logo

Darkhub Hacking-for-Hire Portal Promotes Crypto Fraud and Spyware Services

ID: 645ba128-6154-5e4d-883a-21996bbd9e6a

STIX ID: report--645ba128-6154-5e4d-883a-21996bbd9e6a

Feed Name: GBHackers

Threat Score
55/100

Date Published: 2026-05-06

Date Updated: 2026-05-06

Author: Mayura Kathir

...
...

Darkhub is a newly observed Tor-accessible hacking-for-hire marketplace (onion domain 7comssbegmmbxdi7nu7obids2urmkqnmxao5ojbesga3hxmns2yjnxqd.onion) advertising account takeovers (Instagram, Telegram, WhatsApp, email), mobile surveillance, location tracking, and financial fraud services; researchers also linked a partially routable public IP (38.127.*.*) hosted by ULTAHOST to its backend, indicating some infrastructure exposure. Although the offerings imply potential for targeted compromise and financial loss, analysts warn many such platforms operate as advance-fee scams and the actual capability and active exploitation are unverified.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.