Weekly Intelligence
Weekly Darkweb: October 2026, Week 2
☑️ Weekly Darkweb: October 2026, Week 2
🔍 Singaporean Air Cargo Firm 'G' Defense Logistics Data for Sale on Dark Web
• On October 9, a post disclosing military cargo transport data stolen from Singaporean air cargo logistics firm 'G' was found on the dark web hacking forum 'TierOne.'
✓ Company 'G': An unlisted logistics company established in 1970, providing air and ocean freight, cross-border transport, and contract logistics services across 16 cities in 9 countries, employing over 600 personnel.
• The threat actor 'EclipseSupport' claimed that the data exfiltrated from 'G's system includes Singapore Army logistics information, military helicopter repair routes, military drone projects and bidding materials, as well as contact details for key personnel and major partner entities, providing Tox and Session accounts with strong anonymity as contact channels for transactions.
• The actor identified themselves as part of the ransomware group 'Eclipse' and listed 'G' on their leak site, threatening to release the data after a specified period.
🔍 Taiwanese Shipping Line 'T' Targeted in Ransomware Attack and Leaks
• On October 12, a post claiming the theft of 4.0 GB of internal operational data from Taiwan-based intra-Asia container shipping line 'T' was observed on a ransomware group site.
✓ Company 'T': A major Taiwanese container shipping company providing service primarily across key Asian routes, reporting annual revenue of approximately USD 1.285 billion in 2025.
• The ransomware gang 'n0n' claimed to have exfiltrated a total of 4.0 GB of data (comprising 2,585 data files), including container cargo manifests, gate movement logs, shipment booking messages, vessel schedules, terminal master data, and internal accounting files.
✓ 'n0n': An emerging ransomware group targeting maritime and logistics entities, simultaneously exposing and threatening port and logistics companies in Japan, Indonesia, Singapore, Morocco, and China on the dark web.
• The ransomware gang claimed that the exfiltrated data contains sensitive trade secrets, client relationships, and internal business processes, demanding of USD 10 million (approx. 95 BTC).
🔍 Bangladesh Navy Internal Data(135 GB) for Sale on Dark Web
• On October 14, a post advertising the sale of internal Bangladesh Navy data was uploaded to the dark web hacking forum 'Exploit.in.'
• The threat actor 'Cyb3R_Shubh4m' claimed to possess 135GB of data containing naval aviation and unmanned aerial vehicle operations, anti-drone systems, key Coast Guard outpost maps, naval aviation organization charts, officer roster including ranks, photos, and service records.
• The actor listed the selling price at USD 5,000 (approx. KRW 7 million) and is prompting purchases via forum private messages.
➢ According to S2W's user profiling tool, the same actor previously posted a data leak listing involving the Bangladesh Air Force on September 29. Since May, the actor has continuously uploaded data leak listings involving military-related government agencies in Pakistan, including the Navy, Army, military intelligence services, and Federal Investigation Agency (FIA).