Illicit trade is the exchange of goods, services, or data that is illegal under applicable law. In cyber security, it includes the sale of stolen credentials, malware, access to compromised systems, counterfeit software licenses, and other digital contraband. Criminal marketplaces often borrow features from legitimate e-commerce, such as search, vendor ratings, escrow-style payment flows, and dispute handling, to make illegal activity easier to scale.
This matters because illicit trade turns isolated attacks into repeatable supply chains. A single broker, marketplace, or messaging channel can connect many offenders, move stolen data faster, and reduce trust barriers between strangers. Defenders look for the operational traces it leaves behind: payment patterns, reused usernames, infrastructure overlaps, shipping or hosting links, and transaction metadata. Disrupting the marketplace, not just the individual buyer or seller, can reduce the efficiency and durability of the whole criminal ecosystem.