Dark Web Profile: Section9 Ransomware
Jul 29, 2026
Categories
Top Articles
Dark Web Price Index 2026: How Much Is Your Data Worth?
Jul 29, 2026
Dark Web Profile: ExfilSquad
Jul 28, 2026
Alleged Healthcare, Military, RDP, SEP Tlaxcala, and GulfJobs Data Leaks
Jul 27, 2026
Dark Token Economy: Unauthorized LLM API Proxies Harvest Prompts for Fraud and Distillation
Jul 21, 2026
Jan 06, 2026
Top 10 Ransomware Groups of 2025
Top 10 Ransomware Groups of 2025 The Top 10 Ransomware Groups of 2025 illustrate how the ransomware ecosystem changed in structure rather than simply growing in volume. After the disruption of dominan...
Learn More
Jan 05, 2026
NordVPN Dev Data Leak, Crow Stealer Tool & Large Data Listings
NordVPN Dev Data Leak, Crow Stealer Tool & Large Data Listings SOCRadar’s Dark Web Team identified several new underground posts this week, including a threat actor claim involving alleged interna...
Learn More
Dec 29, 2025
Banco Vimenca, WIRED, and Government Data Leaks Surface on Dark Web
Banco Vimenca, WIRED, and Government Data Leaks Surface on Dark Web SOCRadar’s Dark Web Team identified several high-profile data leak claims this week, including alleged exposures affecting Banco Vim...
Learn More
Dec 23, 2025
Dark Web Forum: RAMP
Dark Web Forum: RAMP RAMP (Russian Anonymous Marketplace) is one of the most active and strategically significant ransomware forums on the dark web. Originally launched to connect ransomware operators...
Learn More
Dec 22, 2025
PSN Satellite Data Re-Listed, CryptoRipper Tool, and Chromium 0-Day Ad...
PSN Satellite Data Re-Listed, CryptoRipper Tool, and Chromium 0-Day Advertised SOCRadar’s Dark Web Team observed several new underground listings this week, including a re-surfaced data sale claim inv...
Learn More
Dec 15, 2025
Rolladen Planet Data Sale, Windows 0-Day, and New macOS RAT Detected
Rolladen Planet Data Sale, Windows 0-Day, and New macOS RAT Detected SOCRadar’s Dark Web Team identified several new underground listings this week, including an alleged customer database sale linked ...
Learn More
Dec 11, 2025
Top 10 Cybercrime Law Enforcement Operations of 2025
Top 10 Cybercrime Law Enforcement Operations of 2025 This report highlights a set of major law enforcement operations from 2025 that we selected for their substantial CTI value. Like last year’s revie...
Learn More
Dec 08, 2025
Weapon Bot Toolkit, MadLicense Exploit Demand, and 413K Credit Cards O...
Weapon Bot Toolkit, MadLicense Exploit Demand, and 413K Credit Cards Observed SOCRadar’s Dark Web Team identified multiple underground posts this week, including a major auction for global credit card...
Learn More
Dec 01, 2025
Riyadh Airports Access Claim, Golden Goose Trojan, and NEWSAN Leak Sur...
Riyadh Airports Access Claim, Golden Goose Trojan, and NEWSAN Leak Surface Online SOCRadar’s Dark Web Team identified several notable underground posts this week, including alleged unauthorized access...
Learn More
Nov 28, 2025
Dark Web Market: B1ack’s Stash
Dark Web Market: B1ack’s Stash On the dark web, every new carding market tries to gain instant credibility. Nothing does that faster than free leaked credit cards. B1ack’s Stash entered the deep web c...
Learn More
Nov 27, 2025
Inside Morte Loader: How Loader as a Service Builds Modern Botnets
Inside Morte Loader: How Loader as a Service Builds Modern Botnets Morte is a Loader as a Service (LaaS) that turns vulnerable SOHO routers, IoT devices and web applications into a flexible botnet pla...
Learn More
Nov 26, 2025
Dark Web Profile: ByteToBreach
Dark Web Profile: ByteToBreach By mid-2025, the alias ByteToBreach was already an active seller on a major cybercrime forum, offering access and databases from banks, telecom, airlines, and other larg...
Learn More
Nov 26, 2025
Alleged SeAH, Under Armour, SecureTeen, and Cloudeka Data Exposures De...
Alleged SeAH, Under Armour, SecureTeen, and Cloudeka Data Exposures Detected SOCRadar’s Dark Web Team identified several high-impact underground posts this week, including alleged leaks involving SeAH...
Learn More
Nov 25, 2025
Dark Web Profile: Berserk Bear
Dark Web Profile: Berserk Bear Berserk Bear is a Russian state-sponsored cyber espionage group linked to the FSB. They have been active since at least 2010 under many names (Dragonfly, Energetic Bear,...
Learn More
Nov 21, 2025
Scattered LAPSUS Hunters Escalate With New Channel and Gainsight Breac...
Scattered LAPSUS Hunters Escalate With New Channel and Gainsight Breach Scattered LAPSUS$ Hunters (SLH) has returned to the spotlight with new claims, alleged leaks, and a new Telegram channel, signal...
Learn More
Nov 21, 2025
Cl0p’s Oracle EBS Zero-Day Campaign: What We Know So Far
Cl0p’s Oracle EBS Zero-Day Campaign: What We Know So Far The Cl0p ransomware group has returned to the spotlight with a new wave of attacks that target Oracle EBS (E-Business Suite) zero-day vulnerabi...
Learn More
Nov 18, 2025
Dark Web Profile: Sarcoma Ransomware
Dark Web Profile: Sarcoma Ransomware Sarcoma ransomware group emerged in late 2024 and quickly launched aggressive double-extortion campaigns worldwide; Sarcoma’s fast-growing victim list and use of s...
Learn More
Nov 18, 2025
Dark Web Market: FreshTools
Dark Web Market: FreshTools The underground economy thrives on scale and speed. Few platforms illustrate this better than FreshTools, a clear-web marketplace that advertises itself as a one-stop shop ...
Learn More
Nov 17, 2025
Eurofiber Data Claims, BMW Employee Leak, and FortiWeb Exploit Surface...
Eurofiber Data Claims, BMW Employee Leak, and FortiWeb Exploit Surface Online SOCRadar’s Dark Web Team uncovered multiple high-impact listings this week, including an alleged Eurofiber data sale linke...
Learn More
Nov 10, 2025
Florida Government Data, Binance Checker, and Legal Organization Leak ...
Florida Government Data, Binance Checker, and Legal Organization Leak Surface on Dark Web SOCRadar’s Dark Web Team observed multiple new listings on hacker forums this week, including alleged database...
Learn More
