Dark Web Weekly Intel

Latest intelligence from dark web monitoring. Updated 6 June 2026.

UK Spam & Social Engineering

Phishing attacks up 140% in UK. Social engineering scams increased 62% year-on-year across 9 major UK banks. AI-powered phishing emails and deepfake voice cloning are the primary drivers.

Read: AI Email Scams UK Which? Scams 2026

Initial Access Broker Watchlist

IABs shifting toward larger enterprise targets. VPN access now exceeds RDP in listings. Telegram channels becoming primary marketplace for corporate access sales. Prices range from $500 to $50,000+.

Sources: Rapid7, Cyberint, CYFIRMA, darknet.org.uk

Ransomware - UK Impact

47 confirmed UK ransomware victims in Q1 2026. 961 total UK victims tracked on ransomware.live. April 2026 saw 772 victims globally across 70 active groups. Manufacturing and legal sectors most impacted.

Sources: SOC in a Box, BreachSense, Check Point, GuidePoint Security

Stolen Credentials & Data Dumps

Over 15 billion compromised credentials in circulation. UK bank credentials, NHS login details, and corporate VPN access being actively traded on dark web forums and Telegram channels.

Source: OnionClaw dark web monitoring + IntelX enrichment

Scam-as-a-Service & Phishing Infrastructure

AI voice cloning services available for 50-200 per voice. Phishing kits targeting HSBC, Barclays, Lloyds available for purchase. SMS spoofing services targeting UK mobile networks active.

Source: OnionClaw dark web engine results

Intelligence gathered via OnionClaw Tor-routed search across 10 dark web engines. Enriched with IntelX, HIBP, and UK fraud statistics. Updated weekly.