What's Out There About You on the Dark Web? Scan for Leaks Now
SOCRadar Blog

Dark Web

Latest SOCRadar research and analysis on Dark Web: threat reports, advisories and practical guidance for security teams.

Latest articles

Alleged Healthcare, Military, RDP, SEP Tlaxcala, and GulfJobs Data Leaks SOCRadar

Alleged Healthcare, Military, RDP, SEP Tlaxcala, and GulfJobs Data Leaks

Alleged Healthcare, Military, RDP, SEP Tlaxcala, and GulfJobs Data Leaks SOCRadar Dark Web Team identified several new underground posts involving alleged healthcare data exposure, military infrastructure compromise, ini

Dark Token Economy: Unauthorized LLM API Proxies Harvest Prompts for Fraud and Distillation SOCRadar

Dark Token Economy: Unauthorized LLM API Proxies Harvest Prompts for Fraud and Distillation

The dark token economy is a parallel market where unauthorized proxy services resell access to frontier LLMs like Claude, GPT, and Gemini at up to 90% below official pricing. Proxy…

Alleged Fullz, PrestaShop Access, RGT Source Code, and Database Leaks SOCRadar

Alleged Fullz, PrestaShop Access, RGT Source Code, and Database Leaks

Alleged Fullz, PrestaShop Access, RGT Source Code, and Database Leaks SOCRadar Dark Web Team identified several new underground posts, including an alleged U.S. fullz sale, administrative access to a Czech…

Dark Web Profile: Krybit Ransomware SOCRadar

Dark Web Profile: Krybit Ransomware

Dark Web Profile: Krybit Ransomware Emerging from an increasingly crowded and combative ransomware ecosystem, Krybit Ransomware operates as a financially motivated, opportunistic Ransomware-as-a-Service (RaaS) threat. Wi

Alleged Brooks, Keepcool, Truecaller Bot, DAMAC, and US Resume Data Claims SOCRadar

Alleged Brooks, Keepcool, Truecaller Bot, DAMAC, and US Resume Data Claims

Alleged Brooks, Keepcool, Truecaller Bot, DAMAC, and US Resume Data Claims SOCRadar Dark Web Team identified several new underground posts, including the resurfacing of an alleged legacy Brooks International database,…

Alleged WordPress 0-Day, HMG Patient Data, Astra Files, OnlineSkills Leak, and RDWeb Access SOCRadar

Alleged WordPress 0-Day, HMG Patient Data, Astra Files, OnlineSkills Leak, and RDWeb Access

SOCRadar Dark Web Team identified several new underground posts, including an alleged WordPress plugin zero-day privilege escalation exploit, a claimed 452,578-record patient database tied to Dr. Sulaiman Al Habib Medical…

SOCRadar Links FortiBleed Campaign to INC and Lynx Ransomware Operations SOCRadar

SOCRadar Links FortiBleed Campaign to INC and Lynx Ransomware Operations

SOCRadar Links FortiBleed Campaign to INC and Lynx Ransomware Operations SOCRadar's Threat Research Unit (STRU) has linked the FortiBleed credential-harvesting campaign to two active ransomware-as-a-service operations,

Alleged Okta Leak, MTS Bank Data Sale, Naucalpan, SSH Access, and Flawireless Claims SOCRadar

Alleged Okta Leak, MTS Bank Data Sale, Naucalpan, SSH Access, and Flawireless Claims

SOCRadar Dark Web Team identified several new underground posts involving alleged database leaks and access sales. The activity includes an alleged SQL database leak tied to Naucalpan de Juarez services…

Never miss a critical advisory.

Join 30,000+ security professionals who read SOCRadar research every week.

See SOCRadar in Action