☑️ Weekly Darkweb – April Week 2, 2026

🔍 Taiwanese Aerospace Parts Manufacturer Targeted By WorldLeaks Ransomware

• On the 4th, approximately 500GB of internal data from Taiwanese aerospace components manufacturer N was posted on a leak site operated by the WorldLeaks ransomware gang.

✓ N is listed on the Taiwan Stock Exchange and reports annual revenue of approximately $100 million.

• The leaked data includes internal NAS files covering the full manufacturing process, along with customer data from global OEM company B and aircraft engine manufacturer G, as well as technical documents, certification records, and factory operations data.

✓ NAS (Network Attached Storage): A network-based storage system used within an organization to store and share files.

• If exploited, the data could expose core technologies and enable reverse engineering, while leaked customer documents could potentially trigger broader supply chain security incidents, underscoring the need for caution.

🔍 Sensitive Data of European Aerospace Company A Detected on the Dark Web

• On the 8th, a post distributing sensitive data from European aerospace company A was detected on the dark web hacking forum ‘PwnForums’.

• Forum user ‘AckLine’ claimed to have obtained a 16GB archive containing over 6,000 files, posting an encrypted link and password that allow users to download 16 compressed files.

✓ A similar post distributing Company A’s data was also identified on the Russian hacking forum ‘Exploit’ and the hacking forum ‘Spear’ on the 1st.

→ PwnForums is a newly created hacking forum launched on the 5th as a backup of BreachForums V6, presenting itself as a separate community from BreachForums.

🔍 Japanese Motorcycle Company’s Philippine Subsidiary Affected by Audit Ransomware

• On the 7th, the Philippine subsidiary of Japanese motorcycle company K was found listed on a leak site operated by the Audit ransomware gang.

✓ Company K is a Japan-based global motorcycle manufacturer with subsidiaries across North America, Europe, the Philippines, and Indonesia.

• The Audit ransomware gang claimed to have stolen more than 100GB of data and said it released sample files to verify the breach.

*The full report is available upon request and for XARVIS subscribers.