September 2026 Dark Web Threat Actor Trend Report

September 2026 Dark Web Threat Actor Trend Report

Note The September 2026 Dark Web Threat Actor Trend Report focuses on threat actors active on the deep web and dark web, as well as publicly reported cyberattack incidents. It is noted that the factual accuracy of some content cannot be independently verified. Major Issues Some hacktivist groups claimed responsibility

October 11, 2026

October 11, 2026 Hash 159ee42b68dabc623acf2766a377f71cb 26059409842f0f68f9c8e99d8b47bbb91 36188d860ff735b7af3428ff5d95c0cd6 URL 1http[:]//m-facebooks[.]vn/httpswwwfacebookcomdovanduc2020?Tj9 2http[:]//96[.]246[.]230[.]97[:]34605/i 3https[:]//www[.]waynebpgp[.]com/ IP 1180[.]168[.]24[.]186 240[.]71[.]90[.]11 3124[.]45[.]31[.]113...

October 10, 2026

October 10, 2026 Hash 10aab70203a4a7834ee45a03aa9c7196a 2474d010f81cd6b61bbe2c339c92fca3b 376c5cdbfc560d0cb399a3c5e6ed1b5d1 URL 1http[:]//revolutionrecords-international[.]com/ 2http[:]//www[.]atlanticbagel[.]com/ 3http[:]//urvashiforum[.]com/ IP 1138[.]2[.]92[.]229 2109[.]160[.]32[.]155 3211[.]197[.]62[.]36...

October 09, 2026

October 09, 2026 Hash 1446e0c54c4b13efbc474a9bf275ee83a 2747407c5d2522d3d4d15ec7a819b50f4 3382a607912a63a1c3cf312708589ba80 URL 1http[:]//radiosantanna[.]it/ 2http[:]//garageclothingeurope[.]com/ 3http[:]//antiquebrassmoroccan[.]com/ IP 164[.]225[.]72[.]42 2106[.]12[.]241[.]195 3189[.]50[.]142[.]78...

Beware of Phishing Emails Disguised as Purchase Orders

Beware of Phishing Emails Disguised as Purchase Orders

Recently, the AhnLab SEcurity intelligence Center (ASEC) identified instances of phishing emails being circulated that disguise themselves as requests to confirm purchase orders. The email body asks recipients to review the attached purchase order and reply with the relevant information, prompting users to download and open the attached DOCX file.

Statistical Report on Malware Targeting Linux SSH Servers in the Third Quarter of 2026

Statistical Report on Malware Targeting Linux SSH Servers in the Third Quarter of 2026

Contents The AhnLab SEcurity intelligence Center (ASEC) collected attack logs targeting poorly managed Linux SSH servers through honeypots. This report compiles statistics by categorizing the attack sources identified in the third quarter of 2026, the attacks carried out from those sources, and the malware used. The report also provides a

Q3 2026 Statistical Report on Malware Targeting Windows Database Servers

Q3 2026 Statistical Report on Malware Targeting Windows Database Servers

Content The AhnLab SEcurity intelligence Center (ASEC) observed and classified attacks targeting MS-SQL servers and MySQL servers installed on Windows operating systems via the ASD infrastructure. This report summarizes the damage status, attack status, and the types of malware used in the attacks, based on logs identified in the third

October 08, 2026

October 08, 2026 Hash 1ce1a71d0322a63f17306fed911da10da 22eead87562f424cbc7661bd4bd79d575 339c3332b07a772f15d680de6a965f036 URL 1http[:]//turfwarskickball[.]com/ 2http[:]//tmqp2r5[.]charmingcircle[.]org/ 3http[:]//www[.]sharkcleanaustralia[.]com/ IP 1109[.]160[.]32[.]131 243[.]135[.]160[.]129 3136[.]248[.]121[.]226...

Q3 2026 Statistical Report on Malware Targeting Windows Web Servers

Q3 2026 Statistical Report on Malware Targeting Windows Web Servers

Content The AhnLab SEcurity intelligence Center (ASEC) analyzed the attack status of Windows web servers in the third quarter of 2026 based on AhnLab Smart Defense (ASD) logs. The targets were Internet Information Services (IIS) web servers and Apache Tomcat web servers running in Windows environments, with attacks primarily exploiting