TrendMicro published an interesting analysis of the principal cyber criminal underground communities in the Deep Web worldwide. Researchers have identified at least six different cybercriminal ecosystems operating in Russia, Japan, China, Germany, the United States and Canada (North America), and Brazil. The Russian underground, for instance, can be likened to a well-functioning assembly line where each player has a role to play. The Chinese market, meanwhile, boasts of robust tool and hardware development, acting as a prototype hub for cybercriminal wannabes. Brazil is more focused on banking Trojans while Japan tends to be deliberately exclusive to members.”]
Source: https://securityaffairs.co/wordpress/45068/cyber-crime/criminal-underground-deep-web.html