Constella has observed an increase in activity in dark web forums and markets, namely the sale of stolen credentials and documentation, credit cards and even tools to exploit physical devices (e.g., ATMs for carding) or communications software (e.g., “Zoom” messaging application).