☑️ Weekly Darkweb – November Week 1, 2025

🔍 India–Israel Jointly Developed Barak-8 Missile Data Leaked on Dark Web

• On November 2, a post selling information on the Barak-8 surface to air missile, jointly developed by India and Israel, was found on the dark web hacking forum 'DarkForums.'

• The seller ‘jrintel’ claimed to have obtained 1TB of data, including source code, design files, and video footage of the missile system, and uploaded images presumed to be technical documents and test review materials as samples.

• According to the S2W user profiling tool, the seller has uploaded posts related to classified military information from countries in Asia, the Middle East, and North America since August. Among those posts, cases of uploading previously compromised information were also identified.

🔍 Chinese Information Security Company 'K' Internal Data for Sale on Dark Web

• On October 31, confidential information from Chinese information security company 'K' was found being sold on the dark web hacking forum 'DarkForums.’

✓ Company K is a cybersecurity firm established in 2007 and headquartered in Beijing. In January, the U.S. Department of State named Company K among the entities associated with the Chinese military.

• The forum user 't1g3r' claimed to have obtained a total of 12,000 files including personal information of employees and project documents. The threat actor posted five images as proof, including sample data that appeared to show the number of organizations, IPs, and domains in a foreign country.

• The seller stated that the data would be sold to the forum user offering the highest price and further posted a link sharing additional sample data in the comments on November 3.

🔍 Source Code of Japanese Internet Services Company 'I' Leaked on Dark Web

• On November 5, a post selling source code belonging to Japanese leading internet services company 'I' was detected on the dark web hacking forum 'DarkForums.'

• The seller 'KaruHunters' claimed that company I suffered a data breach this month, resulting in the leak of its source code.

• According to S2W’s user profiling analysis, the seller has been active on 'DarkForums' since August of last year and has continuously uploaded posts selling data from IT companies in multiple countries such as Germany, Italy and Taiwan since September.

*The full report is available upon request and for XARVIS subscribers.