September 2026 Dark Web Breach Incident Trend Report
Note The September 2026 Dark Web Breach Incident Trend Report focuses on data breach cases and the sale of initial access credentials posted on the deep web and dark web forums. The report explicitly states that the accuracy of some of its content cannot be fully verified due to the
August 2026 Threat Trend Report on Ransomware
Purpose and Scope This report summarizes statistics on new ransomware samples, affected systems, and statistics on targeted businesses collected during the month of August 2026, as well as major Korean & Global ransomware issues. Statistics on targeted businesses were compiled based on the time when publicly available information from ransomware
Security Issues in the Korean & Global Financial Sector in August 2026
Statistics on Malware Distributed to the Financial Sector Malware Distribution Trends. In Attack Stage 1, phishing was the highest at 2.1, Up from 1.8 The previous month. In Attack Stage 2, dropper/downloader was the highest at 1.1, Down from 3.2 The previous month. In Stage 3 of the attack, Infostealers
Ransom & Dark Web Issues Week 2, May 2026
ASEC Blog publishes Ransom & Dark Web Issues Week 2, May 2026 Coinbase Claims Data Leak of South Korean Medical Ultrasound Equipment Manufacturer Emergence of New Data Extortion Group ‘Leak Bazaar’ Hasan’s BreachForums and TeamPCP Host Large-Scale Supply Chain Attack Competition Using Shaid-Hulud Worm
Threats Behind the Mask of Gentlemen Ransomware
Gentlemen is a new ransomware group first identified around August 2025. The group operates a double extortion model that involves breaching corporate networks, exfiltrating data, encrypting the data, and then using the encrypted data to extort victims. During the breach, the group employs typical tactics seen in advanced ransomware groups,
An Unerring Spear: Cephalus Ransomware Analysis
Cephalus is a new ransomware group that first appeared in mid-June 2025. The group claims that they are motivated 100% by financial gain. Their main method of breaching organizations is by stealing credentials through Remote Desktop Protocol (RDP) accounts that do not have multi-factor authentication (MFA) enabled. Their operation is
Gunra Ransomware Emerges with New DLS
AhnLab TIP monitors the current ransomware group activities across dark web forums, marketplaces, and other sources. Through the Live View > Dark Web Watch menu, users can track the most active ransomware groups, uncover their collaborations, and gain insights into planned attacks and techniques—enabling user organizations to anticipate threats, prepare
Report on Ransomware Attacks Targeting Korean Companies
Overview In recent years, ransomware attacks have been increasing worldwide, with Korean companies also experiencing a rise in cases. Especially since 2023, there has been a sharp surge in ransomware incidents targeting the Asia region, highlighting the need for a systematic analysis of this trend and its impact.
Threat Trend Report on Deep Web & Dark Web – Ransomware Groups & Cybercrime Forums and Markets in August 2024
Note This trend report on the deep web and dark web of August 2024 is sectioned into Ransomware, Forums & Black Markets, and Threat Actor. We would like to state beforehand that some of the content has yet to be confirmed to be true. Major Issues 1) Ransomware
Ransom & Dark Web Issues Week 3, July 2024
ASEC Notes publishes Ransom & Dark Web Issues Week 3, July 2024
