Live Blog: Cyber Reflections on the Iran-Israel-U.S. War Read the Analysis
SOCRadar Blog

Dark Web

Latest SOCRadar research and analysis on Dark Web: threat reports, advisories and practical guidance for security teams.

Latest articles

Dark Web Profile: Keymous+ SOCRadar

Dark Web Profile: Keymous+

Keymous Plus, also known as Keymous+ threat group, markets itself as a hacktivist collective fighting for humanity. What intelligence investigations have documented is structurally different: a North African hybrid actor…

Top 10 Dark Web and Deep Web Forums SOCRadar

Top 10 Deep & Dark Web Forums in 2026

The top Deep Web and Dark Web Forums actively monitored in 2026 are XSS, Exploit.in, BHF, Dread, DarkForums, Altenen, CryptBB, Cracked, and DamageLib, based on how frequently they surface in…

10 Best Dark / Deep Web Browsers for Anonymity SOCRadar

10 Best Dark / Deep Web Browsers for Anonymity in 2026

10 Best Dark / Deep Web Browsers for Anonymity

Discord and Gemini Database Claims, Cisco FMC RCE Leak, Xia Stealer Sale, and IMSS Donor Records Listing SOCRadar

Discord and Gemini Database Claims, Cisco FMC RCE Leak, Xia Stealer Sale, and IMSS Donor Records Listing

SOCRadar Dark Web Team identified several new underground posts, including an alleged Discord database dump shared with “simple” user style fields, and a separate claim of a gemini.google.com database being…

Operation HookedWing: 4-Year Multi-Sector Phishing Campaign SOCRadar

Operation HookedWing: 4-Year Multi-Sector Attack Analysis

From 2022 to the present, a persistent phishing campaign that has not been publicly documented until now, referred to in this report as Operation HookedWing, has been compromising organizations across…

WhatsApp Number Leak, OpenVPN Access Sale, LiteLLM Exploit Scanner, BIN Leads Listing, and PHI Buyer Post SOCRadar

WhatsApp Number Leak, OpenVPN Access Sale, LiteLLM Exploit Scanner, BIN Leads Listing, and PHI Buyer Post

SOCRadar Dark Web Team identified several new underground posts, including a claim of 20.65 million Indonesian WhatsApp numbers being shared, a separate listing advertising OpenVPN access into an Indian financial…

What Is Dark Web Monitoring? SOCRadar

What Is Dark Web Monitoring?

Every day, stolen credentials, leaked records, and sensitive data show up in hidden corners of the internet. Most security tools never reach those places. Dark Web Monitoring does. In this…

Blue Origin Leak Claim, iOS Zero Day Sale, VPN and AWS Access Listings, and Ticketmaster Database Post SOCRadar

Blue Origin Leak Claim, iOS Zero Day Sale, VPN and AWS Access Listings, and Ticketmaster Database Post

SOCRadar Dark Web Team identified several new underground posts, including a claim of leaked Blue Origin documents tied to a ransom demand, a separate listing advertising an alleged full-chain iOS…

Never miss a critical advisory.

Join 30,000+ security professionals who read SOCRadar research every week.

See SOCRadar in Action