Live Blog: Cyber Reflections on the Iran-Israel-U.S. War Read the Analysis
SOCRadar Blog

Dark Web

Latest SOCRadar research and analysis on Dark Web: threat reports, advisories and practical guidance for security teams.

Latest articles

Alleged n8n Exploit, iOS Full-Chain Sale, and Instagram Data SOCRadar

Alleged n8n Exploit, iOS Full-Chain Sale, and Instagram Data

SOCRadar’s Dark Web Team identified several new underground posts this week, including a broad “hacking service” offering, an alleged exploit sale targeting n8n, a resurfaced dataset claimed to involve Instagram…

Top 10 APT Groups in 2025 SOCRadar

Top 10 APT Groups in 2025

Advanced Persistent Threats, known as APTs, represent some of the most capable cyber adversaries. These groups are often state-backed or part of well funded organizations and their primary goals include…

Top 10 Ransomware Groups of 2025 SOCRadar

Top 10 Ransomware Groups of 2025

The Top 10 Ransomware Groups of 2025 illustrate how the ransomware ecosystem changed in structure rather than simply growing in volume. After the disruption of dominant groups in 2024, the…

NordVPN Dev Data Leak, Crow Stealer Tool & Large Data Listings SOCRadar

NordVPN Dev Data Leak, Crow Stealer Tool & Large Data Listings

SOCRadar’s Dark Web Team identified several new underground posts this week, including a threat actor claim involving alleged internal NordVPN development data, a large data sale attributed to AgroParisTech, and…

Banco Vimenca, WIRED, and Government Data Leaks Surface on Dark Web SOCRadar

Banco Vimenca, WIRED, and Government Data Leaks Surface on Dark Web

SOCRadar’s Dark Web Team identified several high-profile data leak claims this week, including alleged exposures affecting Banco Vimenca, WIRED subscribers, Mexico’s Tax Administration Service (SAT), and New Zealand-based social platform…

Dark Web Forum: RAMP SOCRadar

Dark Web Forum: RAMP

RAMP (Russian Anonymous Marketplace) is one of the most active and strategically significant ransomware forums on the dark web. Originally launched to connect ransomware operators, affiliates, and brokers, RAMP has…

PSN Satellite Data Re-Listed, CryptoRipper Tool, and Chromium 0-Day Advertised SOCRadar

PSN Satellite Data Re-Listed, CryptoRipper Tool, and Chromium 0-Day Advertised

SOCRadar’s Dark Web Team observed several new underground listings this week, including a re-surfaced data sale claim involving Indonesian satellite operator PT Pasifik Satelit Nusantara, the distribution of a cryptocurrency-stealing malware tool…

Rolladen Planet Data Sale, Windows 0-Day, and New macOS RAT Detected SOCRadar

Rolladen Planet Data Sale, Windows 0-Day, and New macOS RAT Detected

SOCRadar’s Dark Web Team identified several new underground listings this week, including an alleged customer database sale linked to German retailer Rolladen Planet, new malware tools targeting Windows and macOS…

Never miss a critical advisory.

Join 30,000+ security professionals who read SOCRadar research every week.

See SOCRadar in Action