☑️ Weekly Darkweb – March Week 2, 2026

🔍 DDoS Attacks on Israeli Defense, Financial Firms Detected on Telegram

• On the 10th and 11th, messages claiming DDoS attacks against Israeli defense and financial firms were posted on the Telegram channels 'BD Anonymous' and 'Conquerors Electronic Army'.

→ [Israeli Defense Company R] On the 10th, the Telegram channel 'BD Anonymous' posted a message claiming a DDoS attack against Israeli state-owned defense company R.

→ [Israeli Defense Company E] On the 10th, 'BD Anonymous' posted a message claiming a DDoS attack along with the domain address of the electronic warfare equipment development division of Israeli defense company E. The company is Israel's largest defense contractor, reporting about $6.8 billion in revenue in 2024.

→ [Central Bank of Israel] On the 11th, the Telegram channel 'Conquerors Electronic Army' claimed a DDoS attack on the Central Bank of Israel, posting an Arabic message calling for a "strong blow" to Israel's financial economy and payment applications.

🔍 Major South Korean Elevator Manufacturer H Targeted By Everest Ransomware

• On the 10th, major South Korean elevator manufacturer H was found listed on the leak site of the Everest ransomware gang.

• The threat actors claimed to have stolen more than 1.1TB of data from company H, stating that if competitors obtain the data, they could replicate product designs, identify supply chains to gain pricing advantages, and accelerate global certification.

✓ Compromised Data: Product engineering data including design and assembly drawings (2010-2016), detailed specifications for elevator materials, KC/CE/EN certification portfolios, global expansion strategies, HR data, and financial data.

• As proof of the attack, the ransomware gang posted images showing a KC certification review email thread, directories of certification and design files, design drawings, CCTV footage, and safety certificates.

🔍 Taiwanese Security Firm C Targeted by New Shisa Leaks Ransomware gang

• On the 10th, Taiwanese security solutions Firm C was listed on the leak site of the Shisa Leaks ransomware gang.

✓ C is a Taiwan-based solutions provider with official partnerships with global IT security companies, including endpoint security giant K and data security firm F.

• As proof of the attack, the ransomware gang uploaded images showing an internal network scan and shared folders, a 55GB list of server and system assets, and a 67GB drive file directory.

→ The Shisa Leaks ransomware gang first emerged in February 2026 and has posted 14 companies on its leak site within a month.

*The full report is available upon request and for XARVIS subscribers.