DarkOwl adds leak-context enrichment and Telegram, Discord search features
Summary
DarkOwl’s Q3 2023 updates add analyst-curated leak context, Telegram and Discord channel and user searches, expanded forum views, and new lexicon queries. The post also highlights several collected leaks.
Key points
- Analyst-curated Leak Context adds leak descriptions, target details, dates when known, exposed-content types, and downloadable reports; it is available in Vision UI and through an API.
- Vision UI and API updates allow searches to be filtered by Telegram or Discord channel or server, and by username or user ID.
- More than 100 forums moved to a thread-view structure showing titles, post counts, users, dates, and post bodies.
- DarkOwl added 99 lexicon queries: 15 ransomware, 46 forum, and 38 market entries.
- The post describes data allegedly retrieved from NATO’s COI portal and leaked on SeigedSec’s Telegram channel in July 2023.
- Other highlighted collections include Shanghai Suishenma data, Cegedim documents attributed to a September ransomware attack, PwC documents linked to the MOVEit vulnerability and CL0P, and scraped Duolingo user data.
Article Details
- Event Type
- Product update and report on collected data leaks
- Impact
- DarkOwl announced product features for searching and analyzing leak data, Telegram and Discord channels and users, forums, and translated search blocks. It also described collected leaks involving NATO, Shanghai’s Suishenma system, Cegedim, PwC, and Duolingo. The article reports alleged data exposure and ransomware incidents, but provides no quantified impact beyond the details stated for individual leaks.