Dark web news and articles

Alexandre Cazes and the AlphaBay auction
The forfeiture file on alexandre cazes outlived him: villas, a Lamborghini, 911 bitcoins and an auction in Bangkok. A look at how seized wealth is unwound.

Bitcoin ATM malware
A bitcoin atm malware kit sold in 2022 came with a chipped card and a four figure price. Here is what it targeted and where kiosk trust breaks down.

Cisco hacked by Yanluowang
Cisco hacked in May 2022 through a synced browser password, fake IT phone calls and MFA push spam. Here is the intrusion chain and how to break it.

DeadBolt ransomware and QNAP devices
DeadBolt ransomware skipped negotiation and shipped decryption keys inside Bitcoin transactions. That shortcut let Dutch police collect 155 of them.

Lazarus Group targets energy providers
The Lazarus Group spent months inside energy firms in the US, Canada and Japan during 2022. How the intrusions worked and what they reveal.

LockBit and triple extortion
The LockBit ransomware crew answered a flood on its own leak site by hiring DDoSers. The Entrust standoff, the bug bounty, and the builder leak explained.

Malware as a service
Malware as a service lets a buyer rent working attack tools for the price of a game. How the model works, what it sells, and how to defend against it.

Most dangerous computer viruses
A damage-first look at the most dangerous computer viruses, from the Morris worm to NotPetya and Mirai, with repair bills, spread speed and real fixes.

NATO documents leaked from Portugal
A NATO data leak pulled from Portugal's military staff surfaced for sale on hidden forums, and US analysts noticed before Lisbon did. Here is the sequence.

Onion.live seizure
A clearnet link list vanished behind a takedown notice. What onion.live seized really told visitors, and what a public directory logs about you.

Ransomware as a service, explained
Goliath surfaced on a Tor forum in September 2022 as a turnkey ransomware as a service kit. Who bought it, what they got and why it sold.

Ryuk ransomware
Ryuk ransomware pioneered big-game extortion and made nine figures. Four years on, its code was being sold to anyone holding crypto.