INC Ransom Targeted 24 Law Firms, but Only 10 are Listed
INC Ransom Targeted 24 Law Firms, but Only 10 are Listed INC was on an encryption streak against US law firms in March 2026. SOCRadar identified 24 individualized extortion sites, hosted across two IP...
Brazil Fiscal Leak, US Fullz, Telecom Access, Endesa IBANs, and Mexico...
Brazil Fiscal Leak, US Fullz, Telecom Access, Endesa IBANs, and Mexico Fortinet Access SOCRadar Dark Web Team identified several new underground posts involving alleged large-scale data exposure and i...
Dark Web Market: Vortex Market
Dark Web Market: Vortex Market Vortex Market describes itself as a “classic wallet escrow market,” and that self-description is accurate. It is a general-purpose Dark Web marketplace built around anon...
Dark Web Profile: Mustang Panda
Dark Web Profile: Mustang Panda Mustang Panda is one of the most persistent China-nexus cyber espionage groups operating today. Active since at least 2012, the group has targeted government agencies, ...
CVE Exploit Sale, Pakistan Telecom Data Claim, WineStyle Leak, RDWeb A...
CVE Exploit Sale, Pakistan Telecom Data Claim, WineStyle Leak, RDWeb Access, and Moscow Health Database Sale SOCRadar Dark Web Team identified several new underground posts involving alleged exploit s...
Dark Web Profile: Section9 Ransomware
Dark Web Profile: Section9 Ransomware Section9 or SECTION9, is a ransomware operation that skipped the slow, quiet build-up most new brands go through before any victim ever appears on a leak site. Wi...
Dark Web Price Index 2026: How Much Is Your Data Worth?
Dark Web Price Index 2026: How Much Is Your Data Worth? TL;DR: Personal records sell for $1 to $4, payment cards from $5, medical records $250 to $310, bank logins $200 to $500, and corporate network ...
Dark Web Profile: ExfilSquad
Dark Web Profile: ExfilSquad ExfilSquad is an emerging data-extortion group that surfaced with a rapid wave of public claims and a Tor-hosted Data Leak Site (DLS). The group is associated with an “onl...
Alleged Healthcare, Military, RDP, SEP Tlaxcala, and GulfJobs Data Lea...
Alleged Healthcare, Military, RDP, SEP Tlaxcala, and GulfJobs Data Leaks SOCRadar Dark Web Team identified several new underground posts involving alleged healthcare data exposure, military infrastruc...
Dark Token Economy: Unauthorized LLM API Proxies Harvest Prompts for F...
Dark Token Economy: Unauthorized LLM API Proxies Harvest Prompts for Fraud and Distillation The dark token economy is a parallel market where unauthorized proxy services resell access to frontier LLMs...
Alleged Fullz, PrestaShop Access, RGT Source Code, and Database Leaks
Alleged Fullz, PrestaShop Access, RGT Source Code, and Database Leaks SOCRadar Dark Web Team identified several new underground posts, including an alleged U.S. fullz sale, administrative access to a ...
Dark Web Profile: Krybit Ransomware
Dark Web Profile: Krybit Ransomware Emerging from an increasingly crowded and combative ransomware ecosystem, Krybit Ransomware operates as a financially motivated, opportunistic Ransomware-as-a-Servi...
Alleged Brooks, Keepcool, Truecaller Bot, DAMAC, and US Resume Data Cl...
Alleged Brooks, Keepcool, Truecaller Bot, DAMAC, and US Resume Data Claims SOCRadar Dark Web Team identified several new underground posts, including the resurfacing of an alleged legacy Brooks Intern...
Alleged WordPress 0-Day, HMG Patient Data, Astra Files, OnlineSkills L...
Alleged WordPress 0-Day, HMG Patient Data, Astra Files, OnlineSkills Leak, and RDWeb Access SOCRadar Dark Web Team identified several new underground posts, including an alleged WordPress plugin zero-...
SOCRadar Links FortiBleed Campaign to INC and Lynx Ransomware Operatio...
SOCRadar Links FortiBleed Campaign to INC and Lynx Ransomware Operations SOCRadar’s Threat Research Unit (STRU) has linked the FortiBleed credential-harvesting campaign to two active ransomware-as-a-s...
Alleged Okta Leak, MTS Bank Data Sale, Naucalpan, SSH Access, and Flaw...
Alleged Okta Leak, MTS Bank Data Sale, Naucalpan, SSH Access, and Flawireless Claims SOCRadar Dark Web Team identified several new underground posts involving alleged database leaks and access sales. ...
Top Dark Web Telegram Groups & Channels 2026
Top Dark Web Telegram Groups & Channels 2026 Note: This article is intended for cybersecurity awareness and research purposes only. It does not promote or endorse illegal content. The top Dark Web...
Top 10 Dark Web Markets in 2026: List & Threat Analysis
Top Dark Web Marketplaces in 2026 Dark Web marketplaces in 2026 are underground platforms where cybercriminals buy and sell stolen data, credentials, stealer logs, payment card records, malware, fraud...
Alleged FortiBleed Access Auction, Sens Unique Paris Data Sale, and li...
Alleged FortiBleed Access Auction, Sens Unique Paris Data Sale, and libsodium DoS Claims SOCRadar Dark Web Team identified new underground activity involving alleged FortiBleed-related access, an alle...
Dark Web Profile: Fox Kitten
Dark Web Profile: Fox Kitten Fox Kitten stands out among Iranian Advanced Persistent Threat (APT) groups for operating on two tracks simultaneously: collecting intelligence for the Iranian regime whil...
