logo

Alleged Police Tipline Data Sale, iOS and Adobe Exploits, RDWeb Access Listings, and Gunra Recruitment

ID: 6280e9f1-1e85-5011-b13f-0ad6840c569f

STIX ID: report--6280e9f1-1e85-5011-b13f-0ad6840c569f

Feed Name: SOCRadar Blog

Threat Score
80/100

Date Published: 2026-04-13

Date Updated: 2026-04-30

Author: Ameer Owda

...
...

SOCRadar’s Dark Web monitoring identified multiple underground posts: an alleged auction for 8.3M U.S./Canada tipline records; a claimed full-chain iOS 18–18.7 exploit bundled with the GhostBlade stealer; multiple RDWeb access listings claiming elevated (cloud/domain) privileges; an alleged Adobe Acrobat/Reader 0day tied to in-the-wild exploitation (CVE-2026-34621 context); and recruitment for the Gunra ransomware affiliate program. These items indicate active marketplace trading of data, access, and exploitation tooling that raise immediate patching, monitoring, and incident response concerns.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.