🏆

DARK WATCH MONITOR TABLE

Live dark web threat standings — Premier League style

19 Oct 2026, 19:00

Tracked

Critical

High

Medium

Low

#		Threat	Type	Level	Score	Last Seen	IOCs
1	➡️	💀 Ransomware Group (Unidentified)	Monitor	High	60	19 Oct, 16:05	31
2	➡️	💀 Dark Web Discovery Hub	Monitor	High	60	19 Oct, 16:02	4
3	➡️	💀 Rhysida	Monitor	High	60	19 Oct, 16:05	5
4	➡️	💀 LockBit	Monitor	Medium	45	19 Oct, 10:22	0
5	➡️	💀 RansomHouse	Monitor	Medium	45	19 Oct, 16:05	0
6	➡️	💀 8Base	Monitor	Inactive	5	never	0
7	➡️	💀 Akira	Monitor	Inactive	5	never	0
8	➡️	💀 ALPHV/BlackCat	Monitor	Inactive	5	never	0
9	➡️	💀 BlackBasta	Monitor	Inactive	5	never	0
10	➡️	💀 BianLian	Monitor	Inactive	5	never	0
11	➡️	💀 Cactus	Monitor	Inactive	5	never	0
12	➡️	💀 Clop	Monitor	Inactive	5	never	0
13	➡️	💀 Hunters International	Monitor	Inactive	5	never	0
14	➡️	💀 Medusa	Monitor	Inactive	5	never	0
15	➡️	💀 Play	Monitor	Inactive	5	never	0
16	➡️	💀 Qilin	Monitor	Inactive	5	never	0
17	➡️	💀 Snatch	Monitor	Inactive	5	never	0
18	➡️	💀 Mallox	Monitor	Inactive	5	never	0
19	➡️	💀 Monti	Monitor	Inactive	5	never	0
20	➡️	💀 Trigona	Monitor	Inactive	5	never	0
21	➡️	💀 Royal	Monitor	Inactive	5	never	0
22	➡️	💀 Abyss	Monitor	Inactive	5	never	0
23	🔼	💀 RansomEXX	Monitor	Inactive	0	never	0
24	➡️	💀 RansomEXX	Monitor	Inactive	0	never	0
25	➡️	💀 Space Bears	Monitor	Inactive	0	never	0
26	➡️	💀 Kill Security	Monitor	Inactive	0	never	0
27	➡️	💀 Bashe	Monitor	Inactive	0	never	0
28	➡️	💀 Donut Leaks	Monitor	Inactive	0	never	0
29	➡️	💀 Ra Group	Monitor	Inactive	0	never	0
30	➡️	💀 CiphBit	Monitor	Inactive	0	never	0
31	➡️	💀 RansomedVC	Monitor	Inactive	0	never	0
32	➡️	💀 DarkRace	Monitor	Inactive	0	never	0

What is the Threat's Table? A live ranking of threats we are tracking on the dark web — like a football league table, but for digital dangers.

Each row is a real dark web site monitored by DarkWatch. Ranked by threat score — how dangerous, active, and recent. Higher score = higher risk to UK families.

What the arrows mean:

🔼 = threat increased (more active/dangerous) | 🔽 = decreased (less active) | ➡️ = no change | 🆕 = new entry

Threat levels: Critical (🚨) → High (🟠) → Medium (🟡) → Low (🟢) — based on type, activity and intel data

Why it matters: The same data security professionals use — in plain English. Updated hourly. No jargon. Clear threat intel for you and your family.

⚠️ Most threats currently show as Inactive. Many ransomware leak sites have been taken down by law enforcement operations (NCA, FBI) in recent months. Our DarkWatch pipeline monitors these sites hourly — if any come back online, the table updates instantly with a 🟢 LIVE badge and active threat score. New sites are discovered daily through ongoing dark web surveillance.

🧪 Methodology & honesty policy: see Dark Watch Monitor → Methodology for what we monitor, how we collect and verify data, what "detected" means, and the exact sources used. Leak-site listings are claims by the groups, not independently confirmed victim data. If a source is down or stale we mark it and say so — we never invent or backfill numbers. Absence of a detection does not mean the threat does not exist. Header timestamp updates live from the data file on every page load.