✅ Report Title: Quick Overview of the Chinese Darkweb Market CABYC

Upon logging in, there is a feature where users must solve a CAPTCHA randomly generated with Chinese characters, letters, and numbers.
Created usernames are masked—showing only the first and last characters with the rest replaced by asterisks (*)—and there is no separate profile page generated to track individual activity histories.
There is no Private Message (PM) feature available for direct communication, requiring users to communicate with sellers solely through post comments.
- However, comments can only be posted after receiving approval from the forum admin, placing significant limitations on direct communication between sellers and buyers.
The forum admin strongly encourages communication within the forum platform and discourages direct interactions between users via external social media platforms.
Samples are primarily uploaded as screenshots, and the forum does not operate any paid tier systems or tier-based access restrictions.

Cryptocurrencies can be deposited under the Balance Top-up (余额充值) category within the My Account (我的信息) page.
Upon a successful transaction between a buyer and a seller, the forum deducts a 5% commission fee from the total transaction amount.

User registration does not require personal information; users can sign up by providing basic required details such as a User ID, password, and transaction password.

Concentration on Financial and Government Sector Data
- South Korea-related data traded on CABYC primarily targets financial and government institutions; however, analysis of publicly available samples indicates that a significant number of cases involve fraudulent or manipulated data that do not match actual records.
- Although there are clear attempts to establish credibility by leveraging real institution names, financial entity names, and government domains, analysis of the publicly disclosed samples reveals numerous anomalous data patterns, indicating that the actual data credibility remains low.
- However, because topics that can be exploited for criminal activities—such as financial data, government sector information, and account credentials—are continuously discussed, ongoing monitoring of related threat activities is necessary.
Frequent Trading of ID Cards and Passport Images
- Numerous posts offering South Korean national ID cards and passport images for sale have been identified on CABYC, with some documents confirmed to be currently valid.
- Based on post details and sample analysis, these materials are assessed to have been leaked during Know Your Customer (KYC) identity verification processes conducted on platforms such as online gambling sites and cryptocurrency exchanges.

🧑‍💻 Report Author: S2W TALON

*The full report is available upon request and for QUAXAR subscribers.