What Is a Dark Web Monitoring API?
What Is a Dark Web Monitoring API? A Dark Web Monitoring API is a tool that enables organizations to automatically detect stolen credentials, leaked data, and other cyber threats hidden within dark we...
How Does Dark Web Monitoring Work? A Step-by-Step Overview
How Does Dark Web Monitoring Work? A Step-by-Step Overview Dark web monitoring helps organizations detect stolen data, compromised credentials, and brand misuse by tracking activity across hidden foru...
SSO 0-Day & Fortinet Exploits, Allianz Breach, Social Media Ban Servic...
SSO 0-Day & Fortinet Exploits, Allianz Breach, Social Media Ban Service Listed on Dark Web SOCRadar’s Dark Web Team has identified a fresh batch of alarming listings on underground forums. This we...
Dark Web Posts Advertise Access to British Firms & Data from Brazil, F...
Dark Web Posts Advertise Access to British Firms & Data from Brazil, France, and CETDIGIT [Update] July 8, 2025: Added clarification from CETDIGIT that no sensitive or financial data was exposed.*...
Dark Peep #19: IntelBroker Indicted, and Ransomware Goes Corporate
Dark Peep #19: IntelBroker Indicted, and Ransomware Goes Corporate The Dark Web never sleeps—and neither do its actors. In this edition, we explore a string of developments shaping the cyber threat la...
What Are Initial Access Brokers (IABs)?
What Are Initial Access Brokers (IABs)? Cyberattacks rarely begin with encryption or data theft. They often start with a quiet exchange: one threat actor selling unauthorized access to a compromised n...
Android Root Exploit, Oracle EBS Flaw, Crypto Logins, and Cisco Access...
Android Root Exploit, Oracle EBS Flaw, Crypto Logins, and Cisco Access Posted for Sale SOCRadar’s Dark Web Team has identified several new posts on underground forums offering high-value exploits, acc...
New Alleged Leaks Hit Vodafone Egypt, SAP Israel, OKX, and T-Mobile US
New Alleged Leaks Hit Vodafone Egypt, SAP Israel, OKX, and T-Mobile US SOCRadar’s Dark Web Team has detected multiple alleged database listings this week involving high-profile companies across teleco...
Dark Web Profile: DragonForce Ransomware
Dark Web Profile: DragonForce Ransomware June 12, 2025: The blog content has been fully updated. DragonForce Ransomware has emerged as an intriguing adversary. Known for its prom...
Fusion Stealer Rises, Android 0-Day for Sale, EDF Leak Exposed
Fusion Stealer Rises, Android 0-Day for Sale, EDF Leak Exposed SOCRadar’s Dark Web Team has uncovered a series of concerning cybercriminal offerings this week, ranging from an alleged Android 0-day ex...
Top Stealer Log Telegram Channels
Top Stealer Log Telegram Channels Telegram has become a widely used tool among cybercriminals involved in the collection and trade of infostealer logs. These logs, obtained by malware designed to stea...
New Alleged Breaches: Bank Banten Customer Data, Deloitte Source Code,...
New Alleged Breaches: Bank Banten Customer Data, Deloitte Source Code, and TotalEnergies France Cybercriminal activity across the Dark Web continues to highlight the vulnerability of organizations and...
Dark Web Profile: NightSpire Ransomware
Dark Web Profile: NightSpire Ransomware NightSpire is a financially motivated ransomware group that emerged in early 2025. The group employs a double extortion strategy, encrypting victims’ data and ...
Coca-Cola and DocuSign Breaches Claimed as Insider Recruiting and Card...
Coca-Cola and DocuSign Breaches Claimed as Insider Recruiting and Card Sales Surface SOCRadar’s Dark Web Team has detected several noteworthy developments across underground forums this week. These in...
Dark Web Market: Torzon Market
Dark Web Market: Torzon Market Launched in 2022, Torzon Market is a Dark Web Marketplace that hosts over 20,000 illegal products, accessible via the TOR network. Torzon facilitates transactions in cry...
Dark Web Profile: Aquatic Panda
Dark Web Profile: Aquatic Panda Aquatic Panda is a suspected China-based threat group focused on intelligence gathering and industrial espionage. From around 2016 to 2023, the Chinese tech company i-S...
Instagram Ban Bypass, AI Identity Forgery, and Nova Ransomware Affilia...
Instagram Ban Bypass, AI Identity Forgery, and Nova Ransomware Affiliate Drive SOCRadar’s Dark Web Team has uncovered another round of cybercriminal activity across underground forums. This week’s fin...
Dark Web Profile: Silent Ransom Group (LeakedData)
Dark Web Profile: Silent Ransom Group (LeakedData) A threat group identifying itself as LeakedData emerged in mid-December 2024, claiming responsibility for attacks on at least 41 victims. Header of ...
QatarRat Tool Emerges, GST Data Sold, and LockBit Gets Breached
QatarRat Tool Emerges, GST Data Sold, and LockBit Gets Breached SOCRadar’s Dark Web Team has identified a range of notable activities across underground forums this week. Key findings include the sale...
DarkGPT, Chrome 0-Day Exploit, and Financial Data Sales Detected on Da...
DarkGPT, Chrome 0-Day Exploit, and Financial Data Sales Detected on Dark Web Dark Web forums remain active with concerning developments, as SOCRadar’s Dark Web Team identifies new threats this week ta...
