For cybercriminals, the deep and dark web are key channels for communicating and collaborating with other threat actors as well as buying and selling services and resources, such as tools for cyberattacks and compromised information stolen from past attacks. Most importantly for these criminals, the dark web is a place to do all of these things anonymously. Understanding the cybercriminal underground is a critical component of your threat intelligence program, however, finding what you’re looking for is not simple.