January 2025 Deep Web and Dark Web Trend Report

This January 2025 dark-web trend report details two active ransomware threats: CL0P leveraged a zero-day (CVE-2024-50623) in Cleo MFT to impact roughly 59 known companies (with a potential wider user base) and is publicly listing and threatening non-negotiating victims; FunkSec is an emergent group publishing >85 alleged incidents and using a Rust-based FunkLocker ransomware, though some leaks may be recycled and the malware appears low-quality. The report highlights the growing risk to corporate file-transfer platforms, urges patching, stronger access controls, and layered defenses, and notes the need to review encryption and backup policies for critical data.