Dark Web Intelligence
Threxar monitors closed-access forums, underground marketplaces, and leak repositories to surface relevant findings for defenders. No operational access details are disclosed.
Healthcare Credential Set - 890K Accounts
A credential set attributed to a healthcare sector breach is circulating on a closed-access forum. Records include email, plaintext passwords (suggesting an older breach), and patient reference IDs.
Proprietary Source Code Listed - Unnamed Software Vendor
A marketplace listing claims to offer proprietary source code from a mid-market software vendor. The seller provides a directory tree as proof. Threxar has not independently verified authenticity.
University Alumni Database - 1.2M Records
A database dump attributed to an academic institution was posted publicly to a forum. Records appear to include alumni names, graduation years, and email addresses.
Government Contractor Employee List - Forum Thread
A forum post claims to contain an employee directory from an unnamed government contractor, including names, email addresses, and reported clearance levels. No further detail provided.
Financial Institution Login Cookies - Active Session Tokens
A batch of what appear to be active browser session cookies for a regional financial institution's online banking portal is being offered privately. Token freshness is unverified.
Telecommunications ISP Infrastructure Topology Maps
Internal routing diagrams, ASN peering agreements, and core router configuration files claimed to belong to a European telecommunications provider posted on an invite-only market.
Retail E-Commerce Customer Payment Records - 450K Accounts
Extracted database dump containing hashed payment tokens, order histories, and delivery address details from an international retail platform.
Aerospace & Defense Subcontractor Active Corporate Credentials
Threat actor advertises single-sign-on (SSO) credentials and VPN configuration profiles targeting a defense supply chain contractor.
Logistics & Supply Chain API Gateway Keys Exposed
A dark web forum thread advertises access keys and endpoint documentations granting access to real-time cargo shipment tracking APIs.
Energy Sector SCADA Remote Control Interface Listing
Seller claims access to web-accessible ICS/SCADA human-machine interfaces monitoring regional grid power distribution nodes.
Research use only. All findings are described at a high level for defensive awareness. Threxar does not publish specific access methods, credentials, or links to dark web resources. If you have received a notification about your organisation's data, contact us via the Report form.
Is your organisation's data in a dark web listing?
Submit a takedown request or inquiry via our contact form. We will review and respond within 48 hours.
Submit a Report →