or services or acquire illegal content, they cannot be prosecuted. Those on the dark web include academics, researchers, and cybersecurity experts gathering threat intelligence on cybercriminals, cyberterrorists, and state actors, as well as protesters, activists, and grassroots organizers.

The dark web protects free speech from censorship and authoritarian oversight

Encrypted networks allow users with internet access anywhere in the world to view blocked content and avoid surveillance when communicating evidence of abuse to independent journalists. The same networks can support democracies by helping activists coordinate protests on dark web forums.

Credit monitoring services may oversell the benefits of dark web monitoring

Currently, technology exists to scrape and download data from webpages, which can then be analyzed to identify a user's information. However, scrapers cannot access or remove personal data from dark websites because they are often protected by paywalls, rendering monitoring ineffective beyond reporting publicly available data breaches.

Watch an ethical hacker provide a tour of the dark web

Cybersecurity researcher John Hammond explores the effectiveness of a dark web search engine, leaks from ransomware group data breaches, and a categorized index of dark web links, including some that are alleged to host malware. Many dark web sites are no longer active or host scams to fool unsuspecting visitors.

The dark web makes up about 0.01% of all the data on the internet

The surface web (5%-10%) consists of indexed sites—those traditional search engines have visited and stored so users can discover them via web search. The remaining 90%-95% makes up the deep web, which is not indexed and includes email and banking portals that require login credentials. The dark web is unindexed and requires anonymizing software to visit.

As of April 2022, a million people access Facebook on the dark web monthly

While those using an anonymized web browser, such as Tor, have been able to access the social network's .onion site since 2014, the announcement marks a major milestone by the tech giant, which has worked to ensure its users can bypass restrictions by various governments and continue visiting the site.

Instead of .com or similar, web addresses on the dark web end in 'd.onion'

Since the latest version of the onion routing protocol, dark web domain names consist of a random set of 56 alphanumeric characters followed by .onion (e.g., propublica.org → p53lf57qovyuvwsc6xnrppyply3vtqm7l6pcobkmyqsiofyeznfu5uqd.onion). The last character is always "d" due to the encryption algorithm's requirements.

Explore content on the dark web safely with the Ahmia search engine, which has provided activists with digital addresses to anonymously send files to media outlets.

Onion routing disguises internet traffic in layers resembling a nesting doll

Data is encrypted at least three times before being sent to a node—a server that can only decrypt one layer. Then, the underlying encrypted data is relayed to another node, and the process repeats until all layers are decrypted. Thousands of possible nodes make it extremely difficult to trace activity within the system.

Fraud and identity theft are among the most common dark web-related crimes.

The deep web accounts for 90-95% of the internet

Within the Deep Web is the small and hidden Dark Web, which is inaccessible via traditional web browsers. Dark Web inhabitants are anonymous and use special software to access encrypted websites that can assist with both free speech and criminal activity.

Trudging through the dark web to expose child abuse

A computer expert who created a system to track down sources of revenge porn and an investigative journalist joined forces to investigate digital abuse. Their investigations focused on so-called clear nets, websites that make up the web most users surf. Then, they turned their investigation toward the dark web, where they found a child abuse website with more than 1 million registered users.

As of 2025, an estimated $3.2B in annual revenue flows through dark web platforms

The untraceable cryptocurrency Monero is used in about 60% of transactions across more than 37 active marketplaces that sell copyrighted materials, private information, and phishing kits—tools that help bad actors more easily create fake sites to steal users' data—for financial fraud.

Minor technology failures can spiral into massive internet outages

A mix of centralized cloud infrastructure and legacy protocols leaves the internet susceptible to downtime from minor cyberattacks or software bugs, infrastructure damage caused by extreme weather, and human error if a DNS service provider—the internet's phone book—or a backend system, such as Amazon Web Services, were compromised.

Smart cities without strong cybersecurity can leave utilities extremely vulnerable

Insecure devices connected to the Internet of Things pose risks to the entire network, which cybercriminals can hijack to compromise infrastructure and private resident data. Poorly secured systems that become inoperable can undermine the promise of smart cities by worsening the quality of life.

Visualizing the consequence of data breaches

To get a sense of the grim state of data security today, take a look at this infographic from TruthFinder that explains why 2018 was the year of the data breach tsunami.

Your device can become infected with malware by simply browsing the internet

During a drive-by download attack, security flaws in a program or operating system (e.g., Windows) used to access online content are exploited, and malicious code is downloaded—for example, when loading a hacked webpage—onto a user's device without their knowledge. Restricting internet browsing to safe sites and installing security updates helps prevent these attacks.

Google only sorts and searches a fraction of the overall internet

The "surface web," consisting of billions of public webpages, excludes nonindexed digital content, such as corporate intranets and email inboxes. A deeper layer, called the dark web, is also hidden and requires special software to access.

How end-to-end encryption protects messages, even from service providers

Using symmetric and asymmetric cryptography, data is encrypted on the sender's device before being transmitted across application servers that lack the key needed to decrypt it. The message is not decrypted until it reaches the recipient's device, which uses their private key to recover the plaintext. E2EE's effectiveness has led to its adoption by WhatsApp and Signal.

Marketplaces on the dark web provide eBay-like vendor feedback scores

An HP analysis found that 77% of cybercriminal marketplaces require vendors to purchase a license to sell their products, which can cost up to $3,000. About 92% of these marketplaces also use a third-party dispute-resolution service to handle customer service issues, thereby promoting "honor among thieves."

Individuals have been convicted of ordering assassinations from the dark web

Researchers have uncovered online storefronts allegedly run by members of various mafia or hitmen that offer to harm or murder individuals in exchange for monetary payment. However, no known murder has been attributed to any of them, and cybercrime task forces believe them to be scams (warning—sensitive content).

Explaining how open source systems like Linux can be secure, despite their public source code

While no computer system is immune to all cyberattacks and malware, the transparency of open-source technology means many thousands of developers can review and oversee the underlying code powering the software on an ongoing basis. This increases the likelihood of catching and patching vulnerabilities more quickly than smaller groups of cybercriminals looking to exploit them.

Ads follow you around the internet through technology called 'cookies.'

Silk Road, the dark web's first widely used market, proved the real-world utility of bitcoin

Named after the ancient intercontinental trade network between China and the Roman Empire, the anonymous market was active from early 2011 to October 2013. Before it was shut down, approximately 10,000 products—70% of which were illegal and controlled prescription drugs—were bought and sold using the cryptocurrency.

Visualize how passkeys, which rely on asymmetric cryptography to authenticate users, work

After using biometrics or a PIN to access the private key stored on a device, it is combined with a random number generated by the site to produce a cryptographic signature. This signature is verified using the site's public key, allowing a user to log in without entering a password. This reduces the risk of fraudulent messages—phishing attacks—and data breaches.

The internet explained at five levels of difficulty, from protocols to internet flattening

Resembling a roadway with traffic laws that all cars must follow, the internet is the hardware that connects a source to a destination, and these connections must follow specific software rules. Although data had to travel through about 10 networks to reach a destination in the past, data centers increasingly consolidate traffic, just as a highway does for cars, to improve data speeds.

Anonymous' war against Russia

Anonymous has been waging a cyber war on Russia for invading Ukraine. CNBC takes a look at how effective the collective’s six main strategies have been.

The mathematics of quantum-based cryptography, and why existing data is already at risk

Seeing the potential of this technology, some governments and malicious actors are thought to have already started storing encrypted data, in the hopes that quantum computers within the next 10 to 20 years will be able to decrypt it. As of 2022, the National Institute of Standards and Technology had selected four algorithms for inclusion in a quantum-resistant encryption standard.

How companies track you around the internet, explained

Being able to track how users behave on websites is a massive opportunity for companies to hone their products, target their ads, and more. Dozens of trackers are on the average website you visit, depending on how you deal with that site's cookie policy, and Google is the chief tracker of them all. Learn about these companies and what they are tracking with this informative blog visualization.

Web crawlers and internet archives and back-ups limit perfect erasure of online data

Crawlers are programs that automatically browse the internet for links and index pages for search engines to pull up when page content matches search queries. Networks of global data centers also create copies of content as fail-safes for potential failures to ensure access isn't ever lost.

Explore an interactive timeline of the world's biggest data breaches and hacks, led by the 2024 National Public Data breach, which involved almost three billion stolen records, including full names and Social Security numbers.

OSINT: How hackers find their marks

What is OSINT? How do hackers gather intel about targets? Just how much can they learn about you? Learn more as we dig in to the world of OSINT.

Unlike the models made by large AI companies, open-weight models can have their safeguards removed or weakened, a process that has become increasingly easy and may expose users to harmful information.

Average citizens may be the greatest liability to smart cities

Smart cities utilize massive datasets to enhance mobility, resource utilization, and public safety. However, this data can also be compromised if mishandled by residents, making citizen awareness of risks a key component of cybersecurity efforts.

As of 2025, there are no federal laws involving privacy and smart city technologies

Advancements in cloud technology and artificial intelligence allow cities to capture, store, and analyze more information than ever before. Experts warn that the unhindered ability to collect and use this data may infringe on residents' rights and endanger them if the data gets into the hands of malicious parties.

20 of the most common cyberattacks

While there are dozens of different types of cyber attacks, this article explains the top 20 most common network attack examples, including phishing, whale-phishing, and spear-phishing attacks. Learn how to best protect yourself.

As occurred during the 2026 hack of an AI platform by OpenAI, agentic AI may exploit a system vulnerability to access sensitive data if that information enables it to complete its assigned task.

Learn about the protocols that make navigating the internet possible

While TCP/IP sends data in packets to the correct destination and checks for errors, UDP omits such safety features to speed up data transfer for real-time communication and streaming. Software rules such as HTTP and HTTPS enable the transfer of content on the World Wide Web, while SMTP handles email messages between servers.

Lack of regulation makes cryptocurrency a hotbed for money laundering.

Researchers report that Anthropic's Claude Mythos AI model has identified thousands of high-severity vulnerabilities across various software, including major operating systems and web browsers, and has suggested ways to exploit them.

Malware has transitioned from notoriety-driven to profit- and data-driven

Many of the first researchers and hobbyists who created viruses and worms showed a natural curiosity in experimenting with and designing such software to make a name for themselves and advance the field of computer science. In the future, AI-augmented malware may adapt in real-time or design enhanced cryptojackers, infostealers, and ransomware for cybercriminals.

True crime fans can derail lives with misguided accusations

In the wake of four stabbing deaths at the University of Idaho in November 2023, online sleuths, without any supporting evidence, were quick to point accusatory fingers at potential perpetrators. Poring over news reports, social media pages, and internet interactions can reveal viable information that can help solve crimes. Such (sometimes monetizable) behavior can also easily give rise to rumors and threats while impeding official investigations.(Some readers may experience a paywall.)

Through prompt injection attacks, bad actors provide deceptive prompts to generative AI systems in order to manipulate their outputs and acquire sensitive data.

Social media platforms benefit not just from ensuring they have satisfied users, but also from the personal data they scoop up and can then sell to online advertisers.

Future self-driving cars may communicate across a closed wireless infrastructure

Current autonomous vehicles collect and analyze their own data through their own hardware and proprietary software. Connecting data from all such cars on a single network will require overcoming challenges related to standardization and security.