Skip to content
DarkWeb Field Notes

Dark web news and articles

Alexandre Cazes and the Long Afterlife of a Forfeiture File
News

Alexandre Cazes and the AlphaBay auction

The forfeiture file on alexandre cazes outlived him: villas, a Lamborghini, 911 bitcoins and an auction in Bangkok. A look at how seized wealth is unwound.

9 min readUpdated Sep 13, 2026
Bitcoin ATM Malware and the Trust Boundaries Inside a Crypto Kiosk
News

Bitcoin ATM malware

A bitcoin atm malware kit sold in 2022 came with a chipped card and a four figure price. Here is what it targeted and where kiosk trust breaks down.

8 min readUpdated Sep 13, 2026
How Cisco Got Hacked by the Yanluowang Extortion Crew
News

Cisco hacked by Yanluowang

Cisco hacked in May 2022 through a synced browser password, fake IT phone calls and MFA push spam. Here is the intrusion chain and how to break it.

7 min readUpdated Sep 13, 2026
The DeadBolt Ransomware Crew Automated Itself Into a Trap
News

DeadBolt ransomware and QNAP devices

DeadBolt ransomware skipped negotiation and shipped decryption keys inside Bitcoin transactions. That shortcut let Dutch police collect 155 of them.

8 min readUpdated Sep 13, 2026
How the Lazarus Group Spent Months Inside Energy Company Networks
News

Lazarus Group targets energy providers

The Lazarus Group spent months inside energy firms in the US, Canada and Japan during 2022. How the intrusions worked and what they reveal.

7 min readUpdated Sep 13, 2026
How LockBit Ransomware Priced Pressure Into Its Product
News

LockBit and triple extortion

The LockBit ransomware crew answered a flood on its own leak site by hiring DDoSers. The Entrust standoff, the bug bounty, and the builder leak explained.

8 min readUpdated Sep 13, 2026
Malware as a Service Explained Through a Single Purchase
News

Malware as a service

Malware as a service lets a buyer rent working attack tools for the price of a game. How the model works, what it sells, and how to defend against it.

8 min readUpdated Sep 13, 2026
Most Dangerous Computer Viruses: Eight Case Files and Their Bills
News

Most dangerous computer viruses

A damage-first look at the most dangerous computer viruses, from the Morris worm to NotPetya and Mirai, with repair bills, spread speed and real fixes.

9 min readUpdated Sep 13, 2026
The NATO Data Leak Portugal Discovered Second Hand
News

NATO documents leaked from Portugal

A NATO data leak pulled from Portugal's military staff surfaced for sale on hidden forums, and US analysts noticed before Lisbon did. Here is the sequence.

7 min readUpdated Sep 13, 2026
Onion.Live Seized and the Cost of Clearnet Convenience
News

Onion.live seizure

A clearnet link list vanished behind a takedown notice. What onion.live seized really told visitors, and what a public directory logs about you.

7 min readUpdated Sep 13, 2026
Inside the Goliath Listing, a Ransomware as a Service Offer
News

Ransomware as a service, explained

Goliath surfaced on a Tor forum in September 2022 as a turnkey ransomware as a service kit. Who bought it, what they got and why it sold.

6 min readUpdated Sep 13, 2026
Ryuk Ransomware Goes From Secret Weapon to Forum Merchandise
News

Ryuk ransomware

Ryuk ransomware pioneered big-game extortion and made nine figures. Four years on, its code was being sold to anyone holding crypto.

6 min readUpdated Sep 13, 2026