DarkWatch Weekly: Ransomware Activity and Dark Web Trends
The Week in Numbers
DarkWatch captured 24,317 items and identified 12,017 entities across the dark web this week. We raised 1,818 alerts and are monitoring 10 active targets. These numbers show that cybercriminal activity remains a constant threat, but our monitoring helps us warn you about the risks.
Top Monitored Targets
This week, the most closely watched targets include:
- Unidentified Ransomware Group – A new or unclassified group that's generating significant chatter.
- Dark Web Discovery Hub – A forum or marketplace where criminals trade stolen data and tools.
- Rhysida – A ransomware group known for targeting healthcare and education.
- LockBit – Despite law enforcement action, LockBit remains a persistent threat.
- RansomHouse – Another ransomware group that leaks stolen data.
Other monitored groups include 8Base, Akira, ALPHV/BlackCat, BlackBasta, BianLian, Cactus, and Clop. These groups often target UK businesses and public services, but their activities can also affect individuals if your data is stolen.
Ransomware Leak Sites Live
We detected several ransomware leak sites that are currently active, including DragonForce, Embargo, and INC Ransom. These sites are used to publish stolen data when victims don't pay. While these are mainly aimed at companies, the stolen data can include personal information about customers and employees.
What This Means for You
Ransomware attacks on companies can lead to your personal data being exposed. If a company you use is hit, you might be affected. Keep an eye out for notifications from organisations you trust and follow their advice if your data is involved.
Actionable Takeaway
Use strong, unique passwords for every account and enable two-factor authentication (2FA) wherever possible. This makes it much harder for criminals to use stolen data to access your accounts. If you receive a data breach notification, follow the steps provided and consider changing your passwords.
DarkWatch will continue to monitor these threats and share updates to help keep you informed.
Related reading