Tag: dark web
66 articles
FBI Probes Massive ID Theft Service Selling 153M+ Drivers Licenses
Imagine a black market service that boasts access to over 153 million drivers' licenses, 10 million ID cards, and 3 million travel documents - and has been secretly collecting data for over a year. The notorious Nexus service on Exploit is making these staggering claims, sending shockwaves through the cybersecurity world.
ShinyHunters Breach Exposes 12.9 Million Carhartt Accounts
A massive data breach at Carhartt has exposed a staggering 12.9 million customer accounts, compromising sensitive information and putting millions of people at risk. The breach, attributed to the ShinyHunters extortion group, included a treasure trove of customer, employee, and corporate data.
Carhartt Breach Reveals 12.9M Affected, Exposes ShinyHunters' Data Padding Tactics
The Carhartt data breach just got a reality check: an analysis by Troy Hunt revealed that around 12.9 million accounts were genuinely affected, not nearly as many as initially claimed by the hackers. Turns out, you can't always take cybercriminals at their word!
UK Police Database Breach Exposes Officer Data on Dark Web
A sensitive police database has been breached, putting the personal details of police officers, staff, and justice professionals at risk after being published on the dark web. The breach, detected on July 26, exposed names, work email addresses, and organizations, but thankfully, no passwords or security credentials were compromised.
PNLD Breach Reveals U.K. Police and Government Contacts on Dark Web
A recent PNLD data breach has exposed sensitive contact information of U.K. police, government officials, and customers on the dark web, including names, work email addresses, and organisation details. The breach could make it easier for scammers to craft convincing phishing messages targeting law enforcement officers.
Europol Disrupts The Com's Online Ecosystem with 4,340 URL Takedowns
In a major crackdown, Europol and its partners have taken down 4,340 URLs linked to The Com, a notorious online network accused of radicalizing young people and facilitating illicit activity. This coordinated effort is part of a broader mission to protect vulnerable youth and disrupt the online ecosystem of recruiters and extortionists.
23andMe Breach Settlement Imposes $18 Million Penalty
New York Attorney General Letitia James slammed 23andMe for its lax security, saying the company's failure to protect customer data put millions at risk. The criticism comes as part of a settlement that hits 23andMe with an $18 million penalty for its role in a massive data breach.
UK Man Jailed for Inciting Swatting Attacks Globally
A Welsh man has been jailed for encouraging swatting attacks worldwide, a stark reminder that this so-called prank can have deadly consequences. Callum Dare, 26, played a key role in a dark web forum, fueling a campaign of harassment and terror that spanned three countries.
Ex-Con Ransomware Negotiator Sentenced for BlackCat Attacks
A former ransomware negotiator, Angelo Martino, has been sentenced to 70 months in prison for his role in a string of BlackCat ransomware attacks that targeted multiple victims between 2023 and 2025. Martino's guilty plea brings to justice a key player in the notorious ALPHV ransomware gang.
Algerian Man Charged with Running Cybercrime Marketplaces
Meet the Algerian man behind a daring cybercrime scheme that swindled hundreds of thousands of dollars from thousands of victims - all from the safety of his anonymous online hideout. He allegedly ran two illicit marketplaces, selling stolen bank account and credit card numbers, phishing kits, and other tools of financial fraud.
Threat Actors Monetize Stolen Credentials with Searchable Underground Services
Cybercriminals are cashing in on stolen credentials with a new breed of underground services that allow buyers to search and purchase specific, verified login details. This emerging market acts as a middleman between hackers who steal sensitive info and those who want to use it to take over accounts.
Cybercriminals Worry AI Tools Will Disrupt Their Illicit Trade
Cybercriminals are getting anxious about the impact of AI tools on their illicit trade, and experts warn that now is the time for organizations to step up their cyber hygiene game with measures like timely patching, multifactor authentication, and passkey use. By prioritizing these defenses, businesses can stay ahead of emerging threats, including AI-assisted attacks.
Dark Web Exposes Early Warning Signs of Supply-Chain Attacks
Attackers are quietly buying and selling access to trusted integrations, developer accounts, and unattended credentials on the dark web, revealing early warning signs of supply-chain attacks. Monitoring underground forums for these subtle signals can help flag potential risks long before a breach makes headlines.
Europol Disrupts Major Crypto Laundering Service Linked to Ransomware Gangs
Europol's operation has cut off a major crypto laundering service linked to ransomware gangs, freezing hundreds of millions in illicit profits and disrupting a key financial pipeline used by criminals. The crackdown seized over €86,000 in cash, froze €692,000 in cryptocurrency, and took down 25 domains and 30 servers.
US Crackdown Targets Dark Web Drug Trafficker with 26-Year Sentence
In a major victory for justice, Darren Hughes, a 39-year-old dark web drug trafficker, has been sentenced to over 26 years in federal prison for peddling poison to unsuspecting victims. This harsh sentence sends a strong message to those who think they can hide behind the anonymity of the dark web.
Europol Disrupts Migrant Smugglers' Fake ID Marketplace
Europol has successfully disrupted a major online marketplace selling fake IDs to migrant smugglers across Europe, dealing a significant blow to cross-border crime. The operation, led by French authorities and carried out by Spanish police, resulted in the arrest of one suspect and the seizure of 800 counterfeit identity documents.
AI-Powered Cybercrime Tools Flood Dark Web Marketplaces
The dark web has seen a staggering 3,810% surge in AI-powered cybercrime tools, with posts skyrocketing from 38 in December to 1,486 in February, signaling a new wave of threats. This alarming trend has experts like Cynthia Kaiser, SVP of the Ransomware Research Center at Halcyon, warning that cyber threats have become the "national security challenge of our lifetime."
FBI Disrupts Online Child Abuse Ring Linked to Violent Extremist Collective
The feds have taken down a predator, arresting a Tennessee man linked to a violent extremist collective for exploiting vulnerable children online. Zachary Sweeney, 30, faces up to 50 years in prison for his heinous crimes, including sexual exploitation and distributing child abuse material.
Authorities Arrest Suspect Tied to Dream Market Operations
A suspect linked to the notorious Dream Market operations, Owe Martin Andresen, has been taken into custody on cross-border charges of money laundering, facing penalties in both the US and Germany. Authorities reportedly have him in custody, but few details about the case have been released.
US Indicts Suspected Dream Market Admin on Money Laundering Charges
A suspected administrator of the now-defunct Dream Market has been indicted in the US on 12 federal counts of money laundering, with the Department of Justice alleging he used cryptocurrency to buy gold bars and ship them to his home in Germany. If convicted, he faces up to 20 years in prison for each count.
Police Disrupt Relaunched German-Language Cybercrime Forum
In a major breakthrough, international authorities have shut down a notorious German-language cybercrime forum that had attracted over 22,000 users and 100 vendors peddling stolen data, drugs, and forged documents. A 35-year-old German national was arrested in Mallorca and faces charges for allegedly masterminding the illicit platform.
Police Disrupt Relaunched Crimenetwork Dark Web Marketplace
In a major blow to dark web crime, a 35-year-old German citizen was arrested in Mallorca for relaunched Crimenetwork marketplace. He built an entirely new online infrastructure just days after the previous version was shut down.
Checkmarx Breach Exposes GitHub Repository Data on Dark Web
Checkmarx revealed that a security breach, linked to a March 23 supply chain attack, exposed sensitive GitHub repository data, which has now surfaced on the dark web. The incident has been contained, with no customer data compromised, as the affected repository was separate from Checkmarx's customer production environment.
Vercel Breach Exposes Stolen Data for Sale
A security breach at Vercel has put sensitive data at risk, with hackers claiming to have stolen information and now trying to sell it - but where does the buck stop, and what's next for the internet? The incident raises crucial questions about responsibility and response in the face of cyber threats.