Russian Language Cybercriminal Forums - An Excursion Into The Core Of The Underground Ecosystem.

This OSINT chapter maps the origins and 2024 landscape of Russian-language cybercriminal forums (RLCF), classifying communities into six categories (cybercrime, carding, fraud/probiv, drugs, programming, other), measuring activity levels, and analyzing trends and stability. It traces historical roots from early Soviet-era hacking and 2000s carding hubs to today’s ecosystem, examines the effects of law enforcement actions, Telegram adoption, and geopolitics (e.g., Hydra takedown, RAMP, XSS/Exploit), and highlights a stable core of highly active forums amid high attrition, domain churn, and volatility in drug markets.