Live Blog: Cyber Reflections on the Iran-Israel-U.S. War Read the Analysis
SOCRadar Blog

Dark Web

Latest SOCRadar research and analysis on Dark Web: threat reports, advisories and practical guidance for security teams.

Latest articles

Dark Web Profile: GLOBAL Ransomware SOCRadar

Dark Web Profile: GLOBAL Ransomware

GLOBAL Ransomware, also known as the GLOBAL GROUP, is a newly branded Ransomware-as-a-Service (RaaS) operation that surfaced in mid-2025. Despite being presented as a new player, forensic evidence links GLOBAL…

Dark Web Offers Exploits, AT&T Access, Ledger Scam Kit, and 100K Stolen Cards SOCRadar

Dark Web Offers Exploits, AT&T Access, Ledger Scam Kit, and 100K Stolen Cards

SOCRadar’s Dark Web Team has identified a new wave of underground activity involving high-value exploits, access, and data leaks. Threat actors are advertising an alleged Android 0-day affecting versions 11…

Dark Web Profile: Lynx Ransomware SOCRadar

Dark Web Profile: Lynx Ransomware

Lynx is a ransomware group that appeared in mid-2024 and is widely believed to be a rebrand of the INC ransomware operation. The group follows a Ransomware-as-a-Service (RaaS) model, providing…

Customer Data of PrestaShop, Panorabanques for Sale as New Fraud Services Emerge SOCRadar

Customer Data of PrestaShop, Panorabanques for Sale as New Fraud Services Emerge

SOCRadar’s Dark Web Team has observed new activity across hacker forums, with threat actors advertising alleged data breaches and cybercrime services. Recent posts claim to offer millions of customer records…

Surface Web Vs Deep Web Vs Dark Web SOCRadar

Surface Web Vs Deep Web Vs Dark Web

Most internet users only see a small part of the web. The pages you find through Google or Bing are just the beginning. Behind the scenes, there are deeper layers…

Dark Web Profile: Beast Ransomware SOCRadar

Dark Web Profile: Beast Ransomware

Beast Ransomware is the evolved form of an earlier strain known as Monster, first detected in March 2022 during an investigation by the BlackBerry Incident Response team. Initially developed in…

Threat Actors Target Nike, PayPal, and CelcomDigi in New Access and Data Sales SOCRadar

Threat Actors Target Nike, PayPal, and CelcomDigi in New Access and Data Sales

The SOCRadar Dark Web Team has uncovered several significant listings in the past week, including a recruitment effort targeting employees of top brokerage firms, an alleged leak of over 20…

Dark Web Profile: Void Blizzard SOCRadar

Dark Web Profile: Void Blizzard

Void Blizzard is a newly identified Russian state-sponsored cyber threat group. Also known as Laundry Bear, the group first drew attention after an attack on the Dutch police in September 2024.…

Never miss a critical advisory.

Join 30,000+ security professionals who read SOCRadar research every week.

See SOCRadar in Action