☑️ Weekly Darkweb – June Week 2, 2025

🔍 Confidential Letters Sent to Indonesian President, Listed for Sale on Dark Web

• On June 8, a post claiming to sell confidential letters submitted by the Indonesian state intelligence agency to the president was identified on the ‘DarkForums.’

• According to the user ‘DigitalGhost,’ the leaked data is 40MB CSV file, containing a total of 670,000 data sets.

✓ The leaked data includes information related to letters delivered to the Indonesian president between 2019 and 2021.

• Analysis by S2W cybercrime solution 'XARVIS' indicates that the threat actor had previously distributed personal information of the Israeli president in Indonesian language on the dark web.

🔍 Access to Internal Server of PNRI on Advertisement for Sale on the Dark Web

• On June 10, a post was uploaded to ‘DarkForums’ claiming to have gained full access to the database of ‘Philippine Nuclear Research Institute’ (PNRI).

• The forum user ‘Lei’ provided an image of access to PNRI’s official domain as proof and mentioned that the access would be sold via DM.

• According to S2W’s user profiling tool ‘DarkSpider,’ the threat actor joined the forum last month and has since uploaded multiple posts related to Southeast Asian countries, including organizations in the Philippines and Malaysia.

🔍 Personal Information of Japanese Law Enforcement Officials Leaked on Chinese Telegram Channel

• Personal information of Japanese public security, prosecution, and court employees has been detected in the Chinese Telegram channel ‘海外数据 / 海外粉 / 引流 / 华侨 / 币料.’

✓ The leaked data samples include sensitive information such as names, addresses, and phone numbers of judiciary personnel.

✓ The channel name translates to “Overseas Data / Overseas Followers / Inflows / Overseas Chinese / Crypto Intelligence” in Chinese.

• This Telegram channel is a public channel, used for data leaks, currently (as of June 12th, 2025) owns 60,000 subscribers.

✓ The channel operator ‘haiwaipgsj800’ had previously shared image samples containing personal information of Japanese citizens.

*The full report is available upon request and for XARVIS subscribers.