“illegalplatform.com” was established by threat actors with the code names “root” and “Alexey”. The forum primarily facilitates the illegal activities and actions of threat actors residing in Turkey. Memberships on the forum are divided into two types: regular and VIP memberships, both of which are paid. Users who merge their Telegram and forum accounts using a bot named “ispiyoncu” (informant) via Telegram are referred to as verified accounts. The language used in the forum is Turkish. Forum memberships are characterized by several factors including username, membership date, Telegram address, number of topics, number of messages, reputation score, balance amount, and membership type. Members with older membership dates and higher numbers of topics, messages, and reputation scores are generally considered trustworthy within the forum. The forum is abbreviated as “IP,” inspired by the initials of two words in its domain name.
Forum Administrator Profiles:
The threat actor with the code name “Alexey” established the forum membership on March 30, 2017, with Founder membership privileges. Within the forum, they have opened 91 topics, made 511 message posts, and accumulated 3407 reputation points, earning them a trusted member status. They have also engaged in forum trading, resulting in a balance of 9900 USDT. Upon reviewing their forum topics, it was observed that they mainly focused on forum management and leaked data from other illegal and legal forum websites.
The threat actor with the code name “root” also established forum membership on March 30, 2017, with Founder membership privileges. Within the forum, they have opened 149 topics, made 1094 message posts, and accumulated 4786 reputation points, earning them a trusted member status. They have also engaged in forum trading, resulting in a balance of 32730.84 USDT. Upon reviewing their forum topics, it was observed that they mainly focused on forum management, sharing leaked data sets, sharing stealer logs, money laundering through fraudulent methods, sharing phishing systems and methods, and leaking data from other illegal and legal forum websites.
