Threat Intelligence

Anubis Market: Dark Web Marketplace Trading Stolen Cards, Accounts and Identity Data

SOCRadar · 8 Sept 2026
Key Takeaway SMBs should monitor for their business or customer data appearing on dark web marketplaces as an early warning sign of a breach, and enforce strong credential hygiene to limit what ends up for sale.

Anubis Market is a multi-category dark web marketplace accessible via Tor, using Bitcoin and Monero with escrow-backed trading to build trust between anonymous buyers and sellers. While narcotics make up the largest share of physical goods, its Digital section is the biggest category overall and includes dedicated subcategories for stolen payment cards, bank drops, compromised accounts, stealer logs, identity documents and cracked offensive tools.

The site mimics legitimate e-commerce, with vendor ratings, a search bar, featured listings and site rules discouraging off-platform deals. SOCRadar notes the name Anubis is reused across unrelated threats, including Anubis Ransomware and an Android banking trojan, and there is no confirmed link between these and the marketplace. The roughly 11,000 listings shown on the site should be treated as a marketplace-displayed figure rather than verified inventory, since dark web markets often inflate numbers through duplicate or stale listings.

For Australian businesses, marketplaces like this are where stolen customer data, credentials and payment details often end up for sale after a breach, making them a useful indicator of exposure. Monitoring dark web activity for mentions of your business or customer data can provide early warning of compromise.

Summarised by CISO AI from SOCRadar. We link back to every original so you can read it yourself.