Inside the dark web: Stolen identities for 95¢, malware, and scams-for-hire

Malwarebytes Labs (mid–June 2026) published a collection of threat reports covering: large-scale data exposure and marketplace activity on the dark web (including a 24‑billion‑record dump and multiple breach leaks like ShinyHunters/Kodak and a Texas Parks & Wildlife vendor exposing ~3M passports/driver’s licenses); active malware campaigns (EtherRAT infrastructure, Rokarolla Android banking trojan that targets 200+ banking/crypto apps, SocGholish distribution network); device- and IoT‑level compromises (AryStinger botnet absorbing thousands of outdated D‑Link routers); multiple scam and frauds