Latest articles
SOCRadar
Dark Web Posts Claim Argaam User Data, Paage Records, and Airport Database
SOCRadar’s Dark Web Team identified several new underground listings this week, including alleged database sales linked to Argaam, Paage, and Beirut–Rafic Hariri International Airport. The posts referenced user account data, transactional and…
SOCRadar
Alleged Axtria & Salesfloor Data Leaks Surface on Dark Web
SOCRadar’s Dark Web Team identified several new underground posts this week, including alleged data leaks involving Axtria and Salesfloor, a claimed user database sale linked to investment platform Republic, and…
SOCRadar
Dark Web Profile: BravoX Ransomware
BravoX is an emerging Ransomware-as-a-Service (RaaS) operation that surfaced after the publication of a new TOR-based data leak site (DLS) following a forum post on the RAMP underground forum. First…
SOCRadar
How Security Teams Track Threat Actor Activity on Telegram Without Joining Risky Channels
Over the past decade, the cybercrime ecosystem has undergone a clear migration. What once operated mainly through slow, fragmented TOR-based forums has steadily shifted to fast, encrypted, publicly accessible platforms…
SOCRadar
Dark Web Profile: Anubis Ransomware
Anubis (Sphinx) ransomware is a Ransomware-as-a-Service (RaaS) group that challenges one of the core assumptions of modern ransomware response: that recovery is always possible after payment. Alongside standard file encryption,…
SOCRadar
Dark Web Profile: APT28
APT28 is one of the most tracked state-linked intrusion sets because its activity often aligns with major geopolitical events and long-running espionage goals. Also known as Fancy Bear and Sofacy,…
SOCRadar
Multiple Database Leak Claims Involve JobsGO, MyVete, PIXPAY, and Fondasol
SOCRadar’s Dark Web Team identified multiple new data leak claims this week involving recruitment, veterinary, payment, and engineering platforms. Posts alleged database exposures affecting Vietnam-based JobsGO, veterinary management platform MyVete, Senegalese payment…
SOCRadar
Dark Web Profile: Orion Ransomware
Orion Ransomware is a newly observed operation identified after the detection of a previously unknown ransomware Data Leak Site (DLS) by SOCRadar. The group emerged publicly by listing 13 alleged…
Never miss a critical advisory.
Join 30,000+ security professionals who read SOCRadar research every week.
See SOCRadar in Action