Darknet
The Awakening of PoS Malware (or, has it really been dormant?)
The peak of activity of Point-of-Sale (PoS) malware was in late 2013 (with the disclosure of the notorious Target breach[1]), and over the course of 2014, when we witnessed the development and trade of new PoS malware strains. The vigorous discussions on hacking communities at the time, has led hackers to believe PoS malware would …
A New Darknet Platform Publishes a Huge Amount of Data, from Around the World
In the past few months, an alleged group of transparency advocates, headed by activist Emma Best (@NatSecGeek), created an online repository of leaked data similar to WikiLeaks, named “Distributed Denial of Secrets” (@DDoSecrets). Our initial examination revealed that the repository includes a great volume of data aggregated from past leaks, but also several new ones. …
The hackers behind the ‘9/11 papers’ extortion
On December 31, 2018, a cybercrime group going by the handle The Dark Overlord (hereafter TDO) claimed he had hacked an unnamed company, and exfiltrated a large volume of sensitive documents related to the 9/11 terror attacks-related lawsuits. TDO aims to extort the impacted organizations into paying a Bitcoin ransom and he already published batches …
Growing Awareness of the Darknet in China following Huge Domestic Database Breaches
In recent weeks, we have identified a growing awareness on Chinese security blogs and mainstream media, to the existence of the Darknet, and the activities of Chinese users on its platforms. The focus is mostly on the sale of leaked data, mainly of Chinese citizens. One of these leaks pertained to the Huazhu hotel group …