This episode of Darknet Diaries explores Blackshades, a $40 remote access trojan (RAT) sold openly online that allowed attackers to spy on victims via webcams, steal passwords, and extort them. It details the malware's creation, its use in voyeurism and political repression during the Syrian Civil War, and the massive global law enforcement operation in 2014 that led to 97 arrests. The story highlights the importance of cybersecurity awareness and the evolving nature of malware.
Summarized by Podsumo
Blackshades was marketed as legitimate monitoring software but was actually a powerful RAT used for spying, extortion, and theft, infecting over a million computers worldwide.
The FBI's Operation Card Shop in 2014 resulted in 97 arrests across 18 countries, one of the largest global cyber operations in history, targeting both creators and users of the malware.
The malware was used by the Syrian government to spy on opposition activists during the civil war, demonstrating how off-the-shelf tools can be repurposed for political repression.
Notable cases include Miss Teen USA Cassidy Wolf, who was extorted by a classmate, and Stefan Rigo, who infected over a dozen women for voyeuristic purposes.
The episode emphasizes practical cybersecurity advice: cover cameras, use unique passwords, verify suspicious messages, and treat the internet as hostile.
"The problem isn't always unknown software anymore. Sometimes it's trusted software being used by the wrong person."
— ThreatLocker advertisement
"He could hear conversations people were having. He watched them get undressed... Stefan got seriously addicted to watching what women do in the privacy of their own homes."
— Narrator
"If you think you can hide behind your computer screen, think again. Just like in the physical world, the FBI will follow the digital trail to your doorstep."
— Leo Tadio, FBI Special Agent