Live Blog: Cyber Reflections on the Iran-Israel-U.S. War Read the Analysis
SOCRadar Blog

Dark Web

Latest SOCRadar research and analysis on Dark Web: threat reports, advisories and practical guidance for security teams.

Latest articles

E-Commerce Platforms Face Rising Dark Web Threats; Admin Access and Customer Data on Sale SOCRadar

E-Commerce Platforms Face Rising Dark Web Threats; Admin Access and Customer Data on Sale

New activity observed by the SOCRadar Dark Web team reveals a growing trend of cybercriminal activity targeting global e-commerce businesses. Multiple threat actors have advertised unauthorized admin access, leaked customer…

Dark Web Profile: Interlock Ransomware SOCRadar

Dark Web Profile: Interlock Ransomware

Interlock is a ransomware group active since late 2024, most recently gaining attention for its use of advanced social engineering tactics. Its latest technique, called ClickFix, tricks users into pasting malicious PowerShell…

Berkeley University, Eni France, and Foremost Named in Dark Web Sales; SDC Service Advertised SOCRadar

Berkeley University, Eni France, and Foremost Named in Dark Web Sales; SDC Service Advertised

New activity observed by the SOCRadar Dark Web team reveals an expanding ecosystem of cybercrime services and data leaks targeting high-profile entities. A newly advertised cash-out platform called SDC Ecosystem…

Dark Web Profile: SafePay Ransomware SOCRadar

Dark Web Profile: SafePay Ransomware

SafePay is a ransomware group first observed around September 2024. It encrypts files and demands a cryptocurrency payment to restore access. The group behind it also steals data from victims…

Dark Web Activity Targets MEXC Global, Pandora Joias, Tea App, and Expands Smoke Loader Reach SOCRadar

Dark Web Activity Targets MEXC Global, Pandora Joias, Tea App, and Expands Smoke Loader Reach

SOCRadar Dark Web Team has observed several high-impact cybercrime developments over the past week. Threat actors are offering unauthorized fund withdrawal services for MEXC Global accounts, claiming they can bypass…

Cybercriminal Listings Target Fujitsu, Baxter Kelly, AGX Financeira, and a Belgian IT Platform SOCRadar

Cybercriminal Listings Target Fujitsu, Baxter Kelly, AGX Financeira, and a Belgian IT Platform

SOCRadar’s Dark Web Team has observed several new listings involving unauthorized access sales and data breaches affecting companies across Japan, the U.K., Brazil, and Belgium. One post allegedly offers Citrix access tied…

Dark Web Profile: CrazyHunter Ransomware SOCRadar

Dark Web Profile: CrazyHunter Ransomware

On February 9, 2025, Taiwan MacKay Memorial Hospital suffered a major ransomware attack. It hit the emergency and outpatient systems at both the Taipei and Tamsui campuses. More than 500…

Dark Web Profile: APT36 SOCRadar

Dark Web Profile: APT36

APT36 is a Pakistan-linked state-sponsored cyber-espionage group active since at least 2013. With a persistent focus on Indian military, diplomatic, and critical infrastructure targets, APT36 conducts long-term intelligence-gathering operations using…

Never miss a critical advisory.

Join 30,000+ security professionals who read SOCRadar research every week.

See SOCRadar in Action