HellsKey Black Hat

HellsKey Black Hat is a 2026 cybercrime service brand centered on a breach-data and OSINT search platform, a separate marketplace and the sale of offensive tooling. Actor-controlled advertisements claim search across credentials, domains, usernames, IPs, phones, URLs and endpoints, along with API access, gallery functions and weekly data updates.

The actor advertises two onion services: one for the search platform and another for a marketplace offering tool publication, breach content, a Zone-H archive, encrypted chat and storefront functions. Pricing varies sharply across campaigns and payments are advertised in Bitcoin and USDT, signaling a volatile, promotion-driven service model rather than a stable public tariff.

A product styled Silent Killer / The Phantom Module v2.0 is marketed as a zero-click multi-CMS RCE module with stealth, privilege escalation and self-cleaning features. No sample or independent test validates those claims, so the product is recorded as advertised capability and no ATT&CK technique is assigned to HellsKey itself.