Monopoly

Profile narrative

Monopoly, also known by its alias, is a cybercrime entity that specializes in the trafficking of user data. Its core activity involves selling or distributing personal information that can be used for fraudulent schemes. The data it handles is also leveraged to support botnet operations and spam campaigns. These functions place Monopoly within the underground market for illicit data services. The group’s focus on data trafficking distinguishes it from other cybercriminal actors that may prioritize malware development or direct intrusion. This specialization suggests a business model centered on the collection, aggregation, and resale of compromised personal details.

In September 2015, the hacking group w0rm breached Monopoly’s systems and exfiltrated its database. The stolen data was subsequently offered for sale on an underground forum at prices listed in US dollars, euros, and Bitcoin. The incident highlights that Monopoly maintained a repository of data sufficient to be considered a marketable asset by rival actors. No further details about the organization's size, geographic reach, ownership structure, or parent‑subsidiary relationships are publicly available. Consequently, any description of Monopoly beyond its role in data trafficking remains speculative and is omitted. The breach serves as the primary confirmed source of information about the group's operations.

Incidents

1 incident linked to this organisation.