The Dark Web/Darknet is where bad guys peddle stolen data and share tips about successful cyberattack strategies, but it’s also a bonanza of cyber-threat intelligence that attackers essentially hand out as they interact online. Attacker-run forums are where hackers discuss, purchase and sell malware, ransomware and denial-of-service offerings. It isn’t easy to get into them. Some require payment, others creds from known hackers, and still others a demonstration of ability to code around a security problem or create malicious software. The strategies are state-of-the-art high tech, but the flaw in the bad guys’ armor, the search for glory, is as old as crime. Hackers advertise their knowledge in forums in order to show off their skills. What they typically show off are frequent attacks targeting mass numbers of individuals and organizations rather than narrow, specific, targeted attacks. So, the techniques shared in these forums help defenders understand attacker culture and how to defend against frequent attacks. Getting inside the mind of an attacker allows threat researchers to anticipate risks and profile cybercriminals. Threat behaviors are like fingerprints. They are useful in uncovering and defending against certain threats.