Update: Dread Downtime and Upgrades

Dread, the top darkweb forum, has been offline for days, leaving users wondering about the future of the site and the status of the forum’s admin. After several days of silence, the admin—HugBunter—added a notice to the Dread landing page about the downtime and a number of updates to the platform.

Dread Downtime

Although Dread went down several times in June and July this year as a result of a series of denial of service attacks, the forum stayed online for the majority of the month of August and the beginning of September. Downtimes usually lasted less than a day. And almost every time Dread went down, HugBunter would post a message to the subreddit created for letting users know about downtimes and maintenance. It briefly went down on September 14 and again on September 18. HugBunter notified users of the downtimes and brought the site back online within a few hours of the /r/DreadAlert posts.

Not long after HugBunter had brought Dread up on September 18, the site became inaccessible to users and has remained inaccessible for a number of days. As of publication, Dread has been down for six days (using a Tweet from DarkDotFail as a reference point). We finally know something about the downtime; HugBunter updated the generic “Down for Maintenance” page with a signed message that explained the purpose of the downtime and served as a proof of life.

Working on a huge update to provide increased stability as the platform grows further and will reduce a whole lot of spam and phishing. The update includes a variety of bug fixes and new features and should be ready to go live by this evening. I am extremely sorry for the downtime and lack of communication right now, this is the biggest update to the codebase that I will have performed and completely restructures everything behind the scenes. Thank you for your continued patience.

The message highlights stability in the context of the recent influx of Dread users. A record number of users have subscribed to the Dread subdread (similar to a default subreddit). In the most recent /r/DreadAlert post, HugBunter also mentioned that he was dealing with a “scalability issue.” He is likely dealing with the same issue right now.

The September 18 Downtime Post on DreadAlert

Dread is an increasingly popular spot for phishers to spread fake links to Empire Market and DarkDotFail. The influx of new users has only increased the number of targets for these phishers and encouraged them to increase the scale of their own operations. Almost every post on the Empire Market subdread had at least one comment with links to fake versions of Empire Market or DarkDotFail. The same comments spread to other popular subdreads as well.

Spammers have also scaled their operations to match the Dread user-base. Accounts similar to bot accounts on Twitter have been posting nonsensical gibberish on any post about a hot topic on Dread, such as comments about Dread itself, various marketplaces, and even DarkDotFail. The posts—recognizable by anyone as obvious spam—usually promote one site and make absurd claims only convincing enough for the least intuitive tabloid editors. These spammers have been submitting a dozen or more of the same comments on some posts.

Similar Spam and Phishing Links on the DreadAlert Subreddit

The spam has been only a minor inconvenience to Dread users but has likely kept Dread mods fairly busy. The phishers have somehow continued to steal funds from the users of at least one market.

HugBunter’s update to Dread will likely deal with both the rampant phishing and annoying spam comments in addition to the scalablity issues mentioned in the update as well as the most recent /r/DreadAlert post.

The signature is valid. HugBunter’s key is available here (darknetlive) or here (DarkDotFail).

This post will be updated once Dread comes back online.

The Signed Message

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Working on a huge update to provide increased stability as the platform grows further and will reduce a whole lot of spam and phishing. The update includes a variety of bug fixes and new features and should be ready to go live by this evening. I am extremely sorry for the downtime and lack of communication right now, this is the biggest update to the codebase that I will have performed and completely restructures everything behind the scenes. Thank you for your continued patience.
-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEYTOs4fS4fFHb8/6l6GEFEPmm6SIFAl2IpgkACgkQ6GEFEPmm
6SKAzQ//bHDUegdtInNBWtDhIKTl9BizmCFC6L555YAdk73nq6FbcMx8WRXmFtvn
v48yaxz6MdK2rbMKTIuLwZJH7ytvBIthpOwAJUmaOdnB9fTbyxjXkYym8VxceRVS
vZVhYB21BUVICec01x5gJGIFzLUaVpPvdlyrg6oBjppeYxqfQPe8oQT47h3ugGyw
/Dh/8UT4dib09U5FYjExzK5JQYZxroFiknSiDkoUC5a+Rr77xD7Sr9gmkWACeU3r
frVn0JA0oPmGBOLLbYRh+ejQHISec9jk5D5Orq3lQVjNBAaCK2CsBKZbsC3wrIv3
kdfFeHvwkQzk7cjjR5saHJRYGVXRysNPIjRHCE9jX4IiuBxgTLYOvntHOEsa76WK
v53T6mUzd8ceLwlC0ITgMQHnBxA1kmOKyrxm8yM8ufyy2zqkUPVFSZo6LLUr0xTJ
wxfb0oTkdsjfPgSJK1K+kJARq7ImBch9vd/fimNBFnFmaYcJD7YLJ9RJYQnYA2Dm
5QTaTZhdv/aD261OHvtIWMOQSsl/S7bhxZx9z41x1+t+/riz0SYpB/WXDF1LxzhW
a1ewX+BixAwciiSKueg35t07qe2ImFLZO98H9Xs4UNKhZNV8By4hLoiJStjNIdKg
G/qggxpaoE7ltR6RmMC3ImJ/a9PwaJxWgZfRLg1h682tNK5NxW8=
=2R+j
-----END PGP SIGNATURE-----

HugBunter’s PGP Key

Darknetlive