DarkOwl Details Q1 Platform Updates and Data-Leak Findings

Summary
DarkOwl outlines Q1 updates to its darknet-intelligence platform, including secure browsing, MFA, and leak research tools. It also highlights newly collected leak data, including purported datasets involving DC Health Link and AT&T.
Key points
- DarkOwl added structured forum views and improved search to help users review darknet discussions.
- A new Direct to Darknet feature, developed with Authentic8, lets users open darknet search results in a cloud browser for further investigation.
- New tools provide context on leaks and ransomware listings, and let users compare actor profiles by tools and CVEs.
- DarkOwl added MFA and alert-management improvements, including a category column for organizing alerts.
- The company reported quarterly collection growth across Tor, I2P, ZeroNet, and Telegram, and coverage of more than 22,000 chat channels.
- DarkOwl described a BreachForums post claiming an AT&T dataset containing 70 million lines; the article says the data was initially offered for auction in 2021.
- DarkOwl noted that purported DC Health Link data was posted in 2023 and referred to the organization’s public statement about a March 2023 breach.
Article Details
- Event Type
- DarkOwl reported Q1 2024 product updates, including enhanced forum structuring, Direct to Darknet access, and new leak and actor research features.
- Impact
- The updates add investigation and alert-management capabilities to DarkOwl Vision. DarkOwl also reported collecting 117 data leaks during the quarter, including datasets purportedly containing personal, financial, and medical information. The article describes an AT&T dataset as allegedly hacked by ShinyHunters in 2021; this is attributed to the post DarkOwl reviewed.
Threat Actors
Vendors
Products
DarkOwl VisionAccess the Darknet Safely and Securely Directly from DarkOwl VisionSiloBy combining DarkOwl’s comprehensive darknet database and monitoring capabilities with Authentic8’s Silo cloud browser, which is known for its secure browsing environment, organizations will gain unprecedentedVision UIThis quarter the team released “Direct to Darknet” within Vision UI in partnership with Authentic8, a leading provider of cloud-based secure browsing solutions.