This talk will provide a general overview of cybercriminal forums, how they work, what’s on them, and why cybercriminals like to use them. There will be a particular focus on the Russian-language scene, and how it differs from its English-language counterpart. Roman will also cover how cybercriminal forums fit into the ransomware-as-a-service scene.