{
	"id": "4d135db7-caa9-4327-b03e-125c9fc5359c",
	"created_at": "2026-04-06T00:10:45.362673Z",
	"updated_at": "2026-04-10T03:28:17.509269Z",
	"deleted_at": null,
	"sha1_hash": "916fa910f9b6d54719fe8350f4b2010c66b16362",
	"title": "Documents For Sale on the Dark Web",
	"llm_title": "",
	"authors": "",
	"file_creation_date": "0001-01-01T00:00:00Z",
	"file_modification_date": "0001-01-01T00:00:00Z",
	"file_size": 51442,
	"plain_text": "Documents For Sale on the Dark Web\r\nBy Guru Writer\r\nPublished: 2022-09-14 · Archived: 2026-04-05 16:55:54 UTC\r\nNew research published in a blog post today by dark web researchers Searchlight Security reveals the severity of\r\nearlier claims that Nato was assessing classified military documents being sold on the dark web. The blog post\r\nalso explores the wider problem of classified documents being sold online.\r\nAt the end of last month, it was reported that hackers (known as “adrastea”) claimed to be selling data from the\r\nEuropean company MBDA Missile Systems, reportedly the world’s second largest manufacturer of missiles.\r\nLouise Ferrett, Threat Intelligence Analyst at Searchlight Security, investigated these claims using the company’s\r\nCerberus platform.\r\nWhilst the BBC reported that MBDA acknowledged that some of its data was included in the stash it denied that it\r\ndid not own the documents that were leaked, blaming one of its suppliers instead. Searchlight Security noted:\r\n“When we investigated, we found that this denial was contested by the adrastea user when they posted an\r\nadvertisement for the data on Russian cybercrime forum Exploit on August 5th:\r\nhttps://www.itsecurityguru.org/2022/09/14/documents-for-sale-on-the-dark-web/\r\nPage 1 of 2\n\nScreenshot from Searchlight Security platform.\r\n“In this post, the hackers claimed to have “confidential information about employees of companies, which took\r\npart in the development of closed military projects”, “activities in the interests of the Ministry of Defense of the\r\nEuropean Union”, and “design documentation of their airbase, missile systems, and systems of coastal defense”.”\r\nThe Cerberus platform also flagged that the group had advertised the same MBDA data on other platforms.\r\nSearchlight Security goes on to offers valuable insight into the world of dark web selling:\r\n“Firstly, this case is yet another reminder to treat attackers’ claims about the data they possess with skepticism.\r\nWhile the sample files accessed by the BBC show that the data adrastea is selling certainly is sensitive, that does\r\nnot necessarily mean it has come from MBDA as they have advertised,” reads the blog.\r\nAdditionally, the blog suggests, this case demonstrates how cybercriminals seek to use the dark web to\r\ncommercialise stolen data. The report also highlights how sensitive the type of data obtained and on the market is,\r\nhighlighting the importance of dark web intelligence and research.\r\nLast month, IT Security Guru writer Cole Aungle sat down with Searchlight Security to discuss all things dark\r\nweb. \r\nSource: https://www.itsecurityguru.org/2022/09/14/documents-for-sale-on-the-dark-web/\r\nhttps://www.itsecurityguru.org/2022/09/14/documents-for-sale-on-the-dark-web/\r\nPage 2 of 2",
	"extraction_quality": 1,
	"language": "EN",
	"sources": [
		"Malpedia",
		"MISPGALAXY"
	],
	"references": [
		"https://www.itsecurityguru.org/2022/09/14/documents-for-sale-on-the-dark-web/"
	],
	"report_names": [
		"documents-for-sale-on-the-dark-web"
	],
	"threat_actors": [
		{
			"id": "b8963354-6ff9-4ffe-b6e7-763f6d9858ac",
			"created_at": "2024-06-25T02:00:05.038351Z",
			"updated_at": "2026-04-10T02:00:03.658601Z",
			"deleted_at": null,
			"main_name": "Adrastea",
			"aliases": [],
			"source_name": "MISPGALAXY:Adrastea",
			"tools": [],
			"source_id": "MISPGALAXY",
			"reports": null
		}
	],
	"ts_created_at": 1775434245,
	"ts_updated_at": 1775791697,
	"ts_creation_date": 0,
	"ts_modification_date": 0,
	"files": {
		"pdf": "https://archive.orkl.eu/916fa910f9b6d54719fe8350f4b2010c66b16362.pdf",
		"text": "https://archive.orkl.eu/916fa910f9b6d54719fe8350f4b2010c66b16362.txt",
		"img": "https://archive.orkl.eu/916fa910f9b6d54719fe8350f4b2010c66b16362.jpg"
	}
}