Tor and dark web news

Australian police seized a record 2.7 tonnes of cocaine in Sydney and arrested two men following an investigation into an alleged smuggling network.

Microsoft has uncovered a phishing campaign targeting hotels with fake photo ZIP files that install persistent Node.js malware.

Citizen Lab says Russian authorities used Cellebrite software to unlock activist Andrey Pivovarov's iPhone after the company ended sales to Russia.

Two Albanian nationals were sentenced after the NCA found 9kg of cannabis and more than £51,000 in cash at a Birmingham home.

The DOJ seized cloud infrastructure tied to Cambodia's Huione Group, which authorities say helped launder billions from online scams.

Two men pleaded guilty in the United Kingdom this week to criminal charges stemming from an August 2024 cyberattack that crippled Transport for London, the entity responsible for the public transport network in the Greater London area. The…

Authorities in Belgium, France, Spain and Italy dismantled a drug trafficking network that used hidden vehicle compartments.

Hackers are using fake CAPTCHA pages sent through WhatsApp to trick users into running VBScript malware on Windows systems.

Researchers say a low-skilled attacker used Claude Code and OpenAI Codex to breach 14 companies with minimal technical expertise.

The U.S. Coast Guard says Operation Pacific Viper has surpassed 225,000 pounds of cocaine seized since launching in August 2025.

Hackers exploited a flaw in Meta's AI support bot to hijack Instagram accounts, including high-profile profiles and government accounts.

For the past four years, a sprawling Android-based botnet called Popa has forced millions of consumer TV boxes to relay Internet traffic linked to advertising fraud, account takeovers, and mass data-scraping efforts. This week, researchers…

A Florida couple faces federal drug charges after authorities allegedly found methamphetamine, fentanyl and firearms in Escambia County.

CISA added a critical Joomla JCE vulnerability to its KEV list after attackers began exploiting the flaw to execute PHP code.

Dutch authorities reported a sharp rise in cryptocurrency payments linked to online child sexual abuse material in 2025.