ZeroFox Daily Deep and Dark Web Intelligence - September 10, 2026

ZeroFox Daily Deep and Dark Web Intelligence - September 10, 2026

Product Serial: D-2026-09-10a

TLP:CLEAR

Here is a curated list of critical incidents and compromised data observed on deep and dark web ransomware sites, forums, and marketplaces ingested into the ZeroFox Platform in the past 24 hours.

Standing Intelligence Requirements

For the most up-to-date list of ZeroFox’s Intelligence Requirements, please visit: https://cloud.zerofox.com/intelligence/advisories/14956

Link to Download

View the full report for today here

Key Findings

• Ransomware and Digital Extortion: Multiple threat actor groups posted new leak site entries, including The Gentlemen Ransomware, Qilin Ransomware, Play Ransomware, Storm Ransomware and Anubis Ransomware.
• Unauthorized Access Marketplace: Threat actors advertised VPN and Fortinet access allegedly tied to an unnamed India-based financial services company and an unnamed France-based car and truck rental consumer services company, on deep and dark web (DDW) forum Exploit.
• Data Dissemination and Telemetry: Threat actors posted several data sale claims referencing organizations including Rezcomm, Panama-based platforms, and an India-based consulting firm, SetuBridge Solutions, along with France-based individual consumer data. Separately, credential intelligence systems ingested over 1.9 billion combined compromised account credentials (CAC) and botnet CAC between August 13 and September 9, 2026 reporting period.