Live Blog: Cyber Reflections on the Iran-Israel-U.S. War Read the Analysis
SOCRadar Blog

Dark Web

Latest SOCRadar research and analysis on Dark Web: threat reports, advisories and practical guidance for security teams.

Latest articles

What's The Difference Between The Dark Web And The Deep Web SOCRadar

What’s The Difference Between The Dark Web And The Deep Web

While both the dark web and deep web are hidden from search engines, they serve vastly different purposes. The deep web contains legitimate private content like your email inbox and…

Italian Credit Cards, Jazeera Passenger Dump, and New Decentralized Botnet Loader SOCRadar

Italian Credit Cards, Jazeera Passenger Database, and New Decentralized Botnet Loader

SOCRadar’s Dark Web Team spotted multiple underground listings this week, including auctions for Italian credit cards, a passenger dump from Jazeera Airways, and a Vidal Health dataset. Actors also offered…

Fresh Facebook Data Sale, MonoLock Ransomware, and SIM-Swap Recruitment Announced in Underground Forums SOCRadar

Fresh Facebook Data Sale, MonoLock Ransomware, and SIM-Swap Recruitment Announced in Underground Forums

SOCRadar’s Dark Web Team observed a busy underground market this week where actors offered massive scraped datasets, KYC and SIM-swap services, botnets for rent, and a new modular ransomware toolkit.…

Stansberry Data Sale, Oracle 0-Day, and Salesforce Leaks Highlight Dark Web Activity SOCRadar

Stansberry Data Sale, Oracle 0-Day, and Salesforce Leaks Highlight Dark Web Activity

SOCRadar’s Dark Web Team observed a surge of underground activity this week, including data sales, exploit discussions, and unauthorized access listings. Actors advertised a database allegedly containing 1.5 million Stansberry…

New CipherWolf RaaS, Oracle EBS 0‑Day Exploit & Money Laundering Service Detected on Hacker Forums SOCRadar

New CipherWolf RaaS, Oracle EBS 0‑Day Exploit & Money Laundering Service Detected on Hacker Forums

SOCRadar’s Dark Web Team has tracked a cluster of high‑impact underground listings this week. Highlights include an advertised cryptocurrency money‑laundering service that converts crypto to fiat via front companies, an…

Dark Web Profile: Scattered Lapsus$ Hunters SOCRadar

Dark Web Profile: Scattered Lapsus$ Hunters

[Update] November 28, 2025: “Is the DLS Already on Its Way Out?” and “Rey, ShinySp1d3r and the Gainsight Breach” In mid-2025, attackers launched coordinated intrusions into the Salesforce environments of…

Android RCE, CRM Breach, Axiom Crypto Drainer, and Airbus Panel Interest SOCRadar

Android RCE, CRM Breach, Axiom Crypto Drainer, and Airbus Panel Interest

SOCRadar Dark Web Team has uncovered multiple high-impact listings in underground forums, indicating continued targeting of software platforms and critical industries. Among the posts, a threat actor claims to sell…

Cloudflare 0-Day, Ameli Patient Leak, and New Fraud Tools Detected on Dark Web SOCRadar

Cloudflare 0-Day, Ameli Patient Leak, and New Fraud Tools Detected on Dark Web

SOCRadar Dark Web Team has identified a wave of new underground listings, highlighting both technical exploits and large-scale data breaches. Notably, a threat actor is selling a method allegedly bypassing…

Never miss a critical advisory.

Join 30,000+ security professionals who read SOCRadar research every week.

See SOCRadar in Action