• About WordPress
    • WordPress.org
    • Documentation
    • Learn WordPress
    • Support
    • Feedback
Skip to content
May 26, 2026
  • Linkedin
  • Twitter
  • Facebook
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Watchtower
  • Cyber Criminals
  • Data Leak
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
  • Vulnerability Report
Light/Dark Button
  • Home
  • News
  • Cyber Security
  • DarkOverlord hacker group member arrested by Serbian police
  • Cyber Security

DarkOverlord hacker group member arrested by Serbian police

Ddos May 20, 2018 2 minutes read

Serbian authorities recently arrested a 38-year-old man from Belgrade suspected of being a member of the Dark Overlord hacker group.

DarkOverlord first stepped into sight in June 2016. It took a medical insurance database from a company in Farmington, Missouri, which included personal details of 47,864 patients.

Not only that, it also stole a database of medical institutions in the Midwestern United States that contained personal details of 210,000 patients. Another database is owned by the Athens Orthopedic Clinic in Atlanta, Georgia, and involves personal details of 397,000 patients.

Founded in 1997, Netflix (Nasdaq NFLX) is an online video rental provider headquartered in Los Gato, California. In May 2017, the company was hacked by DarkOverlord and some TV drama resources that have not yet officially aired were stolen.

In addition, in the same month, DarkOverlord also claimed to have obtained ABC a new game program Steve Harvey’s Funderdome related resources for the upcoming 8 episodes, but due to the low visibility of the program, it did not cause much concern.

On October 2, 2017, DarkOverlord issued a death threat to the Johnston Community School District in Iowa, USA. Some of these schools were forced to close temporarily. DarkOverlord claimed to have stolen a large amount of student personal data, including names, phone numbers, home addresses, and voice mail, and sent messages to schools and parents that they would harm or even kill these children.

The identity of the arrested suspect has not yet been announced, but according to the limited details shared by the Serbian authorities, the man is a citizen of Belgrade.  In a press release, Serbian authorities stated that DarkOverlord has attacked at least 50 companies or organizations worldwide and has profited from more than $275,000 in attacks. Its main monetization method is threatening threats – claiming to have stolen sensitive data from the victims. If you do not pay the full amount of ransom, the data will be publicly released.

It is unclear whether the number of members of DarkOverlord may be composed of only one person or may consist of multiple members. If it consists of only one person, the success of this arrest means that the organization will be destroyed. 

Source: Newsweek

Rate this post

Support Our Threat Intelligence

If you find our CVE report and cybersecurity news helpful, consider supporting our work.

Buy Me a Coffee Logo Buy Me a Coffee PayPal
Crypto QR Code
USDT (TRC20):
TN8BdV8cp4T1Cd28gK9qTAnZknzzuwyUtm
USDT (ERC20):
0x3725e1a7d3bc5765499fa6aaafe307fabcd75bce

Share this article:

Facebook Post LinkedIn Telegram

Related posts:

  1. Dragos Report: Top 5 hacker groups have targeted Industrial Control System
  2. AceCryptor Exploited in Multi-Country Attacks, European Businesses Targeted
  3. From US to UAE: APT35 Expands Reach in Cyber Espionage
  4. Operation Digital Eye: Chinese APT Exploits Visual Studio Code Tunnels in High-Stakes Espionage Campaign
  5. International Cybercrime Ring Dismantled: Rydox Marketplace Seized and Administrators Arrested
Tags: DarkOverlord hacker

Search

Translation

CVE WATCHTOWER
🚨

Receive alerts for vulnerabilities being exploited in the wild.

⚑

Get notified instantly when a Proof of Concept (PoC) exploit is published.

πŸ”

Access critical info on vulnerabilities even when marked as "RESERVED".

🧠

Insights powered by decades of expertise and global intelligence sources.

🎯

Customize alerts with up to 10 keywords for your specific tech stack.

πŸ“Š

Export the raw CVE database for SIEM integration and reporting.

Upgrade Package

πŸ”΄ Live Critical Threats

  • CVE-2026-42773CVSS 9.3
    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...
  • CVE-2026-42774CVSS 9.3
    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...
  • CVE-2026-9478CVSS 9.8
    A weakness has been identified in Totolink A8000RU 7.1cu.643_b20200521. Impacted is the...
  • CVE-2026-9477CVSS 9.8
    A security flaw has been discovered in Totolink A8000RU 7.1cu.643_b20200521. This issue...
  • CVE-2026-9476CVSS 9.8
    A vulnerability was identified in Totolink A8000RU 7.1cu.643_b20200521. This vulnerability affects the...
  • CVE-2026-9475CVSS 9.8
    A vulnerability was determined in Totolink A8000RU 7.1cu.643_b20200521. This affects the function...
  • CVE-2026-9458CVSS 9.8
    A vulnerability was identified in Totolink A8000RU 7.1cu.643_b20200521. The impacted element is...
  • CVE-2026-9457CVSS 9.8
    A vulnerability was determined in Totolink A8000RU 7.1cu.643_b20200521. The affected element is...
  • CVE-2026-9456CVSS 9.8
    A vulnerability was found in Totolink A8000RU 7.1cu.643_b20200521. Impacted is the function...
  • CVE-2026-9455CVSS 9.8
    A vulnerability has been found in Totolink A8000RU 7.1cu.643_b20200521. This issue affects...
Powered by CVE WATCHTOWER

Recent Zero-Day Vulnerabilities

  • Exploited in the Wild: Critical OWA Spoofing Flaw (CVE-2026-42897) Hits On-Premises Exchange Servers
  • Exploited in the Wild: Maximum CVSS 10 SD-WAN Flaw (CVE-2026-20182) Grants Admin Control
  • Exploited in the Wild: Critical 9.8 CVSS RCE Hits Canon GUARDIANWALL MailSuite
  • Exploit Code Released: Public PoC Dumps for Windows BitLocker Bypass and SYSTEM Elevation Zero-Days
  • Exploited in the Wild: “Dirty Frag” Linux Vulnerability Grants Instant Root Access
  • Under Active Attack: Ivanti EPMM Zero-Day Exploited in the Wild via Harvested Admin Credentials
Our Websites
  • Penetration Testing Tools
  • The Daily Information Technology
  • Daily CyberSecurity

    • About SecurityOnline.info
    • Advertise with us
    • Announcement
    • Contact
    • Contributor Register
    • Login
    • About SecurityOnline.info
    • Advertise on SecurityOnline.info
    • Contact Us

    When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

    • Disclaimer
    • Privacy Policy
    • DMCA NOTICE
    • Linkedin
    • Twitter
    • Facebook
    • Youtube
    Copyright Daily CyberSecurity Β© All rights reserved.