Dark Web update: CVE-2024-38077 RCE exploit, 30M telecom records, and RDWeb access hitting the markets this week

Just a quick rundown of what we're seeing in the underground markets right now. Threat actors are actively shopping around a mix of exploits, initial access, and massive databases.

The current claims include an RCE exploit for CVE-2024-38077, 30 million Pakistan telecom records, WineStyle customer data, RDWeb access to a Spanish manufacturer, and a Moscow health database.

Most of these claims remain unverified at this stage, but the potential fallout is obvious. Whether it's an IAB selling RDWeb access to a ransomware cartel or telecom data fueling social engineering campaigns, having timely alerts on this chatter is critical. It gives you a head start to mitigate the risk and strengthen your posture before the attacks actually launch.

You can read the full breakdown of this week's dark web activity here: https://socradar.io/blog/pakistan-telecom-winestyle-moscow-health-data/