Resources
  • Newsletter
  • News Highlights
Weekly Darkweb: February 2026, Week 3
2026.02.25

☑️ Weekly Darkweb – February Week 3, 2026



🔍 DDoS Attacks Target Japanese Private and Political Entities Amid #OpJapan


• On Feb 14-16, multiple hacktivist groups claimed DDoS attacks against Japanese private and political or organizations as part of the #OpJapan campaign.


• On Feb 15, [NoName057(16) 🇷🇺] claimed attacks on nine targets, including a major brokerage’s website, local LDP chapters, regional airports, and the Japan Chamber of Commerce and Industry (JCCI).


[NNM057(16) eng vers] claimed access to a Japanese parking NVR(Network Video Recorder) on Feb 15 and an industrial plant employee’s workstation on Feb 14, releasing video evidence of the intrusion.


• On Feb 16, BD Anonymous targeted the JCCI, citing the Japanese government’s silence on Palestine as the motive for the attack.



🔍 Wave of Ransomware Attacks Targets Major Taiwanese Enterprises


• A series of ransomware attacks targeting major Taiwanese firms has been identified over the past week.


Pharma Firm N (Feb 15): Hit by ‘INC’ group, leading to a 430GB data leak risk. Proof included 30 screenshots of clinical reports, NDAs, and ID copies


Motorcycle Manufacturer K (Feb 17): Targeted by ‘Space Bear.’ Stolen data reportedly includes patents, R&D data, financial records, clients & partners information, and design blueprints.


Logistics Firm Q (Feb 18): Confirmed hit by ’The Gentlemen’ ransomware group, with a negotiation deadline set for February 28.



🔍 Indonesia’s National Carrier G Hit by The Gentlemen Ransomware


• On Feb 18, Indonesia’s national flag carrier G was listed on the data leak site of the ‘The Gentlemen’ ransomware group.


✓ Founded in 1948, carrier G is a state-owned airline operating over 90 international routes.


• This month alone, ‘The Gentlemen’ group has disclosed 64 victims, including numerous entities across Asia (Japan, India, Philippines, Malaysia, Taiwan, etc.)



👉 Subscribe to <Weekly Darkweb> and get the latest newsletter every week.
Subscribe on LinkedIn
This newsletter is based on news derived from big data collected from over 400 million encrypted pages and channels, including those on the dark web and Telegram.

☎️ Contact us: https://s2w.inc/en/contact

*The full report is available upon request and for XARVIS subscribers.


List