Here's an article I wrote about using the dark web as a monitoring tool. Honestly, we should be using every tool at our disposal in order get a step up when it comes to defending against attackers. If attackers are using the dark web as a tool for malicious activity, then we need to flip the tables on them and use it for our advantage. This is pure intelligence which can be used as an early warning sign that "bad crap is coming". Either you do nothing and wait, or you attempt to infiltrate the lion's den.