{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:U5KOZBIF2M75425XBE2WFLZLWQ","short_pith_number":"pith:U5KOZBIF","canonical_record":{"source":{"id":"2411.16291","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-11-25T11:17:51Z","cross_cats_sorted":[],"title_canon_sha256":"71ff7f861a41b3955500ace66b93123f2a67d52227a68a4614fe589308d47a47","abstract_canon_sha256":"9c438182e3a3899044e476e018569dbd6043822385854016d119d2ef41420696"},"schema_version":"1.0"},"canonical_sha256":"a754ec8505d33fde6bb7093562af2bb41c420c20a7ce2c04e5f2742cc892ab66","source":{"kind":"arxiv","id":"2411.16291","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2411.16291","created_at":"2026-07-05T09:40:07Z"},{"alias_kind":"arxiv_version","alias_value":"2411.16291v1","created_at":"2026-07-05T09:40:07Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2411.16291","created_at":"2026-07-05T09:40:07Z"},{"alias_kind":"pith_short_12","alias_value":"U5KOZBIF2M75","created_at":"2026-07-05T09:40:07Z"},{"alias_kind":"pith_short_16","alias_value":"U5KOZBIF2M75425X","created_at":"2026-07-05T09:40:07Z"},{"alias_kind":"pith_short_8","alias_value":"U5KOZBIF","created_at":"2026-07-05T09:40:07Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:U5KOZBIF2M75425XBE2WFLZLWQ","target":"record","payload":{"canonical_record":{"source":{"id":"2411.16291","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-11-25T11:17:51Z","cross_cats_sorted":[],"title_canon_sha256":"71ff7f861a41b3955500ace66b93123f2a67d52227a68a4614fe589308d47a47","abstract_canon_sha256":"9c438182e3a3899044e476e018569dbd6043822385854016d119d2ef41420696"},"schema_version":"1.0"},"canonical_sha256":"a754ec8505d33fde6bb7093562af2bb41c420c20a7ce2c04e5f2742cc892ab66","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:40:07.285715Z","signature_b64":"7qDrQUm91cPmsPlViKW8yILcq0s29lEgD8Il1Zk2X5LHNkL2f6ISCMbEbp7IDOV+xOMoe+DXCpM0/vBpT4JTCg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"a754ec8505d33fde6bb7093562af2bb41c420c20a7ce2c04e5f2742cc892ab66","last_reissued_at":"2026-07-05T09:40:07.285247Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:40:07.285247Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2411.16291","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:40:07Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Zclhv3p3/RIhqBx7ekTkI2xHfszooV1ixg74EnzzocCQvdXaalqKbRDiST5sCnsrSV/dVOtnwgHz7pfk8JySCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-12T22:09:09.605576Z"},"content_sha256":"ffa5c2d12a9d56a90f28e8ec4e17d35429cd5c933b765d68da6fbe647d04fd14","schema_version":"1.0","event_id":"sha256:ffa5c2d12a9d56a90f28e8ec4e17d35429cd5c933b765d68da6fbe647d04fd14"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:U5KOZBIF2M75425XBE2WFLZLWQ","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Where is Dmitry going? Framing 'migratory' decisions in the criminal underground","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Adriana Radu, Jai Wientjes, Luca Allodi, Roy Ricaldi","submitted_at":"2024-11-25T11:17:51Z","abstract_excerpt":"The cybercriminal underground consists of hundreds of forum communities that function as marketplaces and information-exchange platforms for both established and wannabe cybercriminals. The ecosystem is continuously evolving, with users migrating between forums and platforms. The emergence of cybercrime communities in Telegram and Discord only highlights the rising fragmentation and adaptability of the ecosystem. In this position paper, we explore the economic incentives and trust-building mechanisms that may drive a participant (hereafter, Dmitry) of the cybercriminal underground ecosystem to"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2411.16291","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2411.16291/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:40:07Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"K/ItEQJa8lgKaPpqWEEWZJEm92MgSU65AXbp2WALPQefzqwHjcZ1gLB1yzTVJ8yspFmyO4bcN1/V/gNJ+9uRAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-12T22:09:09.606552Z"},"content_sha256":"836077f236f3a0f178f19e1429487d3da7cfe58621d09df6c0bf14d4a234b753","schema_version":"1.0","event_id":"sha256:836077f236f3a0f178f19e1429487d3da7cfe58621d09df6c0bf14d4a234b753"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/U5KOZBIF2M75425XBE2WFLZLWQ/bundle.json","state_url":"https://pith.science/pith/U5KOZBIF2M75425XBE2WFLZLWQ/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/U5KOZBIF2M75425XBE2WFLZLWQ/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-12T22:09:09Z","links":{"resolver":"https://pith.science/pith/U5KOZBIF2M75425XBE2WFLZLWQ","bundle":"https://pith.science/pith/U5KOZBIF2M75425XBE2WFLZLWQ/bundle.json","state":"https://pith.science/pith/U5KOZBIF2M75425XBE2WFLZLWQ/state.json","well_known_bundle":"https://pith.science/.well-known/pith/U5KOZBIF2M75425XBE2WFLZLWQ/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:U5KOZBIF2M75425XBE2WFLZLWQ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"9c438182e3a3899044e476e018569dbd6043822385854016d119d2ef41420696","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-11-25T11:17:51Z","title_canon_sha256":"71ff7f861a41b3955500ace66b93123f2a67d52227a68a4614fe589308d47a47"},"schema_version":"1.0","source":{"id":"2411.16291","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2411.16291","created_at":"2026-07-05T09:40:07Z"},{"alias_kind":"arxiv_version","alias_value":"2411.16291v1","created_at":"2026-07-05T09:40:07Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2411.16291","created_at":"2026-07-05T09:40:07Z"},{"alias_kind":"pith_short_12","alias_value":"U5KOZBIF2M75","created_at":"2026-07-05T09:40:07Z"},{"alias_kind":"pith_short_16","alias_value":"U5KOZBIF2M75425X","created_at":"2026-07-05T09:40:07Z"},{"alias_kind":"pith_short_8","alias_value":"U5KOZBIF","created_at":"2026-07-05T09:40:07Z"}],"graph_snapshots":[{"event_id":"sha256:836077f236f3a0f178f19e1429487d3da7cfe58621d09df6c0bf14d4a234b753","target":"graph","created_at":"2026-07-05T09:40:07Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2411.16291/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The cybercriminal underground consists of hundreds of forum communities that function as marketplaces and information-exchange platforms for both established and wannabe cybercriminals. The ecosystem is continuously evolving, with users migrating between forums and platforms. The emergence of cybercrime communities in Telegram and Discord only highlights the rising fragmentation and adaptability of the ecosystem. In this position paper, we explore the economic incentives and trust-building mechanisms that may drive a participant (hereafter, Dmitry) of the cybercriminal underground ecosystem to","authors_text":"Adriana Radu, Jai Wientjes, Luca Allodi, Roy Ricaldi","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-11-25T11:17:51Z","title":"Where is Dmitry going? Framing 'migratory' decisions in the criminal underground"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2411.16291","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:ffa5c2d12a9d56a90f28e8ec4e17d35429cd5c933b765d68da6fbe647d04fd14","target":"record","created_at":"2026-07-05T09:40:07Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"9c438182e3a3899044e476e018569dbd6043822385854016d119d2ef41420696","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-11-25T11:17:51Z","title_canon_sha256":"71ff7f861a41b3955500ace66b93123f2a67d52227a68a4614fe589308d47a47"},"schema_version":"1.0","source":{"id":"2411.16291","kind":"arxiv","version":1}},"canonical_sha256":"a754ec8505d33fde6bb7093562af2bb41c420c20a7ce2c04e5f2742cc892ab66","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"a754ec8505d33fde6bb7093562af2bb41c420c20a7ce2c04e5f2742cc892ab66","first_computed_at":"2026-07-05T09:40:07.285247Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:40:07.285247Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"7qDrQUm91cPmsPlViKW8yILcq0s29lEgD8Il1Zk2X5LHNkL2f6ISCMbEbp7IDOV+xOMoe+DXCpM0/vBpT4JTCg==","signature_status":"signed_v1","signed_at":"2026-07-05T09:40:07.285715Z","signed_message":"canonical_sha256_bytes"},"source_id":"2411.16291","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:ffa5c2d12a9d56a90f28e8ec4e17d35429cd5c933b765d68da6fbe647d04fd14","sha256:836077f236f3a0f178f19e1429487d3da7cfe58621d09df6c0bf14d4a234b753"],"state_sha256":"fca60299856b4a3f25abdfd96c2fb7cf4e04d5d6cd4a1eaf727aea110c155703"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"dF29nHOMjFzVqnA9CezevuGFP76zY+d+IjVwlnZfiBjiKz2qG2b2/oor3FnACKHzf98cvt1wpbIX5rbL085YCA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-12T22:09:09.616095Z","bundle_sha256":"633964689f08ee726b174e857d17700d6e3b1861de9928a536e353f024096fbd"}}