Ransom & Dark Web Issues Week 3, May 2025

Ransom & Dark Web Issues Week 3, May 2025

ASEC Blog publishes Ransom & Dark Web Issues Week 3, May 2025                 Pro-Russian hacktivist group Killnet announces resumption of activities. Ransomware group HellCat shuts down operations. Hacktivist group Team 1722 claims responsibility for website hacks and data leaks targeting several South Korean

Ransom & Dark Web Issues Week 2, March 2025

Ransom & Dark Web Issues Week 2, March 2025

ASEC Blog publishes Ransom & Dark Web Issues Week 2, March 2025           New ransomware group SecP0 demands ransom for corporate vulnerabilities. Pro-Palestinian hacktivist group RipperSec claims DDoS attacks on South Korean telecom companies, public institutions, and education-related websites. Pro-Palestinian hacktivist group Dark Storm Team claims

Ransom & Dark Web Issues Week 1, November 2024

Ransom & Dark Web Issues Week 1, November 2024

ASEC Blog publishes Ransom & Dark Web Issues Week 1, November 2024           Pro-Russian hacktivist NoName05716 carried out DDoS attacks on several South Korean institutions User account information of Saudi Arabian government agencies leaked on BreachForums New Dedicated Leak Sites of the ransomware gang HellDown  

Ransom & Dark Web Issues Week 4, September 2024

Ransom & Dark Web Issues Week 4, September 2024

ASEC Blog publishes Ransom & Dark Web Issues Week 4, September 2024         LockBit ransomware gang attacks major South Korean tire manufacturer Data from a U.S. food delivery service company leaked on BreachForums Pro-Russian hacktivists conduct DDoS attacks on South Korean government websites  

Ransom & Dark Web Issues Week 4, Jun 2024

Ransom & Dark Web Issues Week 4, Jun 2024

ASEC Notes publishes Ransom & Dark Web Issues Week 4, Jun 2024      

Threat Trend Report on Deep Web & Dark Web – Ransomware Groups & Cybercrime Forums and Markets of January 2024

Threat Trend Report on Deep Web & Dark Web – Ransomware Groups & Cybercrime Forums and Markets of January 2024

Note   This trend report on the deep web and dark web of January 2024 is sectioned into Ransomware, Forums & Black Markets, and Threat Actors. We would like to state beforehand that some of the content has yet to be confirmed to be true.   Major Issues    1)

Distribution of SmokeLoader Targeting Ukrainian Government and Companies

Distribution of SmokeLoader Targeting Ukrainian Government and Companies

AhnLab SEcurity intelligence Center (ASEC) discovered that multiple SmokeLoader malware are being distributed to the Ukrainian government and companies. It seems that the number of attacks targeting Ukraine has increased recently. The targets confirmed so far include the Ukrainian Department of Justice, public institutions, insurance companies, medical institutions, construction companies,