Resources
  • Newsletter
  • News Highlights
Weekly Darkweb in August W2
2025.08.20

☑️ Weekly Darkweb – August Week 2, 2025



🔍 UAE MoD Secrets Sold on Dark Web for $1.5K


• On August 9th, classified UAE MoD data spotted for sale on dark web forum BreachForums for USD 1,500.


• Seller “nxe” claims the data is a special-condition NOC file issued by the UAE MoD, obtained in March 2025.


• The file reportedly includes coordination terms with the GHQ-Signal Corps, which manages UAE military communications networks, radar systems, and other critical infrastructure.


• Such coordination terms indicate the work occurred near military communications facilities, and a leak could reveal facility locations, project timelines, and related departments, posing risks of physical/cyber attack.



🔍 Taiwan MOFA Docs Leaked, Including Foreign Correspondence


• On August 8th, a post advertising the sale of classified Taiwanese Ministry of Foreign Affairs (MOFA) documents appeared on the dark web forum DarkForums, priced at USD 50,000.


• User “MEM2F0X” released partial samples and a folder list, claiming to possess a large volume of data.


✓ Sample documents include correspondence with the Philippine MOFA, the World Trade Organization (WTO), and the Czech MOFA.


• The seller stated the data was for sale via their Telegram account, but the posted Telegram ID is currently inaccessible.



🔍 Indonesian Police Admin Portal Accounts Exposed on Dark Web


• On August 13th, a listing was identified on the DarkForums offering account credentials for the Indonesian Police Administrative Document Information System (ASTINA POLRI).


✓ ASTINA POLRI is an internal portal used exclusively by Indonesian National Police personnel for electronic processing of internal documents.


• Seller “PEKANBARU_TEAM” posted original usernames and passwords for certain accounts as samples.


• Exposure of credentials granting access to internal document systems can enable external threat actors to view and exfiltrate sensitive materials or implant malware, potentially triggering large-scale secondary incidents.



👉 Subscribe to <Weekly Darkweb> and get the latest newsletter every week.
Subscribe on LinkedIn
This newsletter is based on news derived from big data collected from over 400 million encrypted pages and channels, including those on the dark web and Telegram.

☎️ Contact us: https://s2w.inc/en/contact

*The full report is available upon request and for XARVIS subscribers.


List