Cloudflare 0-Day, Ameli Patient Leak, and New Fraud Tools Detected on ...
Cloudflare 0-Day, Ameli Patient Leak, and New Fraud Tools Detected on Dark Web SOCRadar Dark Web Team has identified a wave of new underground listings, highlighting both technical exploits and large-...
Dark Web Profile: Dire Wolf Ransomware
Dark Web Profile: Dire Wolf Ransomware Dire Wolf emerged in 2025 and quickly carried out disruptive ransomware attacks in multiple regions. Dire Wolf appeared on dark web leak sites within weeks and w...
LIC India, Bouygues, IMSS Data for Sale; Paris Phishing Toolkit Unveil...
LIC India, Bouygues, IMSS Data for Sale; Paris Phishing Toolkit Unveiled SOCRadar Dark Web Team has uncovered new underground activity involving large-scale data leaks and advanced phishing services. ...
What Is Dark Web Threat Intelligence?
What Is Dark Web Threat Intelligence? Dark Web Threat Intelligence can best be understood through a structured deep web guide that explains the hidden layers of the internet and their security implica...
Dark Web Profile: BQTLock Ransomware
Dark Web Profile: BQTLock Ransomware BQTLock is a new and advanced Ransomware-as-a-Service (RaaS) that has quickly gained attention for its disruptive operations and unique methods. Emerging from the ...
Deep and Dark Web Monitoring
Deep and Dark Web Monitoring Threat actors operate across multiple layers of the internet, from surface web to encrypted Dark Web marketplaces. Traditional security tools only monitor your internal ne...
Dark Web Profile: Mr Hamza
Dark Web Profile: Mr Hamza Hacktivist groups like Mr Hamza have turned Telegram into a staging ground for cyber campaigns. These channels serve as meeting points where supporters coordinate Distribute...
iOS 0-Day, 55M U.S. Citizens' Data, and Stealer Tools Hit Dark Web For...
iOS 0-Day, 55M U.S. Citizens’ Data, and Stealer Tools Hit Dark Web Forums SOCRadar’s Dark Web Team has uncovered a surge in underground listings offering sensitive data, powerful exploit tools, and pe...
LockBit 5.0 & Ransomware Cartel: What You Need To Know?
LockBit 5.0 & Ransomware Cartel: What You Need To Know? [Update] December 8, 2025: “LockBit 5.0 “Secure Blog” Infrastructure Already Exposed” LockBit represents one of the longest-running and most...
Dark Web Profile: GLOBAL Ransomware
Dark Web Profile: GLOBAL Ransomware GLOBAL Ransomware, also known as the GLOBAL GROUP, is a newly branded Ransomware-as-a-Service (RaaS) operation that surfaced in mid-2025. Despite being presented as...
Dark Web Offers Exploits, AT&T Access, Ledger Scam Kit, and 100K Stole...
Dark Web Offers Exploits, AT&T Access, Ledger Scam Kit, and 100K Stolen Cards SOCRadar’s Dark Web Team has identified a new wave of underground activity involving high-value exploits, access, and ...
Dark Web Profile: Lynx Ransomware
Dark Web Profile: Lynx Ransomware Lynx is a ransomware group that appeared in mid-2024 and is widely believed to be a rebrand of the INC ransomware operation. The group follows a Ransomware-as-a-Servi...
Customer Data of PrestaShop, Panorabanques for Sale as New Fraud Servi...
Customer Data of PrestaShop, Panorabanques for Sale as New Fraud Services Emerge SOCRadar’s Dark Web Team has observed new activity across hacker forums, with threat actors advertising alleged data br...
Surface Web Vs Deep Web Vs Dark Web
Surface Web Vs Deep Web Vs Dark Web Most internet users only see a small part of the web. The pages you find through Google or Bing are just the beginning. Behind the scenes, there are deeper layers o...
Dark Web Profile: Beast Ransomware
Dark Web Profile: Beast Ransomware Beast Ransomware is the evolved form of an earlier strain known as Monster, first detected in March 2022 during an investigation by the BlackBerry Incident Response ...
Threat Actors Target Nike, PayPal, and CelcomDigi in New Access and Da...
Threat Actors Target Nike, PayPal, and CelcomDigi in New Access and Data Sales The SOCRadar Dark Web Team has uncovered several significant listings in the past week, including a recruitment effort ta...
Dark Web Profile: Void Blizzard
Dark Web Profile: Void Blizzard Void Blizzard is a newly identified Russian state-sponsored cyber threat group. Also known as Laundry Bear, the group first drew attention after an attack on the Dutch ...
E-Commerce Platforms Face Rising Dark Web Threats; Admin Access and Cu...
E-Commerce Platforms Face Rising Dark Web Threats; Admin Access and Customer Data on Sale New activity observed by the SOCRadar Dark Web team reveals a growing trend of cybercriminal activity targetin...
Dark Web Profile: Interlock Ransomware
Dark Web Profile: Interlock Ransomware Interlock is a ransomware group active since late 2024, most recently gaining attention for its use of advanced social engineering tactics. Its latest technique,...
Berkeley University, Eni France, and Foremost Named in Dark Web Sales;...
Berkeley University, Eni France, and Foremost Named in Dark Web Sales; SDC Service Advertised New activity observed by the SOCRadar Dark Web team reveals an expanding ecosystem of cybercrime services ...