Anomali Labs analyzed attacks against the reputation of FTSE 100 companies highlighting the availability in the Dark Web of employees data. 81 companies in the UK had potentially malicious domain registrations against them in the past three months. Experts have found 5,275 employee email and clear text password combinations available on Dark Web, on crime forums, on paste sites, or posted through accidental exposure. The data gathered with this technique are usually sold in the underground or used in further attacks against companies.”]
Source: https://securityaffairs.co/wordpress/48075/deep-web/dark-web-brand-spoofing.html