short notes about this list, the tor network and not getting phished. no newsletter, no comments, no rss bloat - it updates when it updates.
CISA, the FBI and HHS now count more than 500 Medusa victims, over 200 of them in the past year alone. A look at how the group's Tor-hosted leak site works and what it says about the wider 2026 extortion ecosystem.
Compromised maintainer accounts pushed malicious crate versions whose build scripts ran malware at compile time, while trojanized npm packages delivered an AI-assisted Linux backdoor. Here is how these attacks work and why lockfiles matter.
The Android banking trojan ToxicPanda has been updated with 167 remote commands, overlay phishing for 349 financial apps, and a VPN-service trick that cuts victims off from Google Play while it works.
Researchers showed that a man-in-the-middle relay can rewrite the expiry date a POS terminal reads from an expired Visa card, reviving dead plastic for real purchases. We explain the mechanics, why the carding scene noticed, and where the attack stops.
Every uptime percentage on this site now comes from a rolling 7-day window instead of an all-time counter. Here is what changed, why it matters, and how to read any uptime stat.
A year after Operation Deep Sentinel killed Archetyp Market, no credible relaunch has surfaced. Instead the darknet scene scattered into smaller, riskier pieces.
Circuits rotate every ten minutes, introduction points shed load, guards drop. Why one failed probe means almost nothing on Tor - and how we retry before believing it.
A mid-sized market has stopped processing withdrawals for more than a week while still accepting deposits. Staff blame technical issues; veterans suspect a familiar ending.
An onion address is not a name - it is a public key. One wrong character puts you on a stranger's server. Here is how researchers and operators say to verify it.
No farewell post, no mirror notice, no seizure banner. One of the older names on our list simply stopped answering, and silence is its own kind of announcement.
The Rust rewrite of the tor client has reached client feature parity. What memory safety buys, how the transition is tracking and why relays will be the last to move.
A long-running darknet market has posted a shutdown schedule instead of vanishing overnight. Orderly exits are rare enough to make news, but history says watch the payouts.