Dark Web Profile: Section9 Ransomware
Jul 29, 2026
Categories
Top Articles
Dark Web Price Index 2026: How Much Is Your Data Worth?
Jul 29, 2026
Dark Web Profile: ExfilSquad
Jul 28, 2026
Alleged Healthcare, Military, RDP, SEP Tlaxcala, and GulfJobs Data Leaks
Jul 27, 2026
Dark Token Economy: Unauthorized LLM API Proxies Harvest Prompts for Fraud and Distillation
Jul 21, 2026
Feb 27, 2026
What Dark Web Chatter Tells Us About Threats U.S. Firms Are Facing
What Dark Web Chatter Tells Us About Threats U.S. Firms Are Facing The cyber threat landscape targeting the United States is not shaped by isolated incidents or opportunistic actors alone. It is incre...
Learn More
Feb 27, 2026
How to Cut Through Dark Web Noise and Focus on Threats That Actually T...
How to Cut Through Dark Web Noise and Focus on Threats That Actually Target You Cyber environment produces more data than security teams can realistically process. As cybercriminal operations evolve i...
Learn More
Feb 27, 2026
Dark Web Profile: Andariel
Dark Web Profile: Andariel Andariel operates as a North Korea–linked threat group under the Reconnaissance General Bureau (RGB). Security researchers widely assess it as a sub-cluster of the Lazarus G...
Learn More
Feb 23, 2026
Alleged Wendy’s Franchise Data Listing, WhatsApp Exploit, and Origin G...
Alleged Wendy’s Franchise Data Listing, WhatsApp Exploit, and Origin GPT Surface on Forums SOCRadar’s Dark Web Team identified several new underground posts this week, including an alleged Wendy’s fra...
Learn More
Feb 20, 2026
Dark Web Profile: Lotus Blossom
Dark Web Profile: Lotus Blossom Lotus Blossom is a long-running cyber espionage Advanced Persistent Threat (APT) group active since at least 2009 and widely attributed to the People’s Republic of Chin...
Learn More
Feb 17, 2026
Dark Web Profile: Sinobi Ransomware
Dark Web Profile: Sinobi Ransomware Sinobi Ransomware is a cybercrime operation that emerged in mid-2025, operating as a Ransomware-as-a-Service model. It is believed that the group is a rebrand or di...
Learn More
Feb 16, 2026
Alleged Discord Exploit Sale & WormGPT Database Leak Detected
Alleged Discord Exploit Sale & WormGPT Database Leak Detected SOCRadar’s Dark Web Team identified several new underground posts this week, including an alleged Discord zero-day RCE exploit sale, a...
Learn More
Feb 12, 2026
Dark Web Profile: The Gentlemen Ransomware
Dark Web Profile: The Gentlemen Ransomware Despite its polished name, The Gentlemen Ransomware shows little interest in playing nice. First observed in 2025, the group quickly established itself as a ...
Learn More
Feb 10, 2026
Alleged Suno Data, Card Dump, ASUS Records & Air France Access Sale
Alleged Suno Data, Card Dump, ASUS Records & Air France Access Sale SOCRadar’s Dark Web Team identified several new underground listings this week, including an alleged database and source code sa...
Learn More
Feb 05, 2026
Dark Web Profile: 0APT Ransomware
Dark Web Profile: 0APT Ransomware 0APT, also recognized as the 0APT Syndicate, is a controversial Ransomware-as-a-Service operation that surfaced in late January 2026. The group rapidly gained notorie...
Learn More
Feb 02, 2026
Dark Web Posts Claim Argaam User Data, Paage Records, and Airport Data...
Dark Web Posts Claim Argaam User Data, Paage Records, and Airport Database SOCRadar’s Dark Web Team identified several new underground listings this week, including alleged database sales linked to Ar...
Learn More
Jan 27, 2026
Alleged Axtria & Salesfloor Data Leaks Surface on Dark Web
Alleged Axtria & Salesfloor Data Leaks Surface on Dark Web SOCRadar’s Dark Web Team identified several new underground posts this week, including alleged data leaks involving Axtria and Salesfloor...
Learn More
Jan 26, 2026
Dark Web Profile: BravoX Ransomware
Dark Web Profile: BravoX Ransomware BravoX is an emerging Ransomware-as-a-Service (RaaS) operation that surfaced after the publication of a new TOR-based data leak site (DLS) following a forum post on...
Learn More
Jan 23, 2026
How Security Teams Track Threat Actor Activity on Telegram Without Joi...
How Security Teams Track Threat Actor Activity on Telegram Without Joining Risky Channels Over the past decade, the cybercrime ecosystem has undergone a clear migration. What once operated mainly thro...
Learn More
Jan 22, 2026
Dark Web Profile: Anubis Ransomware
Dark Web Profile: Anubis Ransomware Anubis (Sphinx) ransomware is a Ransomware-as-a-Service (RaaS) group that challenges one of the core assumptions of modern ransomware response: that recovery is alw...
Learn More
Jan 20, 2026
Dark Web Profile: APT28
Dark Web Profile: APT28 APT28 is one of the most tracked state-linked intrusion sets because its activity often aligns with major geopolitical events and long-running espionage goals. Also known as Fa...
Learn More
Jan 19, 2026
Multiple Database Leak Claims Involve JobsGO, MyVete, PIXPAY, and Fond...
Multiple Database Leak Claims Involve JobsGO, MyVete, PIXPAY, and Fondasol SOCRadar’s Dark Web Team identified multiple new data leak claims this week involving recruitment, veterinary, payment, and e...
Learn More
Jan 16, 2026
Dark Web Profile: Orion Ransomware
Dark Web Profile: Orion Ransomware Orion Ransomware is a newly observed operation identified after the detection of a previously unknown ransomware Data Leak Site (DLS) by SOCRadar. The group emerged ...
Learn More
Jan 12, 2026
Alleged n8n Exploit, iOS Full-Chain Sale, and Instagram Data
Alleged n8n Exploit, iOS Full-Chain Sale, and Instagram Data SOCRadar’s Dark Web Team identified several new underground posts this week, including a broad “hacking service” offering, an alleged explo...
Learn More
Jan 09, 2026
Top 10 APT Groups in 2025
Top 10 APT Groups in 2025 Advanced Persistent Threats, known as APTs, represent some of the most capable cyber adversaries. These groups are often state-backed or part of well funded organizations and...
Learn More
