loader image
Skip to main content

Dark Web Monitoring Platform & Breach Detection 2026 | DarkThreatX

Glossary

Dark web monitoring glossary

Plain-English definitions of the dark web, breach and threat-intelligence terms you will encounter. A reference for security teams, MSPs and anyone protecting their data.

A to Z

Key terms explained

Dark web

The part of the internet intentionally hidden and accessible only through anonymising software such as Tor, where stolen data and illicit goods are frequently traded.

Deep web

All web content not indexed by search engines, including private databases and login-protected pages. Most of it is legitimate, unlike the dark web.

Tor

The Onion Router, an anonymity network used to access .onion sites and host much of the dark web.

Stealer log

A package of data harvested from an infected device by infostealer malware, typically containing saved passwords, cookies, autofill data and system details.

Infostealer

Malware such as RedLine, Lumma or Raccoon that silently steals credentials, cookies and files from a victim device and exfiltrates them for sale.

Combolist

A bulk list of email and password pairs compiled from breaches, used for credential-stuffing attacks.

Credential stuffing

An attack that uses leaked username and password pairs to automatically attempt logins across many services, exploiting password reuse.

Initial access broker

A criminal who gains and then sells access to compromised networks, often to ransomware groups.

Paste site

A site where text is posted publicly; attackers use them to leak or share stolen data and credentials.

Ransomware leak site

A dark web site where ransomware groups publish stolen data to pressure victims who refuse to pay.

Data breach

An incident in which protected data is accessed or disclosed without authorisation, often ending up for sale on the dark web.

Session cookie theft

Stealing active session tokens so an attacker can hijack a logged-in session and bypass passwords and MFA.

Carding

The trade and fraudulent use of stolen payment-card data on underground forums and marketplaces.

PII

Personally identifiable information such as names, addresses, IDs and dates of birth that can be used for identity theft.

Doxxing

Publishing private personal information about an individual online, often to harass or enable fraud.

Threat intelligence

Collected and analysed data about threats and threat actors used to anticipate and defend against attacks.

Check if your data is exposed

Run a free dark web scan and see your exposure in seconds.

Run a free dark web scan