Dark Web Roundup: Metree, WuBook Customer Data and SonicWall Access Allegedly for Sale

SOCRadar's Dark Web Team has identified several fresh dark web posts of concern to businesses and their customers. One listing claims to offer a customer database from Metree, a South Korean e-commerce platform, containing over 1 million records including user IDs, emails, names, phone numbers and addresses. Another claims to leak more than 4.5 million user records from WuBook, an Italian hospitality software provider, though the sample data appears limited to names and user IDs.

Separately, an initial access broker is reportedly auctioning access to a US-based automotive parts and engineering company with over $30 million in annual revenue. The listing claims domain user and local administrator privileges across roughly 136 hosts, gained via a SonicWall VPN, access that could allow ransomware deployment or further compromise if genuine. Additional posts allege leaked student records from Israel's campus.gov.il portal (over 102,000 records) and a Kenyan vehicle valuation database with more than 1.2 million entries.

While none of these claims have been independently verified, such postings illustrate the ongoing trade in stolen data and network access on underground forums, and the risk this poses to customers, staff and partner organisations through phishing, fraud and further intrusion.

Key Takeaway: Australian SMBs using VPN appliances or third-party platforms should monitor for credential exposure, enforce multi-factor authentication, and review access logs regularly to catch unauthorised access early.