Demo

Topic

Stolen-data ecosystem and actors

How stolen data is posted, sold and reposted across dark web forums, marketplaces, channels and leak databases, and how analysts trace who is selling it.

Stolen-data ecosystem and actors

php2shell: the two critical PHP flaws and what to do now

php2shell is the name for two critical flaws in the PHP runtime, CVE-2026-109618 and CVE-2026-109619, both rated CVSS v4.0 9.2. They can allow unauthenticated r...

Stolen-data ecosystem and actors

Case Study: Unveiling 642,639 Government Credential Leaks Across 192 Countries

The Global Government Credential Leaks Study found 642,639 government credential leaks across 192 countries, collected from 83 dark web and Telegram sources. Br...

Stolen-data ecosystem and actors

FBI Crushes Nulled & Cracked.io, but Cybercriminals Already Have a Backup Plan

After the January 2025 seizure of the forums Nulled.to and Cracked.io, cybercriminals are shifting stolen-data trading to Telegram “clouds”. The article explain...

Stolen-data ecosystem and actors

The Invisible Threat of Exfiltrated Data: Unmasking the Underworld of Telegram-Based Data Sales

Telegram channels are used to list and sell exfiltrated data and access to compromised machines. The article describes the sales workflow from C2 server to list...

Stolen-data ecosystem and actors

Unmasking the Shadows: Inside the Dark Web of coinbase-mywallet.com Phishing and Malware Networks

Our investigation of the phishing domain coinbase-mywallet.com, registered on 16 January 2025, traced three IP addresses to malware samples and a command-and-co...

Stolen-data ecosystem and actors

Inside Telegram’s Underground “Clouds”: How Exfiltrated Data Gets Packaged and Sold

Telegram “cloud” channels sell infostealer logs, combo lists and server logins in bulk, and much of the data is recycled under new names. This article shows wha...