Live Blog: Cyber Reflections on the Iran-Israel-U.S. War Read the Analysis
SOCRadar Blog

Dark Web

Latest SOCRadar research and analysis on Dark Web: threat reports, advisories and practical guidance for security teams.

Latest articles

Dark Web Profile: Mustang Panda SOCRadar

Dark Web Profile: Mustang Panda

Dark Web Profile: Mustang Panda Mustang Panda is one of the most persistent China-nexus cyber espionage groups operating today. Active since at least 2012 , the group has targeted government…

CVE Exploit Sale, Pakistan Telecom Data Claim, WineStyle Leak, RDWeb Access, and Moscow Health Database Sale SOCRadar

CVE Exploit Sale, Pakistan Telecom Data Claim, WineStyle Leak, RDWeb Access, and Moscow Health Database Sale

CVE Exploit Sale, Pakistan Telecom Data Claim, WineStyle Leak, RDWeb Access, and Moscow Health Database Sale SOCRadar Dark Web Team identified several new underground posts involving alleged exploit sales, large-scale…

Dark Web Profile: Section9 Ransomware SOCRadar

Dark Web Profile: Section9 Ransomware

Dark Web Profile: Section9 Ransomware Section9 or SECTION9, is a ransomware operation that skipped the slow, quiet build-up most new brands go through before any victim ever appears on a…

Dark Web Price Index 2026: How Much Is Your Data Worth? SOCRadar

Dark Web Price Index 2026: How Much Is Your Data Worth?

Dark Web Price Index 2026: How Much Is Your Data Worth? TL;DR: Personal records sell for $1 to $4, payment cards from $5, medical records $250 to $310, bank logins…

Dark Web Profile: ExfilSquad SOCRadar

Dark Web Profile: ExfilSquad

Dark Web Profile: ExfilSquad ExfilSquad is an emerging data-extortion group that surfaced with a rapid wave of public claims and a Tor-hosted Data Leak Site (DLS). The group is associated…

Alleged Healthcare, Military, RDP, SEP Tlaxcala, and GulfJobs Data Leaks SOCRadar

Alleged Healthcare, Military, RDP, SEP Tlaxcala, and GulfJobs Data Leaks

Alleged Healthcare, Military, RDP, SEP Tlaxcala, and GulfJobs Data Leaks SOCRadar Dark Web Team identified several new underground posts involving alleged healthcare data exposure, military infrastructure compromise, ini

Dark Token Economy: Unauthorized LLM API Proxies Harvest Prompts for Fraud and Distillation SOCRadar

Dark Token Economy: Unauthorized LLM API Proxies Harvest Prompts for Fraud and Distillation

The dark token economy is a parallel market where unauthorized proxy services resell access to frontier LLMs like Claude, GPT, and Gemini at up to 90% below official pricing. Proxy…

Alleged Fullz, PrestaShop Access, RGT Source Code, and Database Leaks SOCRadar

Alleged Fullz, PrestaShop Access, RGT Source Code, and Database Leaks

Alleged Fullz, PrestaShop Access, RGT Source Code, and Database Leaks SOCRadar Dark Web Team identified several new underground posts, including an alleged U.S. fullz sale, administrative access to a Czech…

Never miss a critical advisory.

Join 30,000+ security professionals who read SOCRadar research every week.

See SOCRadar in Action