Underground Forum User Offers Shocking Harassment-for-Hire Services in U.S. and Europe

Cybercriminal marketplaces continue expanding beyond stolen data and malware sales. Researchers have now spotted another troubling trend.

Threat intelligence X influencer Dark Web Informer recently identified an underground forum listing advertising alleged harassment-for-hire services. The post claims buyers can hire an actor to intimidate victims through both online and offline tactics.

The advertisement targets individuals located in the United States and Europe. However, researchers stress that the listing remains unverified. No independent evidence currently confirms that the seller possesses the advertised capabilities or has successfully completed previous jobs.

According to information shared by Dark Web Informer, the forum post promotes several services designed to pressure or intimidate selected victims. These include swatting, doxxing, daily harassment campaigns, police callouts, coordinated social media spam, and false emergency reports.

The seller also claims to gather personal information on intended targets. Those details allegedly help identify victims, locate their physical addresses, and support harassment activities extending beyond the internet. The listing states that service prices remain negotiable. It also claims operations only cover victims living in the United States and Europe.

Advertisement Highlights Growing Trend Beyond Traditional Cybercrime

Underground cybercrime forums traditionally focused on selling stolen credentials, ransomware tools, malware, phishing kits, and unauthorized network access. Researchers now report that some marketplaces increasingly advertise services intended to intimidate people instead of directly compromising computer systems.

These offerings combine publicly available personal information with social engineering techniques and coordinated abuse campaigns. The result often extends digital harassment into real-world consequences for targeted individuals.

One advertised service attracting particular attention is swatting. This dangerous practice involves filing false emergency reports to dispatch heavily armed police officers to an unsuspecting victim’s home. Authorities worldwide have investigated numerous swatting incidents over the past decade. Some cases resulted in injuries, damaged property, and even deaths after emergency responders acted on fabricated reports.

Due to those risks, several countries introduced tougher criminal penalties against offenders who intentionally misuse emergency services for harassment. The underground advertisement also promotes doxxing services.

Doxxing involves collecting and exposing someone’s private information without consent. That information may include home addresses, phone numbers, family details, workplace information, or other identifying records.

Once attackers expose personal information publicly, victims often experience sustained harassment from strangers. They may also face identity theft attempts, threatening communications, unwanted visits, or abuse that continues well beyond online platforms.

Researchers have repeatedly warned that cybercriminal communities continue diversifying their services. Besides selling stolen databases and hacking tools, some actors now advertise reputation attacks, fake reviews, coordinated social media manipulation, and targeted harassment campaigns. Unlike conventional cyberattacks, these services often focus on damaging a person’s safety, privacy, or reputation rather than stealing financial information alone.

Researchers Urge Caution as Listing Remains Unverified

Despite the alarming claims, cybersecurity researchers urge people not to assume every underground advertisement reflects genuine capabilities. Criminals frequently exaggerate their expertise to attract buyers. Others recycle previously leaked information or fabricate entire service offerings to build credibility within underground communities.

The same caution applies to other high-value claims; a hacker recently advertised 10 crypto library zero-days for 200 Bitcoin without providing proof of their authenticity.

Due to that pattern, researchers say many forum advertisements remain impossible to verify unless investigators connect them to confirmed incidents or independently validate supporting evidence.

Dark Web Informer reached the same conclusion regarding this listing. According to the threat intelligence platform, the advertisement remains unverified at the time of publication. Researchers have not confirmed whether the seller possesses the claimed capabilities or has successfully carried out any of the advertised harassment services.

That distinction remains important because underground forums often contain fraudulent advertisements alongside legitimate criminal offerings. Buyers and researchers alike frequently encounter exaggerated claims intended to generate attention or financial gain.

Even so, cybersecurity experts believe the listing reflects an evolving underground economy where intimidation services increasingly appear beside traditional cybercrime products. The shift demonstrates how criminal marketplaces continue adapting to demand. Some actors now promote harassment campaigns instead of limiting their operations to malware distribution or credential theft.

Personal Information Remains a Valuable Target for Criminals

The advertisement also highlights how personal information continues to fuel many forms of cyber-enabled abuse. Attackers often combine publicly available records with information gathered from data breaches, social media accounts, and other online sources. Those details help criminals identify targets, impersonate victims, or strengthen harassment campaigns.

Researchers encourage individuals to reduce the amount of personal information available online whenever possible. Limiting public exposure makes it harder for malicious actors to gather useful intelligence. Security professionals also recommend enabling multi-factor authentication across important accounts. Although it cannot stop harassment itself, stronger account security helps reduce opportunities for impersonation and account compromise.

People should also remain cautious when responding to unexpected requests for personal information. Criminals frequently rely on social engineering techniques to collect additional details before launching targeted attacks.

The emergence of alleged harassment-for-hire advertisements shows that underground communities continue broadening their criminal business models. While financial cybercrime remains common, some actors increasingly market services designed to intimidate individuals in both digital and physical environments.

Although investigators have not verified this particular listing, its appearance reflects a broader trend cybersecurity researchers continue monitoring closely. Underground forums increasingly advertise services capable of producing real-world harm alongside more familiar cybercrime offerings.

For now, the seller’s claims remain unconfirmed. However, the advertisement serves as another reminder that protecting personal information has become increasingly important as cybercriminal marketplaces continue evolving beyond traditional hacking services.