☑️ Weekly Darkweb – December Week 2, 2025

🔍 Global Hacking Forum RaidForums Reemerges Four Years After FBI Shutdown

• On November 28, it was identified that RaidForums had reappeared after nearly four years, following its earlier removal by the FBI.

→ RaidForums, launched in 2015 and infamous as a breeding ground for data breaches, was dismantled in February 2022 during a joint operation led by the FBI and Europol. At the time of its shutdown, the forum had around 530,000 users.

→ The forum’s founder, known online as ‘Omnipotent’ (real name: Diogo Santos Coelho), was arrested in the U.K. in January 2022.

• The forum’s comeback is being led by users ‘Aiko’ and ‘Sem,’ the latter known as a previously active user on the former site.

• By December 11, RaidForums had past 620 users and 560 posts, raising expectations of increased data breach activity across hacking forums.

🔍 Taiwan Company Q’s NAS Cloud Access Found for Sale on the Dark Web

• On December 10, access to the NAS cloud service of Taiwan’s IT storage company Q was found for sale on the dark web hacking forum DarkForums for USD 400.

→ Company Q, listed on the Taiwan Stock Exchange, reported about USD 183 million in revenue for 2024.

  ✓ NAS (Network Attached Storage): a storage device that enables file storing and sharing across multiple devices via a network.

• The threat actor ‘KaruHunters’ claimed that the access exposed about 1.7TB of NAS data, including internal files and detailed user information. The seller also posted a link to their Telegram channel and shared screenshots of the administrator login page and control panel as proof of the breach.

• A NAS breach can result not only in file exposure but also in the leak of personal information and trade secrets, ransomware attacks, and broader network compromises, causing severe harm to individuals and businesses.

🔍 Swiss Computer Device Maker ‘L’ Internal Data Leaked on the Dark Web

• On December 7, a link to download roughly 1.75TB of customer data and internal files from Swiss company L was published on the Exploit forum.

• The leaked database from company L was also found being offered for sale on November 21 by the threat actor ‘KillaTheGoat’ on the dark web hacking forum BreachStars.

• Company L is a leading computer device maker in Switzerland, with 2024 revenue estimated at about USD 4.3 billion.

*The full report is available upon request and for XARVIS subscribers.