Just in Plain Sight: Unveiling CSAM Distribution Campaigns on the Clear Web

Fuente: arXiv
Gespeichert in:
Bibliographische Detailangaben
Hauptverfasser: Lykousas, Nikolaos, Patsakis, Constantinos
Format: Preprint
Veröffentlicht: 2025
Schlagworte:
Online-Zugang:
Tags: Tag hinzufügen
Keine Tags, Fügen Sie den ersten Tag hinzu!
_version_ 1866908632557289472
author Lykousas, Nikolaos
Patsakis, Constantinos
author_facet Lykousas, Nikolaos
Patsakis, Constantinos
contents Child sexual abuse is among the most hideous crimes, yet, after the COVID-19 pandemic, there is a huge surge in the distribution of child sexual abuse material (CSAM). Traditionally, the exchange of such material is performed on the dark web, as it provides many privacy guarantees that facilitate illicit trades. However, the introduction of end-to-end encryption platforms has brought it to the deep web. In this work, we report our findings for a campaign of spreading child sexual abuse material on the clear web. The campaign utilized at least 1,026 web pages for at least 738,286 registered users. Our analysis details the operation of such a campaign, showcasing how social networks are abused and the role of bots, but also the bypasses that are used. Going a step further and exploiting operational faults in the campaign, we gain insight into the demand for such content, as well as the dynamics of the user network that supports it.
format Preprint
id arxiv_https___arxiv_org_abs_2511_03816
institution arXiv
publishDate 2025
record_format arxiv
spellingShingle Just in Plain Sight: Unveiling CSAM Distribution Campaigns on the Clear Web
Lykousas, Nikolaos
Patsakis, Constantinos
Cryptography and Security
Computers and Society
Child sexual abuse is among the most hideous crimes, yet, after the COVID-19 pandemic, there is a huge surge in the distribution of child sexual abuse material (CSAM). Traditionally, the exchange of such material is performed on the dark web, as it provides many privacy guarantees that facilitate illicit trades. However, the introduction of end-to-end encryption platforms has brought it to the deep web. In this work, we report our findings for a campaign of spreading child sexual abuse material on the clear web. The campaign utilized at least 1,026 web pages for at least 738,286 registered users. Our analysis details the operation of such a campaign, showcasing how social networks are abused and the role of bots, but also the bypasses that are used. Going a step further and exploiting operational faults in the campaign, we gain insight into the demand for such content, as well as the dynamics of the user network that supports it.
title Just in Plain Sight: Unveiling CSAM Distribution Campaigns on the Clear Web
topic Cryptography and Security
Computers and Society
url https://arxiv.org/abs/2511.03816