Dark Token Economy: Unauthorized LLM API Proxies Harvest Prompts for Fraud and Distillation
Jul 21, 2026
Categories
Top Articles
Alleged Fullz, PrestaShop Access, RGT Source Code, and Database Leaks
Jul 20, 2026
Dark Web Profile: Krybit Ransomware
Jul 13, 2026
Alleged Brooks, Keepcool, Truecaller Bot, DAMAC, and US Resume Data Claims
Jul 13, 2026
Alleged WordPress 0-Day, HMG Patient Data, Astra Files, OnlineSkills Leak, and RDWeb Access
Jul 06, 2026
Jul 21, 2026
Dark Token Economy: Unauthorized LLM API Proxies Harvest Prompts for F...
Dark Token Economy: Unauthorized LLM API Proxies Harvest Prompts for Fraud and Distillation The dark token economy is a parallel market where unauthorized proxy services resell access to frontier LLMs...
Learn More
Jul 20, 2026
Alleged Fullz, PrestaShop Access, RGT Source Code, and Database Leaks
Alleged Fullz, PrestaShop Access, RGT Source Code, and Database Leaks SOCRadar Dark Web Team identified several new underground posts, including an alleged U.S. fullz sale, administrative access to a ...
Learn More
Jul 13, 2026
Dark Web Profile: Krybit Ransomware
Dark Web Profile: Krybit Ransomware Emerging from an increasingly crowded and combative ransomware ecosystem, Krybit Ransomware operates as a financially motivated, opportunistic Ransomware-as-a-Servi...
Learn More
Jul 13, 2026
Alleged Brooks, Keepcool, Truecaller Bot, DAMAC, and US Resume Data Cl...
Alleged Brooks, Keepcool, Truecaller Bot, DAMAC, and US Resume Data Claims SOCRadar Dark Web Team identified several new underground posts, including the resurfacing of an alleged legacy Brooks Intern...
Learn More
Jul 06, 2026
Alleged WordPress 0-Day, HMG Patient Data, Astra Files, OnlineSkills L...
Alleged WordPress 0-Day, HMG Patient Data, Astra Files, OnlineSkills Leak, and RDWeb Access SOCRadar Dark Web Team identified several new underground posts, including an alleged WordPress plugin zero-...
Learn More
Jul 01, 2026
SOCRadar Links FortiBleed Campaign to INC and Lynx Ransomware Operatio...
SOCRadar Links FortiBleed Campaign to INC and Lynx Ransomware Operations SOCRadar’s Threat Research Unit (STRU) has linked the FortiBleed credential-harvesting campaign to two active ransomware-as-a-s...
Learn More
Jun 29, 2026
Alleged Okta Leak, MTS Bank Data Sale, Naucalpan, SSH Access, and Flaw...
Alleged Okta Leak, MTS Bank Data Sale, Naucalpan, SSH Access, and Flawireless Claims SOCRadar Dark Web Team identified several new underground posts involving alleged database leaks and access sales. ...
Learn More
Jun 23, 2026
Top Dark Web Telegram Groups & Channels 2026
Top Dark Web Telegram Groups & Channels 2026 Note: This article is intended for cybersecurity awareness and research purposes only. It does not promote or endorse illegal content. The top Dark Web...
Learn More
Jun 22, 2026
Top 10 Dark Web Markets in 2026: List & Threat Analysis
Top Dark Web Marketplaces in 2026 Dark Web marketplaces in 2026 are underground platforms where cybercriminals buy and sell stolen data, credentials, stealer logs, payment card records, malware, fraud...
Learn More
Jun 22, 2026
Alleged FortiBleed Access Auction, Sens Unique Paris Data Sale, and li...
Alleged FortiBleed Access Auction, Sens Unique Paris Data Sale, and libsodium DoS Claims SOCRadar Dark Web Team identified new underground activity involving alleged FortiBleed-related access, an alle...
Learn More
Jun 15, 2026
Dark Web Profile: Fox Kitten
Dark Web Profile: Fox Kitten Fox Kitten stands out among Iranian Advanced Persistent Threat (APT) groups for operating on two tracks simultaneously: collecting intelligence for the Iranian regime whil...
Learn More
Jun 15, 2026
Iran Hajj Organization Data Claim, Crypto Leads Sale, APT43 Tooling Cl...
Iran Hajj Organization Data Claim, Crypto Leads Sale, APT43 Tooling Claim, Sweden User Data, and Chrysler Breach Claim SOCRadar’s Dark Web Team identified several new underground posts, including an a...
Learn More
Jun 12, 2026
Dark Web Profile: Rock
Dark Web Profile: Rock Most Phishing-as-a-Service operations are run by a faceless brand. Rock is the opposite: a single developer who builds, maintains, and sells an entire phishing and remote access...
Learn More
Jun 12, 2026
New Data Extortion Group “Pink” Goes Big Game Hunting With Evasive Phi...
New Data Extortion Group “Pink” Goes Big Game Hunting With Evasive Phishing Kits Pink Data Extortion Group is emerging as one of the latest examples of how voice phishing and data extortion continue t...
Learn More
Jun 11, 2026
Dark Web Profile: Tengu Ransomware (Shisa)
Dark Web Profile: Tengu Ransomware (Shisa) Despite a measured public persona, Tengu Ransomware operates as a financially motivated, well-organized threat. First observed in late 2025, the group emerge...
Learn More
Jun 05, 2026
Dark Web Profile: Vect Ransomware
Dark Web Profile: Vect Ransomware Most new ransomware operations spend their first months in the shadows, courting affiliates one at a time on closed forums. Vect did the opposite. Within four months ...
Learn More
Jun 03, 2026
Top 10 Cyber Threat Actors Targeting Brazil
Top 10 Cyber Threat Actors Targeting Brazil Brazil enters the second half of 2026 as Latin America’s undisputed top cybercrime target. With a general election approaching in October 2026 and a booming...
Learn More
Jun 03, 2026
Top 10 Dark Web Search Engines
Top 10 Dark Web Search Engines This guide compares the top Dark Web search engines active in 2026 for safer, privacy-focused research and secure access to hidden services. The Dark Web search engines ...
Learn More
Jun 02, 2026
Dark Web Profile: BlindEagle
Dark Web Profile: BlindEagle BlindEagle (APT-C-36 / AguilaCiega / TAG-144 / G0099 / APT-Q-98) is a threat actor believed to be operating from Latin America. Tracked since 2018, the group runs a hybrid...
Learn More
Jun 01, 2026
Italian Hospitality and AT&T Data Claims, Hinge Dump Sale, Meta Llama ...
Italian Hospitality and AT&T Data Claims, Hinge Dump Sale, Meta Llama Leak, and MobiFriend Dataset SOCRadar’s Dark Web Team identified several new underground posts, including an alleged 230,000-c...
Learn More
