Orion Intelligence

Name: Orion Intelligence
Author: Yasir Saeed

Build | Dark-Origin 7.0.2

Play Protect

Yasir Saeed

4.11100K+ installs

Download APK

Real-time threat intelligence to defend against evolving cyber risks

Orion Intelligence: threat alerts and dark web monitoring

By Hafiz Rahman

Editor, tools and utilities

Alerts on new ransomware variants and phishing campaigns
Profiles of named threat actor groups and their known methods
Dark web monitoring that does not require TOR
Searches for stolen credentials, financial data and leaked documents
Lookups for a suspicious IP address or a domain in breach data

What Orion Intelligence is for

Orion Intelligence is a mobile threat intelligence app. It delivers information about current cyber threats to a phone, and the listing names security professionals, analysts and privacy-conscious users as its intended audience.

Most of the content falls into three groups: malware and ransomware activity, criminal actors, and exposed data. The listing describes the insights as real time.

Alerts on ransomware, phishing and data leaks

The app sends alerts when new ransomware variants appear, when phishing activity is detected, and when compromised data is published. Each alert is tied to a specific threat, so the reader knows what to look at.

The listing presents these alerts as a way to learn about threats before they reach a user's own systems.

Tracking threat actor groups and their methods

You can follow individual threat actor groups and look up the tactics and techniques each one is known to use. The listing says this shows how attackers get into systems.

The listing compares the workflow to MISP, a threat intelligence sharing platform, so people already using that tool are the stated audience for this part.

Dark web and breach monitoring

Orion scans underground forums, marketplaces and leak sites for stolen credentials, financial records and confidential documents. The listing states this works without TOR or direct browsing of those sites.

The same search tools cover two common checks: whether a suspicious IP address is linked to known activity, and whether a domain appears in breach data.

What's new

Apr 5, 2026

Minor Bug fixes && interface updation

About this APK

The build we hold is Orion Intelligence Build | Dark-Origin 7.0.2 (APKS split bundle) for Android 8.0 and up.

Version: Build | Dark-Origin 7.0.2; 702
Requires Android: 8.0+

Package ID: com.hiddenservices.onionservices
Format: APKS split bundle
Malware scan: Google Play Protect
Permissions: 17 declared · 4 sensitive; Camera
Microphone
Modify files on your device
Read files on your device
Signed by: CN=Android, O=Google Inc.
Certificate SHA-256: ca1ea4ac0fa0c64aeed27bd41ee19bc5d50284b592b480005b899afc036f9308