RESOURCES
Expert Insights on Darknet Intelligence & Cybersecurity Trends
ZeroForums, a new Chinese-language dark web forum with a design that closely copies well-known cybercrime forums has emerged. DarkOwl’s has been monitoring since its launch.
Find out how recent PHP vulnerabilities affect the Darknet, triggering site take-downs and critical fixes worldwide.
This blog features highlights and screenshots from the DarkOwl product team on updates the team has made in Q3!
DarkOwl analysts track the Nexus leak: how a 160M-record breached ID database spread from Exploit to BreachForums, DarkForums, and Telegram in two weeks.
AI is changing the game in ransomware. Read more to learn how this technology impacts cybersecurity and defense strategies today.
In this blog series, we explain and simplify some of the most commonly used terms. In this edition, we dive into malware as a service.
Uncover the relationship between GDPR and dark web investigations, ensuring your analysis remains compliant with regulations.
This blog series highlights the top threat intelligence articles that our readers found the most interesting this month.
For Cybersecurity Awareness month, DarkOwl is committed to sharing research, trends and industry news from our analysts.
ShinyHunters claims to have hacked the FBI, threatening to release sensitive data on thousands of FBI staff. Learn more.
In this blog series, we explain and simplify some of the most commonly used terms. In this edition, we dive into encryption.
DarkOwl recap and insights from ISS World Asia on AI-powered investigation platforms and their impact on OSINT and law enforcement.
UK fintech Revolut confirmed a breach of sensitive customer data, which quickly appeared on the darknet. DarkOwl breaks down what happened
Iran-linked hackers disrupted a UK power plant and water systems across 12 US states this summer. This wasn’t espionage — it was a demonstration.
In this blog series, we explain and simplify some of the most commonly used terms. In this edition, we dive into the CIA Triad.
Cybersecurity is a business risk, not just an IT issue. Learn why leadership, awareness, and proactive measures matter.
Understand the significance of dark web pricing intelligence for enterprise security. Discover what your data is worth in 2025-2026.
Explore ExfilSquad: A new data extortion group allegedly responsible for breaches of high-profile victims across multiple countries.
In this blog series, we explain and simplify some of the most commonly used terms. In this edition, we dive into ransomware leak sites.
As tensions between the US and Iran continue, DarkOwl observes an increase in online threats targeting the life of President Donald Trump.
Your Help Desk is a Target: Using Darknet Intelligence to Get Ahead of AI-Powered Social Engineering
Delve into Stealer Logs: silent thieves of data that power modern cybercrime without alerting users to their presence.
Explore how darknet monitoring serves as a critical tool for executive risk management and enhances overall corporate security.
This blog features highlights and screenshots from the DarkOwl product team on updates the team has made in Q2!
DarkOwl Vision uncovers Dark_Alpha, an access broker selling FortiGate credentials tied to the FortiBleed exploit across 194 countries.
Uncover the hidden dangers of gaming as Discord and Steam turn into platforms for cybercrime and malicious activities.
Explore DarkOwl’s busiest year ever at ISS World Europe 2026, showcasing key innovations and engaging with industry leaders.
Learn essential ransomware negotiation tactics and see real-life examples of how organizations can minimize risk and damage.
Explore Marketplace Spotlight: DarkBay and its role in the ever-changing landscape of darknet marketplaces.
In this blog series, we explain and simplify some of the most commonly used terms. In this edition, we dive into man-in-the-middle attacks.
DarkOwl mapped 53 darknet markets in Q1 2026, uncovering five structural clusters and why market reputation is a misleading indicator of what’s actually being sold.
Explore the indictment of Mohammad Al-Saadi and uncover the operational model behind HAYI’s attacks and media strategies.
DarkOwl analyzed 7,314 darknet vendors across 53 markets to reveal what fingerprints, username reuse, and specialization patterns expose.
Today’s social engineering doesn’t look suspicious. DarkOwl analysts break down what changed and why detection is spotting the subtly off.
In this blog series, we explain and simplify some of the most commonly used terms. In this edition, we dive into basic web application attacks.
Explore the findings of a study on the Arabic darknet and its implications for law enforcement and cybersecurity analysts.
This blog explores several well-known data theft extortion incidents, examining how they were carried out and how organizations responded.
Threat Actor Spotlight on the Handala Hack Team explores a pro-Palestinian group linked to the evolving nature of modern cyber warfare.
DarkOwl webinar focuses on darknet investigations for government and OSINT use cases for federal, state, and local agencies.
Handala Hacking Team and Ashab al-Yamin activity shows growing overlap between cyber operations, influence campaigns, real-world incidents.
This blog explains what CIRCIA requires, which organizations are subject to compliance, and how DarkOwl’s dark web intelligence platform positions covered entities to meet their obligations proactively—before an incident ever occurs.
In this blog series, we explain and simplify some of the most commonly used terms in cybersecurity. In this edition, we dive into push bombing.
This blog features highlights and screenshots from the DarkOwl product team on updates the team has made in Q1!
Explore Harakat Ashab al-Yamin al-Islamia: is it a new distinct organization or part of a broader Iranian-Aligned network?
Ransomware’s evolution accelerated in 2025, transforming into a highly industrialized, fast-moving cyber threat impacting organizations.
DarkOwl explores some favorite movies and shows about cybercrime; what they got right and wrong portraying hackers and cyber activities.
It’s no joke. This April Fool’s Day, we explore new ways threat actors are trying to “fool” you.
In this blog series, we explain and simplify some of the most commonly used terms. In this edition, we dive into ransomware as a service.
Explore some famous dark web marketplace seizure and discover how law enforcement dismantles them to combat illicit activities.
Learn about the implications of RAMP’s shutdown. What comes next after the forum’s seizure and its operators?
Explore Dark Web reactions to the Israel–Iran conflict and understand how online communities are responding to these events.
This blog breaks down how the affiliate model works, why it persists, and which ransomware “brands” researchers most often associated with affiliate-driven operations in 2025.
Learn the 7 early warning signals before a cyberattack. Discover how to spot indicators that can prevent a major incident.
This blog explores the key ethical and legal tensions, maps them against the DOJ’s (Department of Justice) guidance, and offers practical considerations for responsible dark web research.
In this blog, we explore how how information security and cybersecurity differ in scope, focus, and application.
Stay informed about Valentine’s Day scams. Learn how to protect yourself and avoid falling victim to romance fraud.
In this blog, we’ll review some of the most impactful nation-state offensive cyber operations in the modern era and how they illustrate this escalating trend of warfare.
This blog features highlights and screenshots from the DarkOwl product team on updates the team made in Q4!
FBI seizes the notorious darknet forum RAMP4U, a significant site for ransomware discussions among cybercriminals.
Explore Cyber Resolutions: 5 Habits for a Safer 2026 and strengthen your organization’s cybersecurity practices today.
Explore the trends to look out for in 2026 as cyber risks evolve and cyber security faces new challenges this year.
Explore malicious models, phishing risks, and global defense strategies.
Explore Threat Actor Spotlight: Scattered Lapsus$ Hunters, a new hybrid group reshaping the cybersecurity landscape since 2025.
Explore the turmoil of 2025 – A Year of Constant Upheaval on the Dark Web with major market and forum changes that shocked many.
Thanks to our analyst and content teams, DarkOwl published over 100 pieces of content in 2025. In this blog, 10 of the top are outlined.
With 2025 at a close, our content and marketing teams reflect on exciting events, trends and changes the DarkOwl team experienced this year.
Explore The State of Darknet Marketplaces in 2025. Discover leading platforms and trends in listings and vendor activities.
Explore the truth behind holiday shopping on the dark web. Common myths debunked and the realities of illicit marketplace scams revealed.
Explore how darknet vendors choose shipping carriers & learn what the patterns reveal about trust, risk, and strategy in illicit marketplaces.
Cyberattacks on universities are rising. Learn why higher education is vulnerable and how institutions can protect themselves.
Discover how cybersecurity experts name threat actors like Cozy Bear and Lazarus Group and why naming matters.
In this series, DarkOwl was selected as the sole Darknet technology to assist the Hunters in their London HQ.
This blog provides an overview of prevalent scams and guidance on how consumers can protect themselves during their shopping activities.
In this blog series, we explain and simplify some of the most commonly used terms. In this edition, we dive into IoAs.
This blog aims to shed light on Discord’s ecosystem and answer some of the questions you may be asking yourself.
Using a dataset from far-right Telegram channels, DarkOwl and Mind Intelligence Labs take a look.
This Halloween we explore the “scary tricks” cyber criminals use to trick you into clicking on phishing emails and other attack types.
In an increasingly hostile cyber landscape, organizations need visibility into the tactics and techniques used by threat actors.
In this blog, we explain how powerful C2 frameworks can be in maintaining stealthy operations for both red teams and cybercriminals.
This is a field-tested guide to cyber hygiene that treats all aspects of your life with the reality that they are all connected.
We explore the evolving role of AI amongst threat actors and investigators.
In this blog series, we explain and simplify some of the most commonly used terms. In this edition, we dive into DDoS attacks.
In this webinar, DarkOwl and pwn.legal unpack the evolving cybersecurity regulatory landscape across the UK and EU.
This blog looks at where pharmacies on the darknet are found and the platforms they use to move drugs outside the law.
To understand risks of AI, let’s look at how threat actors are adopting AI where the damage is visible: phishing, ransomware, stealer logs.
In this blog, let’s explore the subtle differences between antivirus and antimalware and if you need both.
The dark web is not just a place for global cybercriminal networks. Understanding what is being said about your city can mean stopping crime.
In this blog series, we explain and simplify some of the most commonly used terms. In this edition, we dive into credential stuffing.
In honor and celebration of Women’s Equality Day, DarkOwl sits down for a candid conversation.
As we prepare for the school season, let’s cover how to keep kids safe on the internet.
In the ever-evolving realm of cybersecurity, DEF CON shines as a gathering point for innovation. Let’s review highlights from this year.
Esports platforms, streamers, and tournaments have become prime targets for cyberattacks. Let’s explore why.
DarkOwl explains the three types of internet and the origins and workings of Tor.
DarkOwl examines popular political far-right Telegram channels to determine which sentiments have been most prevalent within these groups.
In this blog series, we explain and simplify some of the most commonly used terms. In this edition, we dive into indicators of compromise.
In this blog we will explore what UK councils are and how they have been subjected to cyber attacks in recent times.
In this blog series, we aim to explain and simplify some of the most commonly used terms. In this edition, we dive into data harvesting.
DarkOwl continues to monitor the dark web and particularly Telegram in relation to the Iran and Israel conflict.
Law enforcement agencies have taken down Archetyp Market, one of the most active and profitable dark web drug markets of the past five years.
DarkOwl has attended ISS for the last 10 years as it is an effective medium to help reinforce and grow our international presence.
This blog explores traditional money laundering stages, how they’ve transformed on the dark web, and more.
Tensions are rising in the Middle East. Let’s review recent Israel-Iran airstrikes, Iran’s retaliation, and the claims of hacktivist groups.
In the cybersecurity world, not all hackers wear the same hat. Let’s take a look at some different hacker roles.
Let’s break down why company mentions on the darknet matter and what you should be watching for.
Summary of the digital whistleblower landscape, outlining the role of the dark web and examining some noteworthy whistleblower platforms.
What are government agencies and investigators doing to regulate, monitor, and stay ahead of dark web-enabled cybercrime?
Chances are you yourself have been breached. Here we tell a quick personal story of exactly this: an acquaintance getting breached.
Thanks to AI and deepfake technology, pretending to be someone else has become disturbingly easy—and incredibly convincing.
In mid-April 2025, BreachForums went offline, causing copycat domains to appear, triggering widespread confusion in the dark web community.
This blog aims to provide a comprehensive overview of doxing, its implications, and strategies to safeguard against it.
In this blog we review the history of 4chan, what it is used for and by who and review the recent activity which led to the brief downtime.
In this blog, we shine a light on the beneficial aspects of the darknet and explore the sites and services that make a positive impact.
Darknet data is a goldmine of intelligence, requiring robust machine learning techniques to extract meaningful insights.
Telegram is implementing trust and safety measures aimed at making the platform safer for users and curbing cybercrime.
Semiconductor companies are a prime target for cybercriminals, nation-state actors, ransomware groups – many of whom operate on the darknet.
Since the Jan 20 pardoning, DarkOwl has observed rhetoric and conspiracy theories circulating within Jan 6-affiliated online groups.
Last night, armed only with coffee, bravery, and an excessive number of browser tabs open, I ventured deep into the legendary dark web.
The dark web hosts numerous vendors claiming to offer deeply discounted travel bookings. Let’s take a look.
DarkOwl analysts take a deep dive into B1ack’s Stash marketplace, how it operates and what the reaction to the site has been on the dark web.
Gain insights into gathering, analyzing, interpreting OSINT data, focusing on applying dark web intelligence to solve challenges.
In this blog we explore Terrorgram – the origins of the group, how they operated and the current status of the organization.
In this blog, we explore how Wi-Fi metadata can reveal a person’s commonly visited locations.
In this blog series, we aim to explain and simplify some of the most commonly used terms. In this edition, we dive into Zero-Day exploits.
We explore changes to Telegram, what effect DarkOwl analysts are seeing in response and what impact we expect to see in the future.
In this blog we explore some of the more notable law enforcement activities and arrests of 2024 in the cyber security world.
Executives are increasingly targeted by activists of all types, posing significant threats to them and risks to their organizations.
We examine how romance scams and pig butchering are mentioned across the darknet and look at types of data scammers use to identify targets.
Analysts demonstrate how to investigate and pivot on front company infrastructure to analyze possible front companies and their employees.
To celebrate Clean Out Your Computer Day, we’re providing a roadmap to help you get started with a comprehensive digital clean-up.
In this blog, we will explore some of the different networks that are available and how they are used by criminals.
In this blog we review the ransomware groups who were most active and the most significant ransomware attacks of 2024.
This Data Privacy Day, take a moment to reflect on your digital habits and make a commitment to safeguarding your privacy.
There are several activities that take place on the dark web that allow users to illegally access shows, music, movies. Let’s take a look.
Let’s explore the discussions that are being held on the dark web relating to the inauguration.
Drawing on industry expertise, this post identifies seven major threats and trends expected to shape the darknet in the coming year.
As we look back at 2024, the cybersecurity landscape has become ever more complicated and perilous. There are dark lessons to learn for 2025.
Thanks to our analyst and content teams, DarkOwl published over 115 pieces of content in 2024. In this blog, 10 of the top are outlined.
With 2024 at a close, our content and marketing teams reflect on exciting events, trends and changes the DarkOwl team experienced this year.
It is vital that buyers be cognizant of the types of holiday-related fraud often observed during this season.
Recap of DarkOwl’s attendance and experience at the Black Hat Middle East & Africa conference in November.
Overview of potential impacts of data leaks and breaches on executive security and importance of monitoring for reputational damage.
National App Day highlights the transformative role apps play in our lives but it’s crucial to address the challenges they pose.
Leading organizations are leveraging dark web intelligence to strengthen their security posture and protect their assets.
Explore Computer Security Day through the lens of the dark web, highlighting the critical need for vigilance.
Data leaks have become a part of life, affecting nearly everyone. Here we explore what you should do when this happens.
With an increase in online shopping, especially post-pandemic, the risks of falling victim to Black Friday scams have never been higher.
In this Darknet Marketplace Snapshot, our analysts provide insight into darknet marketplaces. Here we feature MGM Grand Market.
What MSP and MSSPs should be monitoring for on behalf of their customers.
DarkOwl analysts closely monitor darknet sites and chat platforms around the November 5, 2024 American presidential election.
Like Halloween, the darknet blends curiosity, excitement, and potential risks. Understanding the darknet is essential.
In this blog, DarkOwl analysts review some of USDoD’s activities and what lead to his arrest this October.
DarkOwl analysts explore the disinformation landscape on the dark web in the context of the upcoming U.S. presidential election.
Phishing-related attacks are a highly effective method for initial access. It’s crucial to understand how these attacks are evolving.
In this blog series, we aim to explain and simplify some of the most commonly used terms. In this edition, let’s dive into CVEs.
In this Darknet Marketplace Snapshot, our analysts provide insight into darknet marketplaces. Here we feature Dark Empire Market.
Explore similarities of the darknet and self-healing networks to inform how the dark web will evolve.
Understanding social engineering trends is crucial for protecting yourself and your company in a complex digital landscape.
It seems like every day a report is released detailing a data leak. In this blog, we explore the collection process of leaks.
This blog reviews DarkOwl team highlights from the Intelligence and National Security Summit hosted by INSA and AFCEA.
In this blog series, we aim to explain and simplify some of the most commonly used terms. Let’s dive into brute force attacks.
Telegram’s CEO was arrested by French police on August 25. DarkOwl analysts review the aftermath on the darknet.
In honor and celebration of Women’s Equality Day, DarkOwl sits down for a candid conversation with two of our employees.
DEF CON provides a window to emerging threats, technologies, and the landscape of cyber threats.
DarkOwl analysts are monitoring deep and dark web actors for mentions of the Democratic National Convention being held this week.
This blog points out some of the early examples and known vulnerabilities of LLMs and where they could lead us in the not-so-distant future.
In this blog, we explore the rise of QR code fraud and how malicious actors are taking advantage of QR codes in public places.
DarkOwl’s Darknet Marketplace Snapshot series provides analyst insight into darknet marketplaces. This edition features Ares Market.
While the concept of humans being the weakest link in cybersecurity is undeniable, it is not always YOU that is the weakest link.
To celebrate World Emoji Day, this blog highlights some of the emojis used in illicit and underground activities.
In this blog, DarkOwl analysts take a deep dive into ShinyHunters’ activities and their association with the dark web forum BreachForums.
DarkOwl’s Director of Intelligence explores how the darknet expands the scope of information available to researchers and analysts.
This blog highlights hacking in gaming communities and the infiltration of violent extremist ideologies into certain gaming communities.
High-level look at conversations threat actors are having and tools to carry out their mission using malicious techniques and AI tools.
This blog covers top highlights from the DarkOwl team’s presence and sponsorship at ISS World Europe in Prague.
Scattered Spider have been attributed to several high-profile attacks. Here we review recent activity and arrests.
DarkOwl analysts extracted a download of StarFraud chat content. This blog was written with a mix of AI analysis and analyst review.
In this blog, DarkOwl analysts explore the history of the site Doxbin, who is behind it, the impact on the victims, and alleged recent activity.
Fed Gov Today, sits down with Mark Turnage, to discuss OSINT in government.
In this blog series, we aim to explain and simplify some of the most commonly used terms. In this edition, let’s dive into APIs.
In this blog, DarkOwl recaps our presence and experience at RSAC, covering booth activity, meetings and new product announcements.
DarkOwl analysts explore info stealers from an engineering perspective to explore functionality, behaviors, and technical characteristics.
In this blog, DarkOwl analysts summarize WebTunnel – what it is, how it is implemented, and the impacts it has.
In this blog, DarkOwl analysts review recent terrorist attacks from IS and the groups activity on Telegram and Rocket.Chat.
At around 8am PST on May 15 2024, BreachForum was seized by the FBI. This blog covers past, present, and possible future of the marketplace.
Recap of DarkOwl’s presence at GISEC Global, where attendees come together to lead cybersecurity transformations across sectors and nations.
DarkOwl Analyst joins Authentic8’s Needle Stack Podcast to discuss dark web research and all its facets.
Insurance carriers are not immune from cyber attacks and credential loss. In this blog, we explore this exposure.
In this blog, DarkOwl analysts summarize what are arguably the biggest law enforcement actions of 2023 globally.
In this blog, we explore some of the more complex CAPTCHAs we have seen threat actors using on darknet sites. Could you solve them?
Recap of DarkOwl’s presence at The International Cybersecurity Forum in France, and highlights from the event.
DarkOwl analysts review activity of cyber criminals to highlight some of the activities cyber criminals are participating in this tax season.
The conflict between Israel and Hamas rages on, resulting in physical, digital, and hybrid events. This blog highlights some of these.
This April Fool’s Day, we explore some of the ways that cyber actors could use Artificial Intelligence to fool their victims.
This session dives into the big 4 cyber adversaries.
In this blog, we round up ransomware groups activity, key ransomware trends, and notable events that we saw in 2023.
DarkOwl analysts regularly follow “darknet threat actors” that openly discuss cyberattacks. In this edition, we analyze SCATTERED SPIDER.
In honor of enhancing forum structuring, our marketing team sat down with DarkOwl’s product and client engagement teams to chat.
Recap of DarkOwl’s presence at ISS World Middle East & Africa in Dubai, where cyber professionals gather from all around the world.
Learn the role of darknet data in OSINT investigations and why it plays an essential role in these investigations.
LockBit became a target of law enforcement last week. In this blog, we dig into what happened and what has happened since.
This blog recaps the dark web’s reaction to the so called “Mother of all breaches” and the status of it now.
This year, we make researching romance scams a yearly tradition as we explore some of the recent activities relating to these scams.
Learn why digital undergrounds are key in obtaining crucial data for government agencies and law enforcement.
DarkOwl examines cyber threats surrounding the Super Bowl coming up, including exposed credentials and chatter around malware.
Iran continues to gain sophistication in Cyber. This webinar covered its history and why Iran needs to be taken seriously as a digital threat.
DarkOwl analysts review threats of 2023 and review the most persistent threats likely to continue, grow in sophistication and impact 2024.
This blog features highlights and screenshots from the DarkOwl product team on updates the team has made in Q4!
Thanks to our analyst and content teams, DarkOwl published over 110 pieces of content in 2023. In this blog, 10 of the top are outlined.
With 2023 at a close, our content and marketing teams reflect on exciting events, trends and changes the DarkOwl team experienced this year.
Fraud is one of the most prevalent activities on the darknet. This blog explores some of the types of fraud DarkOwl analysts have observed.
This blog reviews some of the notable cyberattacks that have occurred in the Israel Hamas conflict and the responsible threat actor groups.
DarkOwl has observed an increase in stealer log data available on the darknet. This blog breaks down what stealer logs are and how they work.
In this webinar recording, DarkOwl guest shares his personal story about a family member being targeted online.
DarkOwl analysts look at “Black Friday” dark web deals and review types of fraud typically perpetrated against e-commerce companies.
In this blog, we cover the latest identified trends in nefarious animal activity on the dark web and adjacent platforms.
This blog explores Iran’s recent activity, security posture, and response to the conflict between Hamas and Israel.
Mark Turnage and Wasim Khaled sat down to discuss emerging trends with darknet adjacent sites and narrative attacks.
This blog introduces Actor Explore, and why tracking threat actors can help your organization prepare for future cyber attacks.
In this webinar recording, DarkOwl CEO and Socialgist CRO chat about the latest trends and innovations in the cybersecurity space.
In honor of Halloween, this blog explores some of the creepy and scary things we have found being sold on the dark web.
In this blog, DarkOwl analysts examine some of the groups conducting defacements as the Israel and Gaza conflict continues.
DarkOwl participated in OsmosisCon to further educate the OSINT community on how dark web data plays an essential role in investigations.
23andMe has had their data shared on various dark web marketplaces and Telegram, partly shared in response to the Israel and Gaza conflict.
DarkOwl recap of ISS World Latin America in Panama where cybersecurity professionals from all over Latin and South gather to learn and share.
In this blog, DarkOwl analysts outline several examples of IDN homoglyphs, all including an example screenshot of the fake website.
DarkOwl analysts have assembled a list of Telegram channels commenting on the current conflict in the Middle East.
DarkOwl analysts review Hamas linked Telegram channels to identify if there was any change in their activity preceding the assault.
In honor of World Mental Health Day, DarkOwl announces the start of the “Mental Health Strategies for OSINT Professionals” project.
DarkOwl analysts provide information relating to known cyber groups active on Telegram and how they have reacted to the invasion.
Review of recent posts from 3 “Z blogger” Telegram channels to understand how this content has recently been utilized as a propaganda motif.
DarkOwl analysts explain what bullet proof hosting is and show some of the latest trends observed in 2023 so far.
Interview with DarkOwl analysts to understand their backgrounds, why they love cyber, and some tips and tricks for new analysts.
DarkOwl recap of ISS World Asia in Singapore where cybersecurity professionals from all over Asia gather to learn and share.
In honor of Women’s Equality Day, DarkOwl looks at workforce equality efforts within the industry and our company.
DarkOwl analysts outline chatter on the darknet and darknet adjacent sites and will continue to do as developments occur.
AI has become a popular topic with the launch of ChatGPT and Bard, here DarkOwl analysts explore how it is being used by cyber criminals.
The DarkOwl team sent a number of analysts to DefCon. This blog outlines some highlights from this year’s event, from our analysts eyes.
DarkOwl recap of Black Hat USA 2023, highlighting excitement throughout the week in Las Vegas with the intelligence community.
Ransomware is quickly evolving, and it is imperative to pay attention to its trends. This blog outlines those top trends.
Example report samples of what the DarkOwl analyst team researches and reports on for darknet services clients.
In this blog, we will cover the importance of darknet data and how it expands the scope of information available to researchers and analysts.
Review of CL0P leveraging a zero-day exploit against MOVEit, which has led to huge data theft and extortion attacks.
This blog highlights events and key takeaways and summarises from our darknet workshop, the INSA conference, and the G-20 Conference.
This blog features highlights from the product and collections teams on updates the DarkOwl teams made in Q2!
In this webinar recording, DarkOwl CEO and Socialgist CRO explain how darknet data and social media data go hand in hand.
DarkOwl’s darknet intelligence analyst explores how the darknet can be used in threat intelligence and cybercrime investigations.
Interactive timeline highlighting key developments in the history of the darknet, a haven for criminal activity.
DarkOwl analysts monitor activity of Killnet, threats to the European financial system and identify a link between Killnet and Anonymous Sudan.
DarkOwl’s Darknet Marketplace Snapshot series provides analyst insight into darknet marketplaces. This edition features Styx Market.
This blog covers highlights from DarkOwl’s presence at ISS World Europe in Prague and patterns in the space.
DarkOwl’s CBO and Resilience’s Head of Threat Intel discuss darknet data and the tools protecting business information.
This blog series highlights the top threat intelligence articles that our analysts are reading this month.
Netflix’s newly implemented password policy is receiving widespread complaints for corporate greed, but what about the cybersecurity angle?
DarkOwl analysts cover leak sites that are dedicated to posting leaked data and are not affiliated with known ransomware groups.
DarkOwl’s CTO explains how to potentially predict cyberattacks and why modeling risk is essential for all organizations of any size.
Highlights from AFCEA’s TechNet Cyber flagship event and how darknet data is essential for cybercriminal investigations.
This blog dives into the difference between scams and fraud – two of the most popular threat vectors on the darknet.
This week we celebrated World Password Day by looking at some trends our analysts are seeing around passwords on the darknet.
In honor of the launch of our newest product, DarkSonar API, our marketing team sat down with DarkOwl’s product team to learn more.
Major cybercrime arrests show the breadth of what the true identity of a cybercriminal can be. DarkOwl rounds up notorious arrests of 2022.
With cyberattacks on the rise, organizations need better intelligence to enable them to model risk. In this blog, we introduce DarkSonar.
Recent results from DarkOwl Vision show that tax fraud continues to be a prominent scheme on the darknet, deep web and chat platforms.
This blog features highlights from the product and collections teams on updates the DarkOwl teams made in Q1!
Recap of DarkOwl’s presence at The International Cybersecurity Forum in France, where attendees focus on digital security and trust.
Genesis Market remains online on the darknet despite FBI seizures of its surface web domains.
DarkOwl and GitGuardian CEOs reveal The State of Secrets Sprawl, the most extensive analysis of secrets exposed in GitHub and beyond!
We analyzed 1,407 dubious emails from the past year to identify trends in the world of phishing.
In this blog, we round up ransomware groups activity and introduce the new and emerging RaaS groups observed operating on the darknet today.
DarkOwl outlines darknet research contributions to the “State of Secrets Sprawl 2023” report by GitGuardian.
Our analysts are monitoring dark web chatter during the fallout of BreachForums after its admin was arrested earlier this week.
DarkOwl analysts take a look at the dark web exposure of several popular E-Learning companies and why they may be a target.
Recap of DarkOwl’s presence at Digipol in Hyberbad, India, where law enforcement and defense agencies gather from all over the country.
CEOs of Skopenow and DarkOwl share their insights on emerging threats and the latest OSINT tools and techniques to detect and prevent them.
In the year since Russia invaded Ukraine, a global cyberwar has transformed the complex landscape of hacktivists and digital threat actors.
In honor of this Valentine’s Day, DarkOwl analysts shed light on romance scams and the role the darknet plays in this type of fraud.
Recap of DarkOwl’s presence at CyberTech Global in Tel Aviv, where cyber professionals gather from all around the world.
With the Super Bowl around the corner, our analysts turn to the darknet to take at look at the cyber threat landscape surrounding the event.
In honor of data privacy week, our analysts shed some light on what data privacy is, why it is important and the role the darknet plays.
DarkOwl analysts cover some of the most popular methods used by cyber criminals for retail fraud as seen in criminal underground networks.
In this blog, learn how API Security professionals can benefit from insights into threat actor activity and TTPs on the darknet.
Thanks to our analyst and content teams, DarkOwl published over 100 pieces of content in 2022. In this blog, 10 of the top are outlined.
With 2022 at a close, our content and marketing teams reflect on exciting events, trends and changes the DarkOwl team experienced this year.
Recap of DoDIIS, one of the premier gatherings of threat intelligence technology companies that service national defense initiatives.
Learn more about the ‘darknet adjacent’ chat platforms, such as IRC, Telegram, and qTox, that are often used by darknet cyber criminals.
DarkOwl analysts outline the top commercial darknet use cases and detail real-world applicative use cases
This blog covers motivations and techniques of combolist cracking and credential stuffing attacks and explores related darknet communities.
We use the internet every day, but do we understand it? This blog outlines the differences between the surface web, deep web and darknet.
Our researchers provide short-form insight into a variety of darknet marketplaces. This edition features OMG!OMG! market.
This webinar discusses how API Security professionals can benefit from darknet data to form a full understanding of malicious TA TTPs.
This research looks at the overlap and potential connections between the spheres of arms, drugs, and human trafficking and sales on the darknet.
David Alley of DarkOwl FZE and Ivan Kravstov of Social Links dive into the topic of harnessing OSINT to expose illegal trade on the darknet.
DarkOwl analysts take a closer look some of the most popular cybersecurity threats and threat actor attack vectors discussed on the darknet.
DarkOwl analysts regularly follow “darknet threat actors” that openly discuss cyberattacks. In this edition, we analyze Bjorka.
DarkOwl and Cowbell cover darknet risk and how Cowbell uses darknet data to generate a dark intelligence scores for policyholders.
For Cybersecurity Awareness Month, we compiled a tactical list of best security practices for darknet investigators.
For Cybersecurity Awareness month, DarkOwl will share resources that touch on safety best-practices and key trends in the global cybersphere.
DarkOwl joins Hybrid CoE to discuss how cyberattacks against industrial control systems are on the rise and the challenge to protect them.
DarkOwl analysts provide insights and analysis from the darknet on how tensions between China and Taiwan are impacting the cyber underground.
This darknet marketplace spotlight looks at Exchange Market, which offers goods ranging from “tricks to control women,” weapons, RATS & more.
DarkOwl analysts provide insights and analysis on the dark web digital underground’s reaction to China and Taiwan’s political tensions.
When considering the notion of peace, especially during this time of heightened combativeness, we turned to one of our darknet analysts.
DarkOwl participated in ISSW Asia to further educate the international intelligence community on how threat actors on the darknet are evolving in their use of new tools and methodologies.
Upcoming research from DarkOwl displays an alarming number of threats on the darknet and deep web that could effectively target and compromise Critical Infrastructure.
DarkOwl and Symbol Security discuss the darknet, cyber surveillance, their partnership, and why darknet data is an essential part of Cybersecurity programs in the SMB market.
DarkOwl analysts outline top use cases for intelligence agencies, law enforcement, and government, where darknet data often plays a critical role.
DarkOwl analysts review the domain of risk, taking a closer look at the threats corporations and individuals face and how risk is calculated and mitigated.
The DarkOwl team is actively tracking the fallout from Russia’s invasion of Ukraine as there are ripples across the global cyber space.
Using DarkOwl Vision, investigators are able to collect intelligence and data to compile evidence and solve complex crimes.
We review how cyber liability insurance is not a substitute for solid corporate network security protocols, cyber insurance policy exclusions and examples of the insurance industry being targeted.
In honor of National Non-Profit Day, we are excited to highlight a couple of our non-commercial organizational partners that we are extremely proud to support.
Interactive Timeline: Key cyber operations conducted by leading law enforcement groups on the darknet.
Research into escrow-enabled decentralized marketplaces offering drugs, goods, and services claiming to be affiliated with the Sinaloa Cartel.
Ukraine’s call for help sparked off the first ever global cyberwar. This webinar and transcription looks at what we have learned from the cyberwar to date.
Here are some of the key intelligence agencies, government groups, and law enforcement organizations that contribute to policing the darknet through targeted cyber operations.
Cyber insurance is an increasingly popular topic across the information security community, as the frequency of attacks against organizations has steadily increased in recent years.
DarkOwl employs a modified model of “Big Data” often depicted by the “V’s” of Big Data when providing customers darknet data.
In celebration of National Video Game Day, our analysts take a closer look at the intersections between gaming, streaming and the darknet.
DarkOwl analysts observe a noticeable volume of information and sales related to medical abortions materialize in darknet marketplaces.
CTO of DarkOwl discusses the challenges and considerations that must be made when examining dark web data and modeling cybersecurity risk.
DarkOwl CTO recaps his experience at OnRamp Insurance and his panel discussion on Cybersecurity within Insurance.
DarkOwl Analysts regularly monitor the darknet for new or prominent cyber groups. This spotlight features the criminal gang, SiegedSec.
In this blog, DarkOwl examines recent activity of ransomware threat actor group, Conti.
Our Director of Product Technology, continues to innovate new products that illuminate critical areas of the darknet. We spoke with Sarah to get the latest on DarkOwl’s new product, Ransomware API.
Review of how sensitive server-side access credential data are circulated and sold across darknet marketplaces and communities.
Information stealers can be used by cybercriminals to commit identity theft and network compromise. Key characteristics here.
DarkOwl has been actively monitoring mentions of data ‘leaks’ related to the global cyberwar led by the hacktivist collective, Anonymous.
This blog discusses how DarkOwl’s Vision App, Search API, Entity API can be utilized to protect corporate brand reputation and value.
In honor of World Password Day, our analysts have compiled statistics based on email address and password entities available in the DarkOwl Entity API.
DarkOwl tracks two new RaaS groups, Blackbasta and Onyx, that appeared at the end of April.
This blog breaks down how data from the darknet can be used to formulate actionable Darknet Intelligence (DARKINT).
Learn how DarkOwl’s darknet intelligence platform plays a critical role in how Blackpanda supports customers.
DarkOwl has evidence that darknet criminals are committing tax fraud – exploiting the IRS with offers for ‘refund methods’ for sale in fraud communities.
The German BKA announced they have successfully shutdown one of the largest Russian markets on the darknet: Hydra.
DarkOwl reviews the latest evolution of RaidForums after it was reportedly seized by authorities.
Review of darknet risks associated with the compromise of Version Control Systems and other software supply chain version control systems.
DarkOwl analysts review activity across ransomware as a service (RaaS) gangs since the invasion of Ukraine.
DarkOwl monitors the darknet as the conflict in Ukraine ripples through Europe impacting the global economy and international partnerships.
In December 2021, DarkOwl witnessed increased activity on the darknet regarding the cybercriminal gang known as LAPSUS$.
Ramesh Elaiyavalli, CTO, presents a fresh perspective about the critical intersection between the darknet and big data.
Our analysts identified a significant quantity of Havana Syndrome-related information across numerous sources in the underground.
Unusual darknet marketplace activity over the last month have some users suspecting there were potential mass exit scams or seizures.
DarkOwl analysts have performed a review of key darknet-oriented security events from the past year, and provided a predictive forecast.
The Tor Project announced that in October it would be ending support for its legacy v2 domain naming scheme.
The Conti group posted public remarks about a recent Reuter’s article detailing US Government’s collective actions to take down the REvil ransomware group.
DarkOwl determined that since returning, REvil’s reputation was in jeopardy and darknet users suspected the group had been compromised by the FBI.
DarkOwl discovers a cyber-criminal group offering to hack hospitals located across the EU to access and falsify vaccination records for willing buyers on the darknet.
DarkOwl’s historical archive of darknet marketplace data provides a unique opportunity to look-back and compare the AlphaBay Market.
DarkOwl’s unparalleled reach into the Darknet Illuminates Threat To IoT as Realized with Recent CCTV Attack on Prison Security System. […]
To learn more about the technology habits of ransomware operators, DarkOwl analysts conducted a brief survey of content issued by […]
Since the beginning of July, information security researchers who have been keeping up with the darknet ransomware community have been […]
Ransomware as a service (RaaS) gangs readily use darknets like the Tor Project for coordinating their attacks. DarkOwl analysts frequently […]
Late last week, DarkOwl analysts observed the REvil ransomware as a service (Raas) cyber-criminal organization publicly announce its latest victims […]
Learn about Chan Imageboards, the key players, language, how they are evolving on the darknet, and trends our analysts observe.
In the year plus since the COVID-19 pandemic took hold, DarkOwl analysts have continued to observe widespread coronavirus-related scams on […]
Risk is a word regularly used across information security circles and CISO agendas. And, in light of the recent surge […]
Discover how criminals are accessing and exploiting state unemployment systems. Here, we have discussed unemployment fraud on the darknet.
Want to know what is fraud on the darknet? Read more to understand the types of fraud most prevalent across the deep web and darknet.
2020: the year of the “RAT” While 2020 has largely become known for the surge in large and small-scale ransomware […]
During review of recent darknet hidden service domains collected from Tor, DarkOwl analysts discovered a new ‘leaks-focused’ marketplace called “Dark […]
Underground markets of the darknet provide an extensive inventory of illegal goods for sale, including and certainly not limited to […]
In light of the large-scale nation-state sponsored attack against U.S. government networks, and critical commercial sectors of the U.S. supply […]
In previously published analysis, we outlined the economies of social media and disinformation-as-a-service on the darknet, highlighting how there is […]
As we introduced in our previous blog post, DarkOwl analysts have observed a now well-established digital economy in the darknet […]
For the last two years, U.S. voter registration information has been widely circulated across darknet forums and channels for potentially […]
Underground markets of the darknet provide an extensive inventory of illegal goods for sale, including drugs, weapons, hackers and assassins […]
In DarkOwl’s Darknet Marketplace Snapshot blog series, our researchers provide short-form insight into a variety of darknet marketplaces; looking for trends, exploring new marketplaces, examining […]
In our new Darknet Marketplace Snapshot blog series, DarkOwl researchers provide short-form insight into a variety of darknet marketplaces; looking for trends, exploring new marketplaces, examining […]
DarkOwl reports an increase in the prevalence of food delivery and personal shopping service accounts on offer across darknet marketplaces.
The Darknet Marketplace Snapshot series brings you quick and easy access to data about the most popular Infinity Market.
On July 9th 2020, the hackers behind the infamous and malicious Maze ransomware-as- a-service (RaaS) malware released a press statement […]
DarkOwl has investigated threats to cloud-based platforms and applications discussed on the darknet in order to identify threat actors that […]
Since first leaking highly-sensitive personal information pertaining to Lady Gaga, the threat actor group has since targeted Sherwood Food Distributors […]
Learn about the Zoom bombing incident & how this free video calling app became a major public information security concern.
Daniel Winzen, prominent anonymous hosting provider on the darknet, was attacked by hackers, resulting in a shutdown of hidden Tor services.
This is a continuation of our previous discussion (linked below) about how the global pandemic has created an incredible surge […]
Viruses on the darknet are nothing new. You can easily find vendors selling Bots, Password Crackers, Rootkits, Adware, Backdoor Access, […]
Quick Dive into recent trends in hackish data DarkOwl continuously and autonomously exfiltrates darknet information 24/7. We then index, store, […]
On the 31st of January, dark web community members started warning users of the looming Apollon market scam.
Denver, CO – February 14, 2020 – DarkOwl LLC, a Denver-based darknet data provider, is proud to announce the roll-out […]
In July of 2019, 7.5 TB worth of documents that were stolen from a Russian FSB contractor known as SyTech […]
An introductory overview of Nation-State Actors on the dark web One defining characteristic of the dark web is its association […]
What is 8chan? How to get on 8chan?
Dream Market announced its reincarnation – “Saṃsāra″; it refers to the eternal cycle of birth, suffering, death, and rebirth.
In this blog, our analysts dive into the latest dark web market exit scams, what darknet markets are still operational, and more.
Report on how the darknet reacts to dream market announcement, just a few weeks after Dream Market has been weathering heavy DDoS attacks.
In Part II, read about a historical look back to the RAMP marketplace & what happened to the RAMP community.
On January 9, the KickAss Forum went offline. On Twitter, user @bitsdigit initially reported that the site was seized by […]
This Week, 6,500 Hidden Services were Ousted from the Darknet The name Daniel Winzen may not mean much to the […]
International media recently highlighted the perils of Russian government sponsored cyber espionage operations against US elections in 2016, and the […]
This week we relaunch our “Into the Darknet” blog series that will not only provide a better understanding of the […]
TheDarkOverlord has resurfaced on Kickass Forum TheDarkOverLord announces that they are officially back in business (Source) TheDarkOverlord, one of the […]
News broke out mid-August that Princess Evolution, a revamped form of the infamous Princess Locker ransomware that was first seen […]
In recent weeks, analysts at DarkOwl have witnessed a number of vulnerability issues in key utilities used for dark web […]
