Live Blog: Cyber Reflections on the Iran-Israel-U.S. War Read the Analysis
SOCRadar Blog

Dark Web

Latest SOCRadar research and analysis on Dark Web: threat reports, advisories and practical guidance for security teams.

Latest articles

Dark Web Profile: Dire Wolf Ransomware SOCRadar

Dark Web Profile: Dire Wolf Ransomware

Dire Wolf emerged in 2025 and quickly carried out disruptive ransomware attacks in multiple regions. Dire Wolf appeared on dark web leak sites within weeks and was noted in security…

LIC India, Bouygues, IMSS Data for Sale; Paris Phishing Toolkit Unveiled SOCRadar

LIC India, Bouygues, IMSS Data for Sale; Paris Phishing Toolkit Unveiled

SOCRadar Dark Web Team has uncovered new underground activity involving large-scale data leaks and advanced phishing services. Recent forum posts advertised stolen databases allegedly linked to major organizations across India,…

What Is Dark Web Threat Intelligence? SOCRadar

What Is Dark Web Threat Intelligence?

Dark Web Threat Intelligence can best be understood through a structured deep web guide that explains the hidden layers of the internet and their security implications. The deep web itself…

Dark Web Profile: BQTLock Ransomware SOCRadar

Dark Web Profile: BQTLock Ransomware

BQTLock is a new and advanced Ransomware-as-a-Service (RaaS) that has quickly gained attention for its disruptive operations and unique methods. Emerging from the Middle East and expanding globally, it shows…

Deep and Dark Web Monitoring SOCRadar

Deep and Dark Web Monitoring

Threat actors operate across multiple layers of the internet, from surface web to encrypted Dark Web marketplaces. Traditional security tools only monitor your internal network, leaving external threats invisible. That’s…

Dark Web Profile: Mr Hamza SOCRadar

Dark Web Profile: Mr Hamza

Hacktivist groups like Mr Hamza have turned Telegram into a staging ground for cyber campaigns. These channels serve as meeting points where supporters coordinate Distributed Denial of Service (DDoS) attacks,…

iOS 0-Day, 55M U.S. Citizens' Data, and Stealer Tools Hit Dark Web Forums SOCRadar

iOS 0-Day, 55M U.S. Citizens’ Data, and Stealer Tools Hit Dark Web Forums

SOCRadar’s Dark Web Team has uncovered a surge in underground listings offering sensitive data, powerful exploit tools, and persistent access channels. Threat actors are advertising a zero-day RCE exploit targeting…

LockBit 5.0 & Ransomware Cartel: What You Need To Know? SOCRadar

LockBit 5.0 & Ransomware Cartel: What You Need To Know?

[Update] December 8, 2025: “LockBit 5.0 “Secure Blog” Infrastructure Already Exposed” LockBit represents one of the longest-running and most structured ransomware gangs of recent years, with a Ransomware-as-a-Service (RaaS) model…

Never miss a critical advisory.

Join 30,000+ security professionals who read SOCRadar research every week.

See SOCRadar in Action