Live Blog: Cyber Reflections on the Iran-Israel-U.S. War Read the Analysis
SOCRadar Blog

Dark Web

Latest SOCRadar research and analysis on Dark Web: threat reports, advisories and practical guidance for security teams.

Latest articles

U.S. Tax Season: How Threat Actors Exploit IRS Phishing, W-2 Fraud, and Dark Web Activity SOCRadar

U.S. Tax Season: How Threat Actors Exploit IRS Phishing, W-2 Fraud, and Dark Web Activity

Every year, the U.S. tax filing period brings a surge of financial activity, sensitive data exchanges, and increased online communication between taxpayers, employers, and tax authorities. Unfortunately, this same period…

Dark Web Profile: Handala Hack SOCRadar

Dark Web Profile: Handala Hack

[Update] March 30, 2026: “FBI Director Personal Email Breach and Escalating Operations”, “Alleged Doxxing Campaign Targets Handala Members” Not every hacktivist group is what it claims to be. Handala presents…

Alleged FNATH, AT&T, Rapikom, Canva, and Canada Data Listings Plus Windows Bot Rental SOCRadar

Alleged FNATH, AT&T, Rapikom, Canva, and Canada Data Listings Plus Windows Bot Rental

SOCRadar’s Dark Web Team identified several new underground posts this week, including alleged database sales tied to FNATH and AT&T, a claimed free leak involving Rapikom Venezuela, and credential-focused listings…

Iranian APT MuddyWater Uses Dindoor Malware to Target U.S. Networks SOCRadar

Iranian APT MuddyWater Uses Dindoor Malware to Target U.S. Networks

A recently uncovered cyber espionage campaign attributed to the Iranian state-linked threat group MuddyWater has drawn attention from security researchers after several organizations in the United States were compromised using…

Dark Web Profile: APT41 SOCRadar

Dark Web Profile: APT41

APT41 stands out in the threat landscape because it doesn’t stick to a single playbook. It has been repeatedly linked to both cyber espionage and financially motivated cybercrime, sometimes running…

Alleged Eholo, OptimizerAI, PlayStation, Florajet, Coinbase Data and MalFactory Stealer Sale Surface SOCRadar

Alleged Eholo, OptimizerAI, PlayStation, Florajet, Coinbase Data and MalFactory Stealer Sale Surface

SOCRadar’s Dark Web Team identified several new underground posts this week, including alleged data leak and sale claims involving Eholo, OptimizerAI, PlayStation, Florajet, and Coinbase, as well as a new…

What Dark Web Chatter Tells Us About Threats U.S. Firms Are Facing SOCRadar

What Dark Web Chatter Tells Us About Threats U.S. Firms Are Facing

The cyber threat landscape targeting the United States is not shaped by isolated incidents or opportunistic actors alone. It is increasingly defined by a structured underground economy where stolen data,…

How to Cut Through Dark Web Noise and Focus on Threats That Actually Target You SOCRadar

How to Cut Through Dark Web Noise and Focus on Threats That Actually Target You

Cyber environment produces more data than security teams can realistically process. As cybercriminal operations evolve into structured, service-driven ecosystems, the Dark Web has become a central marketplace for stolen credentials,…

Never miss a critical advisory.

Join 30,000+ security professionals who read SOCRadar research every week.

See SOCRadar in Action