+1
Dark Web Most Wanted: SafePay Ransomware
SafePay ransomware has listed 598 leak-site victims since 2024. DarkWebSonar data shows 37% US, 21% Germany, and 28% manufacturing.
DarkWebSonar Research Team
October 20, 2026
10 min read
DarkWebSonar Blog
In-depth analysis of dark web activity, ransomware trends, and cyber threat intelligence. Explore expert research, case studies, and insights that help you stay ahead of evolving threats.
19 posts(Page 1 of 3)
Read more
+1
Threat Pulse: KillSec's leak site is down. The data is not.
KillSec's leak site was seized on 30 September 2026. DarkWebSonar still holds 293 postings across 52 countries. A seized site does not recall that data.
DarkWebSonar Research Team
October 5, 2026
9 min read
+1
Dark Web Most Wanted: The Gentlemen Ransomware
The Gentlemen ransomware has claimed 610 victims across 75 countries. Manufacturing leads at 28%, with August 2026 batch drops keeping it spiked.
DarkWebSonar Research Team
August 29, 2026
10 min read
+1
Dark Web Most Wanted: Miyako
Miyako is an Initial Access Broker with 221 listings since November 2024 - 95% firewall-root ads, including claimed US Air Force and China Telecom access.
DarkWebSonar Research Team
July 24, 2026
10 min read
+1
Dark Web Most Wanted: Nova
Nova ransomware has logged 129 victims across 45 countries since April 2025. A RaaS operation rebranded from RALord, now surging.
DarkWebSonar Research Team
June 15, 2026
8 min read
+1
Dark Web Most Wanted: DimasHxR
DimasHxR ranks second across all DarkWebSonar-tracked actors with 508 incidents in 90 days - yet has zero open-source coverage.
DarkWebSonar Research Team
May 2, 2026
10 min read
+1
Dark Web Most Wanted: Keymous+
Keymous+ is a DDoS-specialist hacktivist group with 1,400+ incidents - targeting Morocco, France, India, Egypt, and Israel.
DarkWebSonar Research Team
February 24, 2026
8 min read
+1
Dark Web Most Wanted: NoName057(16)
NoName057(16) is the most active DarkWebSonar-tracked actor - 894 incidents in 90 days, 5,500+ total, heavily targeting Europe.
DarkWebSonar Research Team
January 16, 2026
8 min read
+1
Dark Web Most Wanted: MEDUSA
MEDUSA ransomware posted 201 victims in 2025 - 61.7% in the United States, targeting construction, healthcare, and education.
DarkWebSonar Research Team
December 2, 2025
8 min read
Showing 1-9 of 19 posts
All blog posts (19)
Stay Updated
Get the latest cybersecurity insights, threat intelligence updates, and security best practices delivered directly to your inbox.