DarkOwl Adds Darknet Marketplace Research Features to Vision
Summary
DarkOwl added marketplace search, summaries, and listing details to Vision UI and API, alongside other search updates. The post also highlights curated information on several alleged data leaks, including an Allianz Life incident reportedly confirmed by the company.
Key points
- The new Markets module searches darknet listings using filters such as vendor, market, category, price, and shipping details.
- Aggregated results include listing timelines, shipping-source maps, and totals for markets and vendors.
- Three Vision API endpoints support marketplace searches, result summaries, and individual listing details.
- Other updates add source-domain exclusions, chat-channel exclusions, and chat types as search blocks.
- The post summarizes alleged data leaks involving credit-card data, Etsy-related records, Allianz Life, and Serasa Experian.
- The article says Allianz Life confirmed that a threat actor accessed a third-party CRM platform on July 16, 2025.
Article Details
- Event Type
- DarkOwl announced Q3 2025 product updates to its Vision UI and Vision API, including expanded darknet marketplace research capabilities and additional search features.
- Impact
- The updates provide users with expanded marketplace listing data, aggregated search summaries, specialized filters, and programmatic access to listing details. The article also presents curated summaries of reported data leaks, including exposed personal and financial information. It does not report a new breach of DarkOwl or identify malicious infrastructure.
People
JBRIdentified in the article as the person who initially posted the Serasa Experian dataset; a later post reportedly attributed the original breach to the Brazilian hacker known as JustBr.SeasonThe article says Season completed the reported purchase of the full Allianz Life dataset for $9,000 on August 21, 2025.TheBlobBreachForums user whose February 2023 post reportedly described the original Serasa Experian breach and named JustBr (or JBR) as the hacker.
Threat Actors
LAPSUS$Named as one of the groups comprising the threat actor group associated with the reported Allianz Life data leak.Scattered SpiderNamed as one of the groups comprising the threat actor group associated with the reported Allianz Life data leak.ShinyHuntersNamed as one of the groups comprising the threat actor group associated with the reported Allianz Life data leak.
Vendors
Products
SalesforceData purported to be from Allianze Life, obtained via Salesforce, was posted on scattered lapsus$ hunters, a Telegram channel, on August 19, 2025.Vision APIAccess our full listing collection through our new Markets module in Vision UI, or Markets endpoint options in Vision API.Vision UIAs we wrap up Q3, we’re excited to share a major expansion to our investigative capabilities within Vision UI—introducing a powerful new module designed specifically for darknet marketplace research.