What Are Initial Access Brokers (IABs)?
What Are Initial Access Brokers (IABs)? Cyberattacks rarely begin with encryption or data theft. They often start with a quiet exchange: one threat actor selling unauthorized access to a compromised n...
Android Root Exploit, Oracle EBS Flaw, Crypto Logins, and Cisco Access...
Android Root Exploit, Oracle EBS Flaw, Crypto Logins, and Cisco Access Posted for Sale SOCRadar’s Dark Web Team has identified several new posts on underground forums offering high-value exploits, acc...
New Alleged Leaks Hit Vodafone Egypt, SAP Israel, OKX, and T-Mobile US
New Alleged Leaks Hit Vodafone Egypt, SAP Israel, OKX, and T-Mobile US SOCRadar’s Dark Web Team has detected multiple alleged database listings this week involving high-profile companies across teleco...
Dark Web Profile: DragonForce Ransomware
Dark Web Profile: DragonForce Ransomware June 12, 2025: The blog content has been fully updated. DragonForce Ransomware has emerged as an intriguing adversary. Known for its prom...
Fusion Stealer Rises, Android 0-Day for Sale, EDF Leak Exposed
Fusion Stealer Rises, Android 0-Day for Sale, EDF Leak Exposed SOCRadar’s Dark Web Team has uncovered a series of concerning cybercriminal offerings this week, ranging from an alleged Android 0-day ex...
Top Stealer Log Telegram Channels
Top Stealer Log Telegram Channels Telegram has become a widely used tool among cybercriminals involved in the collection and trade of infostealer logs. These logs, obtained by malware designed to stea...
New Alleged Breaches: Bank Banten Customer Data, Deloitte Source Code,...
New Alleged Breaches: Bank Banten Customer Data, Deloitte Source Code, and TotalEnergies France Cybercriminal activity across the Dark Web continues to highlight the vulnerability of organizations and...
Dark Web Profile: NightSpire Ransomware
Dark Web Profile: NightSpire Ransomware NightSpire is a financially motivated ransomware group that emerged in early 2025. The group employs a double extortion strategy, encrypting victims’ data and ...
Coca-Cola and DocuSign Breaches Claimed as Insider Recruiting and Card...
Coca-Cola and DocuSign Breaches Claimed as Insider Recruiting and Card Sales Surface SOCRadar’s Dark Web Team has detected several noteworthy developments across underground forums this week. These in...
Dark Web Market: Torzon Market
Dark Web Market: Torzon Market Launched in 2022, Torzon Market is a Dark Web Marketplace that hosts over 20,000 illegal products, accessible via the TOR network. Torzon facilitates transactions in cry...
Dark Web Profile: Aquatic Panda
Dark Web Profile: Aquatic Panda Aquatic Panda is a suspected China-based threat group focused on intelligence gathering and industrial espionage. From around 2016 to 2023, the Chinese tech company i-S...
Instagram Ban Bypass, AI Identity Forgery, and Nova Ransomware Affilia...
Instagram Ban Bypass, AI Identity Forgery, and Nova Ransomware Affiliate Drive SOCRadar’s Dark Web Team has uncovered another round of cybercriminal activity across underground forums. This week’s fin...
Dark Web Profile: Silent Ransom Group (LeakedData)
Dark Web Profile: Silent Ransom Group (LeakedData) A threat group identifying itself as LeakedData emerged in mid-December 2024, claiming responsibility for attacks on at least 41 victims. Header of ...
QatarRat Tool Emerges, GST Data Sold, and LockBit Gets Breached
QatarRat Tool Emerges, GST Data Sold, and LockBit Gets Breached SOCRadar’s Dark Web Team has identified a range of notable activities across underground forums this week. Key findings include the sale...
DarkGPT, Chrome 0-Day Exploit, and Financial Data Sales Detected on Da...
DarkGPT, Chrome 0-Day Exploit, and Financial Data Sales Detected on Dark Web Dark Web forums remain active with concerning developments, as SOCRadar’s Dark Web Team identifies new threats this week ta...
Dark Web Monitoring with Open-Source Tools and Services
Dark Web Monitoring with Open-Source Tools and Services The Dark Web, intentionally hidden on the internet, is accessible only through specialized browsers or technologies. Defenders monitor it for cl...
TikTok Breach Claims, Windows 0-Day Exploit, and UK Credit Card Auctio...
TikTok Breach Claims, Windows 0-Day Exploit, and UK Credit Card Auction Identified SOCRadar’s Dark Web Team uncovered several notable threats across hacker forums this week. Among the key findings is ...
Dark Web Market: WeTheNorth Market
Dark Web Market: WeTheNorth Market WeTheNorth (WTN) is a Canada-focused Dark Web Marketplace (DWM) named after the famous Toronto Raptors slogan. Launched in 2021 after the shutdown of CanadianHeadqua...
Massive Card Leak, New Phishing Tool, and Pharma Scam Attempt Detected
Massive Card Leak, New Phishing Tool, and Pharma Scam Attempt Detected Cybercriminal offerings on dark web forums remained active this week, with SOCRadar’s Dark Web Team uncovering a wide range of th...
Dark Web Market: STYX Market
Dark Web Market: STYX Market Greed may be a timeless driver of cybercrime, but in 2025, it’s the structure, scale, and specialization of dark web marketplaces that elevate this motivation into a full-...
