A Market in Dream: the Rapid Development of Anonymous Cybercrime

Total Page:16

File Type:pdf, Size:1020Kb

A Market in Dream: the Rapid Development of Anonymous Cybercrime Mobile Networks and Applications https://doi.org/10.1007/s11036-019-01440-2 A Market in Dream: the Rapid Development of Anonymous Cybercrime Gengqian Zhou1 · Jianwei Zhuge1 · Yunqian Fan2 · Kun Du1 · Shuqiang Lu1 © Springer Science+Business Media, LLC, part of Springer Nature 2020 Abstract In this paper we have conducted a comprehensive measurement and analysis on the Dream market, an anonymous online market that uses cryptocurrency as transaction currency. We first collect data between October 30th 2018 and March 1st 2019. Then we use decision tree-based approach to classify goods. Following we analyze the category of goods sold in the market, the shipping place of vendors. By analyzing more than 1,970,303 items, we find the goods sold in Dream Market are mainly drugs and digital goods. We estimate the total sales of all vendors, and find that an average monthly income is $14 million during the measurement period, which means that the market commission income is more than $560,000 per month. Based on these data, we use transaction cost theory to analyze the transaction attributes of illegal transactions, which shows that anonymous online market can reduce transaction cost of illegal transactions. We finally discuss the results analyzed and the intervention policy, as well as recent DDoS attacks and future trends of illegal transactions in anonymous online market. Keywords Anonymous online market · Illegal transactions · Cybercrime 1 Introduction on it allow buyers and vendors to hide their identity, making it difficult for law enforcement to tracking them. As a result, Anonymous network initially served as an approach for many prohibited goods such as drugs and privacy data, have browsing Internet anonymously, protecting user privacy. become the main business in anonymous online market. With the development of anonymous network, more and Since the rise of Silk Road in 2011,1 market size and more users can access it by related tools such as Tor volume of the anonymous market have been growing. In browser [11] easily. Anonymous online markets that based 2012, the largest anonymous online market items volume was around 24,400 [10]. By 2015, AlphaBay replaced Silk Road and became the largest market. In July 2017, Jianwei Zhuge AlphaBay had more than 369,000 products and 400,000 [email protected] users [1]. Gengqian Zhou Nowadays, three major large anonymous online markets 2 3 [email protected] are Dream Market, Wall Street and Silk Road 3.1 . Among them, the amount of items daily in Dream Market is around Yunqian Fan 170,000, which is much more than Wall Street’s 10,000. In [email protected] many dark market forums, Dream Market’s score is much Kun Du higher than the other two [4]. [email protected] In this paper, we attempt to provide a scientific analysis of Dream Market and anonymous cybercrime by collecting Shuqiang Lu [email protected] and analyzing a set of data for approximately four months (from October 30th, 2018 to March 1st, 2019). We think our research has mainly four contributions. 1 Institute for Network Sciences and Cyberspace, Beijing National Research Center for Information Science and Technology (BNRist), Tsinghua University, Beijing, China 1https://en.wikipedia.org/wiki/Silk Road (marketplace) 2 2 School of Software and Electronics, Peking University, http://wallst4qihu6lvsa.onion/ Beijing, China 3http://silkroad7rn2puhj.onion/ Mobile Netw Appl (1) We have designed a relatively sophisticated collection 2 Overview system to get public data from Dream Market. (2) We use collected data to show the groups of goods and Dream Market (Fig. 1) is an anonymous online market first vendors in Dream Market. appeared in November 2013. There are goods such as drugs, (3) We use buyer’s feedback as a proxy for sales, and theft data and hacking services in this market. Based on we describe the amount of sales in our measurement the characteristics of anonymous itself, both buyers and range. We provide an estimation of daily sales in vendors in Dream Market are anonymous. In this section, Dream Market and use this to estimate the amount of we summarize the main features of Dream Market by commission charged by the market operator. Although visiting steps involved in a typical transaction and other we can’t use the data sets we collect to estimate the market mechanisms: access to Dream Market, shopping, number of buyers, we can see that Dream Market and so on. is a very important market with nearly 10 thousand Similar to other darknet sites, before entering Dream vendors and the average sales is $14 million per month. Market, user needs to access the market page by Tor (4) We use transaction cost theory to explain the reasons browser. User needs to register her own account in Dream for the continued growth of anonymous cybercrime. Market. Dream Market supports automatic generation of We also notice that anonymous cybercrime has been user names, of course, you can set it yourself. Registration developing rapidly. only requires information like username, password, PIN and CAPTCHA. For security reasons, the market supports The rest of the paper is organized as follows. We give two login types: password login and 2FA login. 2FA login an overview in Section 2. We introduce how we collect requires user to set a PGP public key. Only users who have data in Section 3 and illustrate our metrics analysis in the corresponding private key can log in 2FA. Section 4, including volume analysis of illegal goods. In During transaction, Dream Market charges a certain Section 5, we discuss market economic data. In Section 6, amount of commission from vendors and imposes restric- we use transaction cost theory to explain the reasons for tions on vendors. Some categories of goods are listed the continued growth of anonymous cybercrime. We discuss below [3]. our findings in Section 7, including relevant intervention policies and ethical considerations, and discuss related – Assassinations or any other services which are doing cybercrime, and the impact of DDoS attacks on the market. harm to another. The related work is outlined in Section 8 andwegiveour – Weapons of mass destruction: chemical, biological, conclusion in Section 9. explosives, etc. – Fentanyl. Fig. 1 Dream Market front page Mobile Netw Appl – Weapons. as much as possible, we registered different accounts for – Poisons. website login. For each page request, the crawler replaced – Child pornography. the circuit once, and we used the stem5 tool to do this. From – Live action snuff/hurt/murder audio/video/images. October 30th, 2018 to March 1st, 2019, we tried to crawl pages from Dream Market every day and record the time Although the market has restrictions on goods and each page crawled. services such as weapons and violence, sensitive goods such as drugs, fake identity documents (such as fake passports), 3.2 Challenges privacy data and hacking services are still missing from the list of prohibited items. Hiding trace is important during crawling. So, we used Sele- When user selects a favorite item from the product list, nium to simulate browser and visited the web cautiously. she can click on the item link to make a purchase. The However, in our initial attempts, we found that if we vis- market supports cryptocurrencies such as BTC and BCH, ited the pages a bit more frequently, it would trigger the and the wallet address is provided by the market. Before anti-DDoS mechanism, which made crawling impossible. In purchasing, user needs to buy or transfer a certain amount order to solve this problem, we limited our crawl frequency of cryptocurrency to the wallet address. Once the wallet has and periodically performed circuit replacement. sufficient currency, user can select the transaction currency In order to enhance the hidden effect, the crawler’s and set transaction information, then pay for the transaction. threads login use different accounts. We started crawling Dream Market supports escrow, which means that buyer’s thread at random time every day. For example, in the payment will not be sent to the vendor immediately. Instead, adjacent two days, we crawled at 5am and 2pm respectively. it first will be escrowed by the market itself, then transfer to Once login successfully, cookies for Dream Market are vendor after buyer receives the goods and confirms. valid for one week. But if we do not operate the browser After receiving the goods, buyer can give a feedback. for a period of time, the cookie will expire. In many cases, Dream Market recommends submitting negative feedback e.g., when we start crawling every day or because it costs to better solve the vendor’s service problems. At the same too long to visit pages due to network delay, we need to time, Dream Market provides reporting capabilities, so use a new cookie. Since the website login page needs to buyers can report vendor’s situation to Dream Market, enter CAPTCHA, we manually login to get the cookie in including receiving problems, fraud and even reporting to the early stage. This is also practical in many previous the vendor ID which controlled by law enforcement. work [21]. Later, we analyze the patterns of the website’s CAPTCHA and develop a machine learning tool based on 3 Data collection GAN to achieve automatic login. The CAPTCHA detection can reach higher than 90% accuracy rate. Thereby it can solve the problem of manual login and can do re-login when In this section we will introduce our data collection page-loading timeout. methods. We adopt a more secure crawling method, but we Although we have made great efforts in hiding trace, we have also encountered many challenges. We will illustrate still need to dispose unexpected exceptions.
Recommended publications
  • The Internet and Drug Markets
    INSIGHTS EN ISSN THE INTERNET AND DRUG MARKETS 2314-9264 The internet and drug markets 21 The internet and drug markets EMCDDA project group Jane Mounteney, Alessandra Bo and Alberto Oteo 21 Legal notice This publication of the European Monitoring Centre for Drugs and Drug Addiction (EMCDDA) is protected by copyright. The EMCDDA accepts no responsibility or liability for any consequences arising from the use of the data contained in this document. The contents of this publication do not necessarily reflect the official opinions of the EMCDDA’s partners, any EU Member State or any agency or institution of the European Union. Europe Direct is a service to help you find answers to your questions about the European Union Freephone number (*): 00 800 6 7 8 9 10 11 (*) The information given is free, as are most calls (though some operators, phone boxes or hotels may charge you). More information on the European Union is available on the internet (http://europa.eu). Luxembourg: Publications Office of the European Union, 2016 ISBN: 978-92-9168-841-8 doi:10.2810/324608 © European Monitoring Centre for Drugs and Drug Addiction, 2016 Reproduction is authorised provided the source is acknowledged. This publication should be referenced as: European Monitoring Centre for Drugs and Drug Addiction (2016), The internet and drug markets, EMCDDA Insights 21, Publications Office of the European Union, Luxembourg. References to chapters in this publication should include, where relevant, references to the authors of each chapter, together with a reference to the wider publication. For example: Mounteney, J., Oteo, A. and Griffiths, P.
    [Show full text]
  • Van De Laarschot and Rolf Van Wegberg, Delft University of Technology
    Risky Business? Investigating the Security Practices of Vendors on an Online Anonymous Market using Ground-Truth Data Jochem van de Laarschot and Rolf van Wegberg, Delft University of Technology https://www.usenix.org/conference/usenixsecurity21/presentation/van-de-laarschot This paper is included in the Proceedings of the 30th USENIX Security Symposium. August 11–13, 2021 978-1-939133-24-3 Open access to the Proceedings of the 30th USENIX Security Symposium is sponsored by USENIX. Risky Business? Investigating the Security Practices of Vendors on an Online Anonymous Market using Ground-Truth Data Jochem van de Laarschot Rolf van Wegberg Delft University of Technology Delft University of Technology Abstract However, there are numerous indications in earlier work that cybercriminals do not always achieve maximum security. Cybercriminal entrepreneurs on online anonymous markets Due to competing business incentives, criminals may turn rely on security mechanisms to thwart investigators in at- to insecure practices that ease transacting illegal products or tributing their illicit activities. Earlier work indicates that – services. Here, we witness an inevitable trade-off between despite the high-risk criminal context – cybercriminals may enhanced security and improved efficiency of operations [42]. turn to poor security practices due to competing business ‘Perfect security’ therefore, is not economically viable. Like incentives. This claim has not yet been supported through in the legitimate economy [54], security in the underground empirical, quantitative analysis on ground-truth data. In this economy comes at a cost [53]. This leads us to wonder how paper, we investigate the security practices on Hansa Mar- prevalent poor security practices (or: “insecure practices”) ket (2015-2017) and measure the prevalence of poor security among online anonymous market vendors actually are.
    [Show full text]
  • Into the Reverie: Exploration of the Dream Market
    Into the Reverie: Exploration of the Dream Market Theo Carr1, Jun Zhuang2, Dwight Sablan3, Emma LaRue4, Yubao Wu5, Mohammad Al Hasan2, and George Mohler2 1Department of Mathematics, Northeastern University, Boston, MA 2Department of Computer & Information Science, Indiana University - Purdue University, Indianapolis, IN 3Department of Mathematics and Computer Science, University of Guam, Guam 4Department of Mathematics and Statistics, University of Arkansas at Little Rock, AK 5Department of Computer Science, Georgia State University, Atlanta, GA [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected] Abstract—Since the emergence of the Silk Road market in Onymous" in 2014, a worldwide action taken by law enforce- the early 2010s, dark web ‘cryptomarkets’ have proliferated and ment and judicial agencies aimed to put a kibosh on these offered people an online platform to buy and sell illicit drugs, illicit behaviors [5]. Law enforcement interventions such as relying on cryptocurrencies such as Bitcoin for anonymous trans- actions. However, recent studies have highlighted the potential for Onymous, along with exit scams and hacks, have successfully de-anonymization of bitcoin transactions, bringing into question shut down numerous cryptomarkets, including AlphaBay, Silk the level of anonymity afforded by cryptomarkets. We examine a Road, Dream, and more recently, Wall Street [6]. Despite these set of over 100,000 product reviews from several cryptomarkets interruptions, new markets have continued to proliferate. The collected in 2018 and 2019 and conduct a comprehensive analysis authors of [7] note that there appears to be a consistent daily of the markets, including an examination of the distribution of drug sales and revenue among vendors, and a comparison demand of about $500,000 for illicit products on the dark web, of incidences of opioid sales to overdose deaths in a US city.
    [Show full text]
  • Privacy in Atlantis*
    Harvard Journal of Law & Technology Volume 18, Number 1 Fall 2004 PRIVACY IN ATLANTIS* Jerry Kang & Benedikt Buchner** TABLE OF CONTENTS INTRODUCTION.................................................................................230 SCENE I: PRIVACY’S FORM...............................................................231 A. Market-Talk..............................................................................231 B. Dignity-Talk .............................................................................234 SCENE II: PRIVACY’S SUBSTANCE....................................................236 A. The Core Similarities ...............................................................237 1. Dignity’s Consent (or the Market’s Initial Allocation) .........237 2. Data Protection Regulations (or Intangible Property Regulations) ....................................................................240 B. Too Little Control.....................................................................244 1. The Problem: Hard Choices ..................................................244 2. The Response: Fortifying the Individual...............................246 C. Too Much Control....................................................................251 1. The Problem: Societal Overrides ..........................................251 2. The Response: Interest Balancing .........................................252 CONCLUSION ....................................................................................255 APPENDIX .........................................................................................257
    [Show full text]
  • Deepweb and Cybercrime It’S Not All About TOR
    A Trend Micro Research Paper Deepweb and Cybercrime It’s Not All About TOR Vincenzo Ciancaglini, Marco Balduzzi, Max Goncharov, and Robert McArdle Forward-Looking Threat Research Team Trend Micro | Deepweb and Cybercrime Contents Abstract ..................................................................................................................................................3 Introduction ...........................................................................................................................................3 Overview of Existing Deepweb Networks ......................................................................................5 TOR ............................................................................................................................................5 I2P ...............................................................................................................................................6 Freenet .......................................................................................................................................7 Alternative Domain Roots ......................................................................................................7 Cybercrime in the TOR Network .......................................................................................................9 TOR Marketplace Overview ..................................................................................................9 TOR Private Offerings ..........................................................................................................14
    [Show full text]
  • A Broad Evaluation of the Tor English Content Ecosystem
    A Broad Evaluation of the Tor English Content Ecosystem Mahdieh Zabihimayvan Reza Sadeghi Department of Computer Science and Engineering Department of Computer Science and Engineering Kno.e.sis Research Center, Wright State University Kno.e.sis Research Center, Wright State University Dayton, OH, USA Dayton, OH, USA [email protected] [email protected] Derek Doran Mehdi Allahyari Department of Computer Science and Engineering Department of Computer Science Kno.e.sis Research Center, Wright State University Georgia Southern University Dayton, OH, USA Statesboro, GA, USA [email protected] [email protected] ABSTRACT It is an open question whether the fundamental and oen nec- Tor is among most well-known dark net in the world. It has noble essary protections that Tor provides its users is worth its cost: the uses, including as a platform for free speech and information dis- same features that protect the privacy of virtuous users also make semination under the guise of true anonymity, but may be culturally Tor an eective means to carry out illegal activities and to evade law beer known as a conduit for criminal activity and as a platform enforcement. Various positions on this question have been docu- to market illicit goods and data. Past studies on the content of mented [16, 22, 30], but empirical evidence is limited to studies that Tor support this notion, but were carried out by targeting popular have crawled, extracted, and analyzed specic subsets of Tor based domains likely to contain illicit content. A survey of past studies on the type of hosted information, such as drug tracking [12], may thus not yield a complete evaluation of the content and use of homemade explosives [20], terrorist activities [7], or forums [39].
    [Show full text]
  • Smooth As Silk: the Story of the Internet's Largest Drug Marketplace
    Smooth as Silk: The Story of the Internet's Largest Drug Marketplace Krzysztof Danielewicz [email protected] Mentor: Ming Chow Abstract On October 2 2013, the largest illegal online marketplace in the world was shut down by the FBI, and its founder arrested. Ross William Ulbricht, the “Dread Pirate Roberts” and founder of Silk Road, had spent 2½ years escaping the efforts of the United States Government to take down his creation, with great success. During this time, Silk Road offered the ability to solicit and purchase a staggering number of blatantly criminal substances and services within minutes, from practically anywhere in the world: it was well known as “the Amazon.com of illegal drugs.” Silk Road was run through Tor, a service which offers online anonymity and security. Which brings the question: how did the FBI manage to take down a supposedly anonymous online drug empire, arrest its owner, and seize over $3 million in Bitcoin? Will these actions by the United States Government make a significant difference in the online proliferation of illegal goods, or do the alternatives to Silk Road (already in full swing) make their efforts fruitless? And do these alternatives suffer from the same vulnerabilities that took down Ulbricht? This paper will explore the above questions and discuss the implications of this take down on illegal trade over the internet and, more generally, the anonymity and potential flaws of the Tor network as it exists today. To The Community Silk Road and Tor showcase a side of the Internet that is not well known to the general public, but is nonetheless a growing force in the proliferation of illegal goods worldwide.
    [Show full text]
  • The Onion Crate - Tor Hidden Service Index Protected Onions Add New
    onion.to does not host this content; we are simply a conduit connecting Internet users to content hosted inside the Tor network.. onion.to does not provide any anonymity. You are strongly advised to download the Tor Browser Bundle and access this content over Tor. For more information see our website for more details and send us your feedback. hide Tor2web header Online onions The Onion Crate - Tor Hidden Service Index Protected onions Add new nethack3dzllmbmo.onion A public nethack server. j4ko5c2kacr3pu6x.onion/wordpress Paste or blog anonymously, no registration required. redditor3a2spgd6.onion/r/all Redditor. Sponsored links 5168 online onions. (Ctrl-f is your friend) A AUTOMATED PAYPAL AND CREDIT CARD MARKET 2222bbbeonn2zyyb.onion A Beginner Friendly Comprehensive Guide to Installing and Using A Safer yuxv6qujajqvmypv.onion A Coca Growlog rdkhliwzee2hetev.onion ==> https://freenet7cul5qsz6.onion.to/freenet:USK@yP9U5NBQd~h5X55i4vjB0JFOX P97TAtJTOSgquP11Ag,6cN87XSAkuYzFSq-jyN- 3bmJlMPjje5uAt~gQz7SOsU,AQACAAE/cocagrowlog/3/ A Constitution for the Few: Looking Back to the Beginning ::: Internati 5hmkgujuz24lnq2z.onion ==> https://freenet7cul5qsz6.onion.to/freenet:USK@kpFWyV- 5d9ZmWZPEIatjWHEsrftyq5m0fe5IybK3fg4,6IhxxQwot1yeowkHTNbGZiNz7HpsqVKOjY 1aZQrH8TQ,AQACAAE/acftw/0/ A Declaration of the Independence of Cyberspace ufbvplpvnr3tzakk.onion ==> https://freenet7cul5qsz6.onion.to/freenet:CHK@9NuTb9oavt6KdyrF7~lG1J3CS g8KVez0hggrfmPA0Cw,WJ~w18hKJlkdsgM~Q2LW5wDX8LgKo3U8iqnSnCAzGG0,AAIC-- 8/Declaration-Final%5b1%5d.html A Dumps Market
    [Show full text]
  • NSIGHT SERIES May 2020 — Issue 5
    NSIGHT SERIES May 2020 — Issue 5 The Decline of the Dark Web How Mobile Solutions have Disrupted the Dark Web The dark web is in decline. Once the preferred means for anonymizing users’ online activity, the dark web has now been supplanted by encrypted mobile applications and alternate solutions. Similarly, aggressive law enforcement actions have shuttered many of the dark web’s largest forums, making it a much more fleeting and much less secure destination for criminal activity. As a result, the number of users accessing dark web sites has dropped. Instead, many users are connecting through the dark web via mobile applications on Android and iOS, rather than to the dark web via standard browsers, to obfuscate their internet traffic. Indeed, the number of users accessing the Tor network has increased, even as the number of users accessing hidden Dark web platforms such as The Onion Router (Tor), I2P, service sites—the “dark” part of the dark web—has dropped. Freenet, and Zeronet, attempt to anonymize users’ digital Moreover, encrypted applications like Telegram, Signal, fingerprint so that technical attributes like IP addresses are and Wickr.me have lowered the barrier to entry for secure not easily available to entities with intent to track users’ communication and illicit transactions. As a result, just like online activity. This emphasis on anonymity was designed to many other industries, the dark web has been disrupted keep the dark web free from oversight, free from censorship, by technological innovation and aggressive competition, and open to anyone in any location. The developers of Tor, triggering a gradual decline and turning the so-called the most popular dark web platform, promote it as a tool invisible internet even more opaque.
    [Show full text]
  • Complaint Apostolos Trovias, and Jury Demand
    Case 1:21-cv-05925 Document 1 Filed 07/09/21 Page 1 of 34 Richard R. Best Kristina Littman John O. Enright Victor Suthammanont Morgan B. Ward Doran Jon Daniels SECURITIES AND EXCHANGE COMMISSION New York Regional Office 200 Vesey Street, Suite 400 New York, New York 10281-1022 (212) 336-5674 (Suthammanont) Email: [email protected] UNITED STATES DISTRICT COURT SOUTHERN DISTRICT OF NEW YORK SECURITIES AND EXCHANGE COMMISSION, 21 Civ. ____ ( ) Plaintiff, ECF Case -- against -- COMPLAINT APOSTOLOS TROVIAS, AND JURY DEMAND Defendant. Plaintiff Securities and Exchange Commission (“Commission”), for its Complaint against Defendant Apostolos Trovias (“Trovias”) alleges as follows: SUMMARY OF THE ALLEGATIONS 1. From at least December 2016 through February 2021, Trovias—operating under the pseudonymous online avatar “TheBull”—engaged in a deceptive scheme to offer and sell what he called “insider trading tips” on Dark Web marketplaces to purchasers seeking an unfair advantage when trading securities in the public markets. 2. The Dark Web is a part of the internet that requires specialized software to access and is specifically designed to facilitate anonymity by obscuring users’ identities, including by Case 1:21-cv-05925 Document 1 Filed 07/09/21 Page 2 of 34 hiding users’ internet protocol addresses. The anonymity provided by the Dark Web allows users to sell and purchase illegal products and services, including illicit drugs, stolen identities, hacking services, and in this case, “insider trading tips.” 3. Trovias claimed that his tips consisted of order-book data from a securities trading firm—purportedly material, nonpublic information—that was provided to him by an employee of the trading firm.
    [Show full text]
  • Cybercrime and Other Threats Faced by the Healthcare Industry Mayra Rosario Fuentes Forward-Looking Threat Research (FTR) Team
    Cybercrime and Other Threats Faced by the Healthcare Industry Mayra Rosario Fuentes Forward-Looking Threat Research (FTR) Team A TrendLabs Research Paper TREND MICRO LEGAL DISCLAIMER The information provided herein is for general information Contents and educational purposes only. It is not intended and should not be construed to constitute legal advice. The information contained herein may not be applicable to all situations and may not reflect the most current situation. Nothing contained herein should be relied on or acted upon without the benefit of legal advice based on the 4 particular facts and circumstances presented and nothing herein should be construed otherwise. Trend Micro The Security Issue with reserves the right to modify the contents of this document at any time without prior notice. Electronic Health Records Translations of any material into other languages are intended solely as a convenience. Translation accuracy is not guaranteed nor implied. If any questions arise related to the accuracy of a translation, please refer to the original language official version of the document. Any 9 discrepancies or differences created in the translation are not binding and have no legal effect for compliance or Electronic Health Records enforcement purposes. in the Underground Although Trend Micro uses reasonable efforts to include accurate and up-to-date information herein, Trend Micro makes no warranties or representations of any kind as to its accuracy, currency, or completeness. You agree that access to and use of and reliance on this document and the content thereof is at your own risk. Trend Micro 13 disclaims all warranties of any kind, express or implied.
    [Show full text]
  • Economics of Illicit Behaviors: Exchange in the Internet Wild West
    ECONOMICS OF ILLICIT BEHAVIORS: EXCHANGE IN THE INTERNET WILD WEST by Julia R. Norgaard A Dissertation Submitted to the Graduate Faculty of George Mason University in Partial Fulfillment of The Requirements for the Degree of Doctor of Philosophy Economics Committee: ___________________________________________ Director ___________________________________________ ___________________________________________ ___________________________________________ Department Chairperson ___________________________________________ Program Director ___________________________________________ Dean, College of Humanities and Social Sciences Date: _____________________________________ Spring Semester 2017 George Mason University Fairfax, VA Economics of Illicit Behaviors: Exchange in the Internet Wild West A dissertation submitted in partial fulfillment of the requirements for the degree of Doctor of Philosophy at George Mason University By Julia R. Norgaard Master of Arts George Mason University, 2015 Bachelor of Arts University of San Diego, 2012 Director: Dr. Thomas Stratmann, Professor and Dissertation Chair Department of Economics Spring Semester 2017 George Mason University Fairfax, VA Copyright 2017 Julia R. Norgaard All Rights Reserved ii Dedication This is dedicated to my wonderful parents Clark and Jill, who introduced me to economics and taught me how to be a dedicated scholar and a good and faithful person. iii Acknowledgements Thank you to my family and friends who have supported me throughout my graduate journey. My boyfriend, Ennio, who gave
    [Show full text]