Powered by DarkMirror™
This week’s edition covers the latest dark web news from the past week. admin access sale, company database theft, and stealing personal data are on the rise and took their place on the headlines this week. Click here to read the last week’s edition. Here are the details of the major events that took place on the deep web this week:
Unauthorized Access Sale Detected for an Indonesian News Site on The Dark Web
On September 8, 2021, on a dark web forum monitored by SOCRadar, a vendor attempted to sell unauthorized access allegedly for an online news platform from Indonesia. The dark web vendor claimed that the victim platform had 5 thousand users and 23 thousand visitors. The vendor also stated that the buyer would have admin access to the victim platform’s WordPress panel.
PII of Forex Depositors Leaked on The Dark Web Marketplace
On September 8, 2021, on a dark web forum monitored by SOCRadar, a vendor attempted to sell databases including forex depositors. According to the vendor, there were 500 Russian depositors from brokerage companies, forex depositors from Saudi Arabia, names and phone numbers of 52 thousand depositors from Russia and Kazakhstan in three separate databases. The second database contained names, balances, total deposits, total withdrawals and phone numbers of almost 11 thousand forex depositors.
The UAE Governmental Documents on Sale on The Dark Web
On September 10, 2021, a vendor offered to sell a document database allegedly belonging to the UAE government on a dark web forum monitored by SOCRadar. The dark web post emphasized that the vendor was not the first seller, and reselling the database bought before. Allegedly, there were ID cards, personal documents and passports. The vendor put the database for $200.
Ukrainian Government’s Emails Dumped on The Dark Web
On September 10, 2021, on a dark web forum monitored by SOCRadar, a vendor claimed to have emails belonging to the Ukrainian government. According to the dark web post, the vendor had 500 MB of email data. Although it is not clear how many emails were in the leakage and how the vendor seized these emails, they were concerning the Ukrainian government and its actions in Donetsk.
Powered by DarkMirror™
Gaining visibility into deep and dark web threats can be extremely useful from an actionable threat intelligence and digital risk protection perspective. However, it is simply not feasible to monitor all sources which can be time-consuming as well as challenging. One click-by-mistake can result in malware bot infection. To tackle these challenges, SOCRadar’s DarkMirror™ screen empowers your SOC team to follow up with the latest posts of threat actors and groups filtered by targeted country or industry.
