Live Blog: Cyber Reflections on the Iran-Israel-U.S. War Read the Analysis
SOCRadar Blog

Dark Web

Latest SOCRadar research and analysis on Dark Web: threat reports, advisories and practical guidance for security teams.

Latest articles

Dark Peep #11: The Final Curtain for LockBit Ransomware (Operation Cronos) SOCRadar

Dark Peep #11: The Final Curtain for LockBit Ransomware (Operation Cronos)

Digital Olympians and seekers of cyber lore! “Dark Peep #11” unfurls its scroll to reveal tales of cunning, courage, and chaos in the digital Olympus, where modern-day Titans clash not…

Power of AI: Dark Web Monitoring with ChatGPT SOCRadar

Power of AI: Dark Web Monitoring with ChatGPT

The dark web, often shrouded in mystery and intrigue, is a part of the internet that remains hidden from conventional search engines and browsers. It’s a realm where anonymity is paramount…

dark-web-profile-hunters-international SOCRadar

Dark Web Profile: Hunters International

[Update] July 22, 2025: “Hunters International Shuts Down, Rebrands as World Leaks” Originating in the latter part of 2023, this Ransomware-as-a-Service (RaaS) operation has drawn attention due to its technical…

International Authorities Strike Blow Against LockBit Ransomware: Operation Cronos SOCRadar

International Authorities Strike Blow Against LockBit Ransomware: Operation Cronos

[Update] October 1, 2024: “New Arrests and Infrastructure Seizures” [Update] June 6, 2024: “FBI Offers +7,000 LockBit Decryption Keys to Ransomware Victims” [Update] March 7, 2024: “The Man Behind the…

Sales of bfBot Stealer & Knight Ransomware Source Code, Dior Vulnerabilities, Passport Leaks, and More SOCRadar

Sales of bfBot Stealer & Knight Ransomware Source Code, Dior Vulnerabilities, Passport Leaks, and More

The SOCRadar Dark Web Team exposed alarming sales, from ransomware source codes to leaked passports. Knight 3.0 ransomware’s source code, Dior vulnerabilities, passport leaks, and bfBot Stealer are among the critical discoveries…

Threat Actor Profile: ScarCruft / APT37 SOCRadar

Dark Web Profile: ScarCruft / APT37

[Update] October 17, 2024: “ScarCruft Exploits CVE-2024-38178 to Deploy RokRAT Malware” ScarCruft, also widely known as APT37 or Reaper APT, is an espionage group associated with North Korean state activities that…

Pipeline to Peril: Unpacking the ALPHV Attack on Trans-Northern SOCRadar

Pipeline to Peril: Unpacking the ALPHV Attack on Trans-Northern

[Update] February 16, 2024: “US State Department's Reward for Information on ALPHV/BlackCat Ransomware” In the ever-evolving landscape of cybersecurity threats, the recent alleged cyber attack on Canada's Trans-Northern Pipelines by…

Dark Web Profile: 3AM Ransomware SOCRadar

Dark Web Profile: 3AM Ransomware

In late 2023, a new and distinct ransomware group named 3AM Ransomware emerged. It came to the forefront as a fallback for other ransomware, notably during failed deployments of the infamous LockBit ransomware…

Never miss a critical advisory.

Join 30,000+ security professionals who read SOCRadar research every week.

See SOCRadar in Action