Dark web news and articles

Ransomware crews, malware and access sold underground, leaked documents and law-enforcement takedowns, explained with context on what happened since and what it means for ordinary users and companies.

Alexandre Cazes: The AlphaBay Founder's Rise, Arrest, and the Auction of His Fortune
News

Alexandre Cazes and the AlphaBay auction

Alexandre Cazes built AlphaBay into the largest darknet market before his 2017 arrest and death in custody. Learn what happened to his seized assets.

9 min readUpdated Sep 11, 2026
Bitcoin ATM Malware Sold on Dark Web Markets
News

Bitcoin ATM malware

Bitcoin ATM malware appeared on underground markets in 2022, targeting crypto kiosks worldwide. Learn how the attack worked and what it means for crypto ATM

10 min readUpdated Sep 11, 2026
How the Yanluowang Ransomware Group Hacked Cisco in 2022
News

Cisco hacked by Yanluowang

The Cisco data breach 2022 exposed how MFA fatigue and voice phishing let attackers steal corporate data. Learn what happened and how to prevent it.

9 min readUpdated Sep 11, 2026
DeadBolt Ransomware: How the QNAP NAS Attack Worked and What It Means
News

DeadBolt ransomware and QNAP devices

DeadBolt ransomware targeted QNAP NAS devices through a zero-day flaw, demanding 50 BTC for a master key. Learn how the attack worked and how to protect your

8 min readUpdated Sep 11, 2026
Lazarus Group: How North Korean Hackers Targeted Energy Infrastructure
News

Lazarus Group targets energy providers

The Lazarus Group attacked U.S., Canadian and Japanese energy providers in 2022 using custom malware. Learn how the operation worked and what it means for

9 min readUpdated Sep 11, 2026
LockBit Ransomware Group Adopts Triple Extortion After High-Profile Attack
News

LockBit and triple extortion

LockBit ransomware group added DDoS attacks to its extortion playbook after the Entrust breach. Learn how triple extortion works and what it means for

8 min readUpdated Sep 11, 2026
Malware as a Service: The Dark Web Marketplace That Industrialized Cybercrime
News

Malware as a service

Malware as a service turned cybercrime into a commodity market. Learn how MaaS platforms work, what they sell, and how to recognize the threat.

10 min readUpdated Sep 11, 2026
The Most Dangerous Computer Viruses and Malware Threats of 2022
News

Most dangerous computer viruses

Learn about the most dangerous computer viruses and malware threats that dominated 2022, from ransomware to IoT exploits. Understand the risks and protect

10 min readUpdated Sep 11, 2026
How the NATO Data Leak Exposed Portugal's Classified Military Documents
News

NATO documents leaked from Portugal

The NATO data leak from Portugal's military agency exposed classified documents sold on the dark web. Learn what happened, how the breach unfolded, and what it

8 min readUpdated Sep 11, 2026
Onion.Live Seized: The FBI Takedown and What It Means for Link Directories
News

Onion.live seizure

The onion.live domain was seized by the FBI in 2021 as part of a DDoS-for-hire crackdown. Learn what happened and how to verify link directories safely.

8 min readUpdated Sep 11, 2026
Ransomware as a Service and the Goliath Dark Web Sale
News

Ransomware as a service, explained

Ransomware as a service turned amateur criminals into extortionists. Learn how the Goliath sale worked and what RaaS means for security.

8 min readUpdated Sep 11, 2026
Ryuk Ransomware: How a Targeted Malware Became a Dark Web Commodity
News

Ryuk ransomware

Ryuk ransomware targeted high-value organizations with custom attacks and massive ransom demands. Learn how it worked, why it spread, and what it means for

9 min readUpdated Sep 11, 2026