They're trying to sell military documents on the DarkWeb.

Researchers at Recorded Future's Insikt Group discovered an attempt to sell military-classified documentation on the DarkWeb for less than $200. The documentation being attempted to sell included maintenance documents for the MQ-9 Reaper military drone, as well as personnel assigned to it.

The researchers, after contacting the vendor, were able to find out that this documentation had been obtained through a bug discovered in 2016 in a Netgear router, indicating, in turn, that they had located that router with this vulnerability exposed directly on the Internet through the Shodan search engine.

The investigators were then able to locate the source of the information leak at an air force base in Nevada. The seller was also selling other sensitive material, such as maintenance documentation for the M1 Abrams tank, the origin of which they could not identify.

Recorded Future investigators have made all the information obtained available to the Defence Security Service.