Security researchers from Kaspersky who monitor the activities of cybercriminals on the Darknet, and especially on network Tor, they discovered that the number of activities taking place over the anonymous network is increasing.
According to Kaspersky Lab researcher, Sergey Lozhkin, there are currently about 900 hidden service Tor with 5,500 nodes and 1,000 exit nodes.
Cybercriminals are attracted to the Tor network for a number of reasons. It allows them to create anonymous underground forums and marketplaces, and they can use it to create command center infrastructures and control for malware (C&C) that will be difficult to disrupt.
Examples of malware used by the Tor network to communicate with C&C are ZeuS, Chewbacca, and even more recently Backdoor.AndroidOS.Torec.a (an Android Trojan).
Using Tor for malware has advantages as well as drawbacks. The fact that Tor-based malware is larger in size and more difficult to grow makes it more rare, but not that it does not exist. Lozhkin believes that their number will soon increase.