⚖️ MANDATORY LEGAL & ETHICAL DISCLAIMER (UK Computer Misuse Act 1990 / Sri Lanka Computer Crimes Act No. 24 of 2007 / UEL Ethics): All Dark Web, CVE, and malware research published on this platform is gathered strictly via passive OSINT observation for defensive academic and cybersecurity remediation purposes. Unauthorized offensive use of any Indicators of Compromise (IoCs) or YARA signatures is strictly prohibited.

Member & Researcher Login

Demo Accounts (Password for all: password):
• Subscriber: student@uel.ac.uk
• Researcher: researcher1@aims-cti.org
• Lead Admin: admin@aims-cti.org

Create SaaS Account (2 Free Papers Included)

Published Dark Web & CVE Research Papers

CVE-2024-37085 TLP:AMBER
Dark Web Leak Site Telemetry: LockBit 3.0 Linux ESXi & Proxmox Hypervisor Targeting

By Researcher 1 (Dark Web Lab) | Category: Dark Web Ransomware Lab

Passive monitoring of onion leak sites indicates a 42% surge in ransomware affiliates targeting virtualized enterprise hypervisors and misconfigured storage networks.

T1486 - Data Encrypted for Impact Read Full Paper →
CVE-2024-27834 TLP:CLEAR
Critical Authentication Bypass & RCE in Enterprise Web Control Panels

By Researcher 2 (CVE & Malware Analyst) | Category: CVE Exploitation Analysis

Analysis of underground exploit broker listings and CISA KEV telemetry reveals active exploitation of authentication bypass vulnerabilities across web hosting infrastructures.

T1190 - Exploit Public-Facing Application Read Full Paper →
CVE-2025-0102 TLP:AMBER
Underground Infostealer Logs: Automated Credential Stuffing Against Cloud Gateways

By Researcher 1 (Dark Web Lab) | Category: Dark Web Forum Intelligence

Analysis of RedLine and LummaC2 stealer logs traded on darknet markets shows widespread harvesting of saved browser credentials for corporate VPN and cloud portals.

T1555.003 - Credentials from Web Browsers Read Full Paper →
CVE-2025-1109 TLP:GREEN
Linux Web Server SEO Spam & Obfuscated PHP Backdoor Injection Campaign

By Researcher 3 (Defense Lab) | Category: Malware & Cyber Defense

Investigation into automated Linux shared-hosting compromises injecting Japanese/Pharma SEO spam and persistent cron-based PHP web shells.

T1505.003 - Server Software Component: Web Shell Read Full Paper →