DarkOwl Adds Darknet Risk Features and Reports New Data-Leak Collections
Summary
DarkOwl’s Q2 update describes DarkSonar and search features, reports 56 new data leaks and 900,000 documents added, and summarizes MOVEit-related victim listings and other breach data found in its collection.
Key points
- DarkSonar assigns organizations a risk score based partly on darknet exposure of email addresses and associated passwords; DarkOwl says its signal was elevated before 74% of 237 public cyberattacks it examined from 2021–2022.
- A new date input lets users review DarkSonar signals in the months before a known incident.
- New Vision features include up to four concurrent search tabs, improved forum presentation, user-selected default search settings, and searches across Telegram posts using a persistent user ID.
- DarkOwl says it added 386 chat channels and groups, 56 data leaks, and 900,000 documents during the quarter; it says most customer-requested sources were indexed within 24 hours.
- The article reports that Cl0p listed Shell[.]com among MOVEit-related victims and released files said to contain personal information and internal documents; DarkOwl says the leak site listed over 150 organizations and information relating to 15 million people.
- A BreachForums post allegedly offering 26.5 million Viva Air records was also reposted on other forums, marketplaces, and Telegram, according to DarkOwl.
- Eye4Fraud publicly announced a breach involving over 16 million unique email addresses and other personal information, according to the article.
Article Details
- Event Type
- Product updates and collection statistics, with reporting on data leaks and ransomware incidents.
- Impact
- DarkOwl reported product enhancements and expanded darknet data collection. The article describes Cl0p's exploitation of a MOVEit zero-day, with more than 150 organizations and information relating to 15 million individuals on the group's leak site; Shell.com was listed as a victim and customer and employee data was released. It also reports an alleged Ransomexx breach of Viva Air involving 26.5 million records, and Eye4Fraud's publicly announced breach affecting more than 16 million unique email addresses and other personal information.
Threat Actors
Vendors
Products
DarkOwl VisionDarkOwl Vision’s DARKINT Search Lexicon is an easy-to-use tool intended to help users find interesting content within our database.DarkSonar APIIn April, DarkOwl announced the release of a new product, DarkSonar API, to help organizations better assess and track their potential cyber risk based on the nature of their exposure on the darknet.Progress MOVEit Transferoriented around double extortion ransomware, successfully exploited a zero-day vulnerability in the MOVEit file transfer tool in June 2023 which has led to the exposure of over 150 victims.
Countries
Industries
airlineViva Air, a budget airline based in Colombia, was allegedly hacked in March 2023 by Ransomexx ransomware.eCommerceThe company provides services to help protect against fraudulent orders for eCommerce companies and received criticism for their slow response to notify customer about the breach.