Background pattern dots
Cyber Threat Intelligence from the Underground

Discover what takes place on the deep and dark web

Download Report
Abstract Data

The deep and dark web, also known as the cybercriminal underground, is the place where threat actors connect, share plans, sell goods or services and recruit assistance for malicious activity. Understanding how it operates and the intelligence available is critically important to proactively defend your environment from an attack - for it is here that threat actors often disclose their intentions before an attack is launched.


The State of the Underground 2024

Access the latest underground trends to help your organization develop defensive strategies in line with threat actor activity.

Compromised Credentials

Discover the changes in global credit card fraud and initial access broker market movements.

Ransomware Trends

Learn more about the ransomware groups dominating the headlines and the uptick in attacks.

Messaging Platforms

We reveal the methods threat actors are using to communicate, highlighting the shift from dark web forums to messaging platforms.

Download your copy
SOTU 2024 square

Take a tour of the underground

Join our Senior Analyst as he takes you on a guided tour of the deep and dark web. Learn how to access, extract and use threat intelligence from the underground to enhance your security defenses.

Watch Now
Tour of the Underground Webinar thumbnail

A day in the life of a threat actor

Ever wondered what life as a threat actor on the cybercriminal underground is like? Join us as we give you a rare insight into the mind of a hacker and the tools they use to undertake malicious activities.

Watch Now
A day in thelife of a hacker

Discover how to use CTI from the cybercriminal underground

The State of the Cybercrime Underground 2023

The State of the Cybercrime Underground 2023

Get our annual review of the trends and developments from the cybercriminal underground. Discover how threat actors are changing tactics to help drive your security strategy for 2023.

Read now
Wholesale Access Markets & Ransomware

Wholesale Access Markets & Ransomware

Major ransomware attacks can start with endpoint access purchased for $10 by bad actors on underground markets. Learn more about wholesale access markets in our latest threat research.

Read now
Threat Hunting for Effective Risk Management

Threat Hunting for Effective Risk Management

Protect Critical Assets and Minimize Risk with Proactive, Contextual Threat Intelligence

Read now

Use cases for dark web threat intelligence

Compromised credentials, credit card detection & data leaks

Set up customizable alerts to notify you of leaked employee credentials or customer data leaked on the deep and dark web, including instant messaging apps, IRC chats and limited-access dark web forums and marketplaces. Receive a breakdown of leaked credit cards by BINs, geography or issuer.

View use case
Compromised account alerts from the dashboard
Access the deep and dark web with Cybersixgill

On demand product demonstration

In less than 5 minutes, our product experts demonstrate how Cybersixgill enables security teams to access cyber threat intelligence from the underground to enhance threat detection and threat hunting, alerting users to attacks before they are weaponized.

CTI demo video screenshot

Transforming Threat Intelligence With AI

Cybersixgill IQ, our powerful generative AI capability turns raw intelligence into human-readable, contextual summaries, finished reporting and an always-available AI assistant, making threat intelligence more accessible to everyone at every level of experience.

Learn more about IQ
IQ logo and hero character

It has exceeded all our projections: It’s like having tomorrow’s newspaper in hand today. Not only did Cybersixgill provide our fraud teams with real-time intelligence, it has transformed our ability to understand and minimize digital risk across the entire organization.

CISO, Financial services organization

Our Data, Your Way

Cyber Threat Intelligence is available within our SaaS Portal that supports both single and multi-tenancy users, via API or integration into your existing technology.

Learn more
background pattern

Get started with Cyber Threat Intelligence