Dark Web Informer :verified_paw:

Website: https://darkwebinformer.com

Website Pricing (Crypto payments are fully automated): https://darkwebinformer.com/pricing

Socials: https://darkwebinformer.com/socials

API Access: https://darkwebinformer.com/api-details

About Dark Web Informer: https://darkwebinformer.com/about-dark-web-informer

X: https://x.com/DarkWebInformer

Updated: 2026-07-20

Public Key

npub1xcpw8fqmxj2xmqwqql70ttsd4t39n9a5up93ql5zu44qjrqdnwqsfthx5s

NIP-05 Address

DarkWebInformer@infosec-exchange.mostr.pub

Profile Code

nprofile1qqsrvqhr5sdnf9rds8qq0l844cx64cjej76wqjcs06pw26sfpsxehqgpz3mhxue69uhhyetvv9ujuerpd46hxtnfduqs6amnwvaz7tmwdaejumr0dsvsvq4c

Publishing to

relay.damus.io

nos.lol

Author Public Key

npub1xcpw8fqmxj2xmqwqql70ttsd4t39n9a5up93ql5zu44qjrqdnwqsfthx5s

Show more details

Last Notes

2026-08-25 22:36:40 UTC

🚨 Nitter development has stopped after X Corp. sent cease-and-desist letters demanding the permanent takedown of Nitter instances and the project’s repository.
The maintainer says nitter.net is now offline while legal advice is being sought. Nitter had operated for more than seven years.
https://media.infosec.exchange/infosec.exchange/media_attachments/files/117/158/536/793/473/062/original/2663f6fbfb634f61.png

2026-08-16 16:21:46 UTC

🚨🇰🇷 South Korea National Health Insurance Service dataset allegedly leaked on a cybercrime forum, 48M records advertised for sale
⠀
A forum seller claims to be offering a dataset allegedly containing personal and health insurance-related information from South Korea's National Health Insurance Service (NHIS). The seller says the dataset contains approximately 48 million records.
⠀
The advertised data includes:
⠀
• Names
• Resident registration numbers
• Gender and dates of birth
• Ages
• Insurance types
• Subscriber classifications
• Employer information
• Household identifiers
• Monthly income information
• Monthly insurance premiums
• Premium share information
• Number of dependents
• Regional information
• Insurance acquisition dates
• Last health checkup dates
• Long-term care grades
• Payment arrears status
• Card status
• Data export dates
⠀
The seller is asking $450 for the dataset and has published sample records in the forum listing.
⠀
The seller's claims and the authenticity, source and scope of the allegedly exposed data have not been independently verified.
⠀
💥 No delays. No guessing. No redactions. Get the intel threat actors see, the moment they post it. darkwebinformer.com/pricing
https://media.infosec.exchange/infosec.exchange/media_attachments/files/117/106/101/794/663/367/original/5f61f2ba85812e7d.png

2026-08-16 01:15:19 UTC

🚨🇺🇸 McDonald’s internal employee dataset allegedly stolen from Azure tenant, 1.7M+ records advertised on a cybercrime forum
⠀
A forum seller claims to be offering an internal McDonald’s Corporation employee dataset allegedly downloaded directly from an Azure tenant using compromised credentials. The seller says the dump contains more than 1.7 million records.
⠀
The advertised data includes:
⠀
• Full names
• Employee IDs
• Email addresses
• Job titles
• Departments
• Phone numbers
• Physical addresses
• Employee account records
• Service account records
• Other tenant account information
⠀
The seller has published a sample containing approximately 8,000 records and is asking interested buyers to submit offers. The poster also claims to possess additional company datasets available for sale.
⠀
The seller's claims and the authenticity, source and scope of the allegedly exposed data have not been independently verified.
⠀
💥 No delays. No guessing. No redactions. Get the intel threat actors see, the moment they post it. darkwebinformer.com/pricing
https://media.infosec.exchange/infosec.exchange/media_attachments/files/117/102/537/513/659/943/original/d7c9d6ddde0e65ab.png

2026-08-01 14:54:28 UTC

🚨 Kyndryl Azure/Entra tenant data allegedly offered for sale
A forum actor claims to be selling an internal data dump belonging to Kyndryl, a global IT infrastructure services company operating across more than 60 countries. The actor says the data was downloaded directly from the company’s Azure/Entra environment using compromised credentials.
The listing advertises more than 170,000 records, including employee accounts, service accounts, administrative roles, display names, email addresses, and other tenant account information.
A sample containing 2,200 records was published alongside the post.
This claim is currently unverified.
💥 No delays. No guessing. No redactions. Get the intel threat actors see, the moment they post it. darkwebinformer.com/pricing
https://media.infosec.exchange/infosec.exchange/media_attachments/files/117/020/823/236/921/843/original/7ef1197658cd89c4.png

2026-07-17 20:50:41 UTC

‼️ New Dark Web Informer Blog Post!
Title: OpenSSL HollowByte Flaw Lets 11-Byte TLS Requests Exhaust Server Memory
Link: https://darkwebinformer.com/openssl-hollowbyte-flaw-lets-11-byte-tls-requests-exhaust-server-memory/
💥 Get early visibility into underground claims, including unblurred screenshots, before they turn into headlines: https://darkwebinformer.com/pricing

2026-07-15 22:34:38 UTC

💥 Forgejo: Forgejo is a self-hosted, open-source Git software forge for managing repositories, issues, pull requests, CI/CD, and software projects.
https://forgejo.org

2026-07-15 22:33:29 UTC

💥 Forgejo: Forgejo is a self-hosted, open-source Git software forge for managing repositories, issues, pull requests, CI/CD, and software projects.
https://forgejo.org
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/926/369/540/710/253/original/ec71ba032188cb71.png

2026-07-15 16:26:34 UTC

‼️ New Dark Web Informer Blog Post!
Title: Romanian Land Registry Agency ANCPI Allegedly Breached and Hit With Ransomware, Citizen Data and Source Code for Sale
Link: https://darkwebinformer.com/romanian-land-registry-agency-ancpi-allegedly-breached-and-hit-with-ransomware-citizen-data-and-source-code-for-sale/

2026-07-14 16:16:58 UTC

‼️ New Dark Web Informer Blog Post!
Title: Welsh Doxbin Administrator Jailed for Encouraging Swatting Attacks Across Three Countries
Link: https://darkwebinformer.com/welsh-doxbin-administrator-jailed-for-encouraging-swatting-attacks-across-three-countries/

2026-06-29 17:27:58 UTC

🚨🇫🇷 Saint-Médard-en-Jalles municipal police dataset claim posted on a forum
LogipolWeb.fr is a web platform used to support daily management for municipal police services.
A forum user claims a dataset tied to the Police municipale de Saint-Médard-en-Jalles was leaked, allegedly containing municipal police records, logs, files, and case-related documents.
Advertised data includes:
• 470MB of data
• CSV, JSON, PDF, and image files
• 158,104 log lines
• 39,405 files in the fichiers folder
• 6,700 lost property records
• 1,679 handrail / incident-style records
• 767 call records
• 127 public reception records
• References to 14,642 additional victim files
Details:
• Target: Police municipale de Saint-Médard-en-Jalles / LogipolWeb.fr
• Country: France
• Sector: Government / Municipal police
• Actor: ChimeraZ
• Claim: Municipal police software dataset allegedly leaked
• Volume: 470MB claimed
• Category: Dataset leak claim
Claim is unverified.
💥 Stop guessing what's redacted. Paid subscribers see everything: http://darkwebinformer.com/pricing
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/834/571/036/565/477/original/705d135c7c4cef29.png
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/834/571/029/035/208/original/3a73098e098a5695.png

2026-06-28 20:50:05 UTC

🚨🇧🇷 Amigo Tech patient dataset claim posted on a forum
Amigo Tech is a Brazilian healthtech company connected to healthcare scheduling and patient management services.
A forum user claims a partial breach tied to Amigo Tech, allegedly containing 121,678 patient records from March 2026.
Advertised data includes:
• Patient names
• CPF numbers
• Birth dates
• Phone numbers
• Appointment details
• Doctor names
• Insurance IDs
• Address and city fields
• Appointment status fields
• Created and updated timestamps
Details:
• Target: Amigo Tech
• Country: Brazil
• Sector: Healthcare / Healthtech
• Actor: hammer
• Claim: Partial patient dataset allegedly exposed
• Volume: 121,678 patients claimed
• Category: Dataset leak claim
Claim is unverified.
💥 Stop guessing what's redacted. Paid subscribers see everything: http://darkwebinformer.com/pricing
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/829/703/651/305/851/original/83f4531cf0f09115.png

2026-02-11 16:41:24 UTC

‼️🇰🇼 A data set allegedly from Zain Kuwait, a major telecommunications provider, has been posted for sale containing 3,849,601 subscriber records totaling 11.3GB in JSON format.
The breach is dated 2026 and includes subscriber numbers, owner names, and associate names. Sample data shows Arabic-language subscriber records with phone numbers, verification status, and spam flags.
The seller offers tiered pricing in Monero: 15 XMR for takedown, 10 XMR for exclusive purchase with deletion, 5 XMR for non-exclusive access, or 2 XMR for the scraping exploit itself.
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/052/989/216/160/172/original/3af896c0c9ba0626.png
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/052/989/203/693/696/original/a9e25b850d4224c8.png

2026-02-10 20:02:46 UTC

Story of my life. 😭
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/048/118/743/353/697/original/d5ccf5d851ceac23.webp

2026-02-06 19:38:52 UTC

❗️🇺🇸 A group calling themselves "The Islamic Cyber Resistance in Iraq - Team 313" has claimed responsibility for a cyberattack against the Internet Archive (archive.org).
The group posted a screenshot showing the site timing out, claiming the attack caused the website to go offline and was ongoing at the time of their announcement.
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/025/374/527/091/495/original/c1d860684f1279ff.png

2026-02-06 00:20:50 UTC

‼️ Dutch authorities just seized one Windscribe VPN server without a warrant, claiming they'll return it after they "fully analyze it."
They say their real concern "is the unredacted Epstein files we had on there..."
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/020/821/121/627/915/original/08308233d455cf6d.png

2026-01-30 16:48:13 UTC

‼️ An international law enforcement operation called "Operation Switch off" has concluded, targeting what authorities describe as a large-scale illegal IPTV streaming network.
Led by Italy's Catania Public Prosecutor's Office and coordinated through Eurojust, Europol, and Interpol, the investigation identified 31 individuals allegedly connected to a transnational criminal organization. The suspects face accusations including unauthorized broadcasting of access-controlled content, computer fraud, and money laundering.
According to investigators, the network captured and redistributed live broadcasts and on-demand content from major platforms including Sky, DAZN, Amazon Prime, Netflix, Paramount, and Disney+, allegedly serving millions of users worldwide.
More than 100 Italian Postal Police officers executed searches across 11 Italian cities and 14 international locations, with cooperation from authorities in the United Kingdom, Spain, Romania, Kosovo, Canada, India, South Korea, and the United Arab Emirates.
The year-long investigation built on intelligence from a previous operation called "Taken Down." Authorities allege the suspects used cryptocurrency investments, shell companies, and fictitious asset registrations to obscure proceeds that reportedly generated millions of euros monthly.
The operation disrupted approximately 1,000 Italian resellers and cut service to over 100,000 end users in Italy, with millions more affected globally. Three illegal IPTV platforms were seized in Italy, while investigators in Romania identified a significant distribution operation running six servers.
The original video is in 360p. Source: https://www.poliziadistato.it/articolo/166979f86bd0846335000880
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/985/068/226/878/280/original/aeee38b875f0d78a.mp4

2026-01-25 01:58:07 UTC

Clawdbot: A personal AI assistant you run on your own devices.
GitHub: https://github.com/clawdbot/clawdbot
Clawdbot answers you on the channels you already use (WhatsApp, Telegram, Slack, Discord, Google Chat, Signal, iMessage, Microsoft Teams, WebChat), plus extension channels like BlueBubbles, Matrix, Zalo, and Zalo Personal. It can speak and listen on macOS/iOS/Android, and can render a live Canvas you control.
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/953/253/246/849/388/original/ae07fbb027b6c046.jpg

2026-01-23 21:20:57 UTC

‼️Microsoft reportedly provided the FBI with a set of BitLocker encryption keys that allowed investigators to unlock laptops belonging to criminal suspects, according to reports.
https://techcrunch.com/2026/01/23/microsoft-gave-fbi-a-set-of-bitlocker-encryption-keys-to-unlock-suspects-laptops-reports
The case centered on multiple individuals suspected of committing fraud tied to the Pandemic Unemployment Assistance program in Guam, a U.S. territory in the Pacific.

2026-01-15 23:32:44 UTC

A Hacker Shares His Biggest Fears
A white hat hacker, a cybersecurity analyst with more than 30 years of experience at a major Silicon Valley firm, reflects on why he walked away from black hat hacking to use his skills for the greater good.
He explains the unsettling truth about how vulnerable modern systems really are, from the possibility of attackers crippling the American power grid or shutting down critical medical facilities to how effortlessly someone with nothing more than WiFi and spare time can access private information most people assume is secure.
Video Credit: youtube.com/@VICE
Video Date: August 11th, 2021
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/901/723/916/286/946/original/ec8943640825feb0.mp4

2026-01-10 15:50:29 UTC

‼️17.5 Million Instagram Accounts Exposed in Major API Data Leak
Meta is facing a significant security incident after cybersecurity firm Malwarebytes confirmed a breach impacting 17.5 million Instagram users.
The leaked dataset, which includes usernames, email addresses, phone numbers, and partial physical addresses, is now being actively circulated on dark web forums.
In the aftermath, millions of Instagram users have reported receiving unexpected password reset emails from the platform’s legitimate domain: security@mail[.]instagram[.]com.
Although the emails are authentic, they were not requested by recipients, fueling widespread confusion over whether Instagram is experiencing a glitch or if users are being targeted in phishing attempts.
Security researchers now believe these unsolicited reset emails are directly linked to the breach, suggesting threat actors may be using the exposed data to initiate account recovery flows or to obscure targeted phishing activity.
The dataset is believed to have been obtained by a hacker known as “Solonik”, with the underlying issue reportedly tied to an API-related exposure dating back to 2024 (see screenshot 2).
As of now, Meta has not issued an official statement regarding the incident.
Sources: https://cybersecuritynews.com/instagram-data-leak-exposes-sensitive-info-of-17-5m-accounts/
https://cyberinsider.com/malwarebytes-warns-of-instagram-data-breach-impacting-17-5-million-users/
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/871/593/655/931/961/original/1b91be7c78d052e2.png
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/871/593/663/194/671/original/42462a623c6c05d5.png

2026-01-03 00:05:42 UTC

A hacker going by the name Martha Root... takes down a white supremacist dating website and leaks all of the data. Good f*cking shit @BackTwoTheRoot!
okstupid[.]lol
https://x.com/DarkWebInformer/status/2007241716831793170

2025-12-26 19:12:21 UTC

KeePassXC: A modern, secure, and open-source password manager that stores and manages your most sensitive information.
GitHub: https://github.com/keepassxreboot/keepassxc
Highly recommended!
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/787/453/270/887/269/original/b6939621fbfe7a67.png

2025-12-25 02:44:29 UTC

🚨 AWS is currently having an outage. Many services are being affected by it; Arc Raiders, Fortnite, Steam, Rocket League, Epic Games, Embark Studios, PlayStation Network, etc.
Happy Holidays!
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/777/907/467/223/379/original/af36162f3365bd14.png
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/777/907/467/868/773/original/ea9f9552b5c83313.png
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/777/907/469/535/648/original/ea6dc8e1e77e6832.png

2025-12-23 17:49:11 UTC

Anubis: A Web AI Firewall Utility that weighs the soul of your connection using one or more challenges in order to protect upstream resources from scraper bots.
GitHub: https://github.com/TecharoHQ/anubis
Docs: https://anubis.techaro.lol/
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/770/139/346/060/812/original/2f6a9598c4aa03b7.png

2025-12-13 20:12:45 UTC

🚨 Ledger, Binance, Coinbase, Gemini, and Kraken User Leads For Sale on a Hacker Forum
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/714/080/561/114/404/original/c437af0b39931b76.png

2025-12-08 19:48:47 UTC

Silent.Link: Buy global mobile 4G/5G Internet access and burner phone numbers instantly and privately on any modern eSIM-compatible smartphone.
KYC: Terms explicitly state KYC will never be requested.
X: @silentlink1
Payment: Monero (XMR), Bitcoin (BTC), Lightning
Clearnet: https://silent.link
Dark Web: http://silentlnit5ryavvfz5vw7s4qg62jujd666lnc4tg2chj64zuwuqtvqd[.]onion
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/685/675/019/159/095/original/c7fa78f70605971f.png

2025-12-02 23:33:45 UTC

Dread: "As a vendor, LE is trying to attack OPSEC via direct deals with BTC. Just a warning for all vendors."
Thread: https://dreadytofatroptsdj6io7l3xptbet6onoyno2yv7jicoxknyazubrad[.]onion/post/6151bf0dbac72e4800a1
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/652/586/620/560/762/original/528b967156b43808.png

2025-11-30 20:42:55 UTC

Dread: "FEDs completely f*cked Graphene of one of the Scattered Spider kids"
Thread: https://dreadytofatroptsdj6io7l3xptbet6onoyno2yv7jicoxknyazubrad[.]onion/post/1ecb68690e978ed6e076
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/640/590/207/089/523/original/bed510370c39d3ec.png
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/640/590/218/234/462/original/7f8106451b6ed157.png

2025-11-24 19:59:48 UTC

Never seems to get old.
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/606/446/913/788/003/original/d4718e41d84e176e.jpeg

2025-11-23 18:04:47 UTC

My @nprofile…znqz was suspended and I can't even login to appeal. No email either. GGs. All of my code/repos is locally backed up.
https://github.com/darkwebInformer/
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/600/330/705/373/646/original/c8f53c9f17665874.png

2025-11-18 15:58:26 UTC

🚨🇺🇸 Alleged Spirit Halloween Data Leak with 3,600 Employees Exposed
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/571/523/072/322/920/original/1b6d6a16f254d6b4.png

2025-11-16 20:33:01 UTC

🚨Claimed Bulk Auction of 800 Fullz With 70% Validity Rate
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/561/277/344/575/101/original/bdfb22d80effbf3a.png

2025-11-16 17:25:53 UTC

🚨CrazyRDP raid footage has been released showing law enforcement loading many servers into different trucks
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/560/542/586/258/583/original/dd41e7aed530defb.mp4

2025-11-12 23:16:03 UTC

Ransomware Attack Update for the 12th of November 2025
https://darkwebinformer.com/ransomware-attack-update-for-the-12th-of-november-2025/

2025-11-12 17:35:25 UTC

It's 1995 & you startup a 486DX
Video Credit: youtube.com/@PCUSER486
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/537/931/167/438/750/original/7705ac80814922d1.mp4

2025-11-11 17:32:04 UTC

🚨RansomHouse Ransomware claims 3 victims
🇫🇮 Octomeca Oy
🇵🇭 Public Safety Mutual Benefit Fund
🇲🇹 Polidano Group
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/532/254/974/395/434/original/7c4b78adde7ed68c.png

2025-11-06 22:48:09 UTC

Just a reminder that there is an informative secure messaging comparison website. https://www.securemessagingapps.com/
Filter out the ones that are not privacy friendly... Google, Apple, Facebook, Twitter, etc.
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/505/187/271/300/936/original/dcaefdc8db2c1e57.png

2025-11-06 22:34:14 UTC

⚠️NaviChat: "A tor-based messaging platform with end-to-end encryption and no logging."
Onion: http://navi5jbi3apijnyvp5ck6q4n656niqt4jrleiwb2eeaokonfxs22wiid[.]onion
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/505/131/510/172/153/original/b97ca3290be9a07d.png

2025-11-06 22:16:32 UTC

🚨 Claimed Leak of Data of ISIS
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/505/062/987/940/891/original/1de00a90d5629874.png

2025-11-06 22:08:45 UTC

Why can't some of you just take the time to read the DNM Bible? It's literally not that difficult. https://github.com/DarkWebInformer/dnmbible
Thread: https://dreadytofatroptsdj6io7l3xptbet6onoyno2yv7jicoxknyazubrad[.]onion/post/2d0e1855371d862d13cb
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/505/032/375/519/697/original/ff3e53c5c2945930.png

2025-11-01 00:04:18 UTC

Check Point has a Halloween inspired Threat Map going on. Pretty neat.
https://darkwebinformer.com/check-point-live-cyber-threat-map/
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/471/512/831/652/529/original/e922a842fceda39b.png

2025-10-29 23:38:40 UTC

Lol, wtf... currently the Aisuru botnet C2 domain is ranked #1 in the world of top domains.
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/460/086/112/991/287/original/1665c488c611de54.png

2025-10-29 17:01:06 UTC

🚨 Microsoft is currently investigating a world wide outage related to DNS.
https://x.com/MSFT365Status/status/1983571232122671591
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/458/524/079/108/032/original/adb64ebfc128c166.jpg
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/458/524/084/228/558/original/9068f70580e3498c.png
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/458/524/086/569/217/original/f166992551f12859.png
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/458/524/092/309/839/original/3f0fe682720feab6.png

2025-10-22 19:11:02 UTC

CypherGoat: Swap your crypto at the beeest rate on the market. Fast, private, and open source.
Clearnet: https://cyphergoat.com
Onion: https://cyphergmw4huw7jzhat3misfm5jj2m4nvafockqbj7i5rrlec6mobdid[.]onion
I2P: http://cjorx2hmv3jxs5sshxhw73nmkiayupim6gfye3sfts2pzmjgk5rq.b32.i2p
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/419/397/767/728/150/original/1662354bdd590284.png

2025-10-19 21:39:37 UTC

🚨🇺🇸 Alleged Sale of RDP Access to US Business Services Company
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/402/996/231/222/845/original/e39b992ea5ad0f7b.png

2025-10-19 20:34:31 UTC

🚨Alleged Sale of Admin Access to Magento 2 website
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/402/738/782/844/305/original/88c6c4c6caefeb1e.png

2025-10-19 19:02:18 UTC

🚨CVE-2025-38001: Linux HFSC Eltree Use-After-Free - Debian 12 PoC
GitHub: https://github.com/0xdevil/CVE-2025-38001
Bounty: $82,000
Write-up: https://syst3mfailure.io/rbtree-family-drama/
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/402/376/464/640/223/original/5e28bc75df96e933.mp4

2025-10-19 18:36:57 UTC

🚨🇺🇸 Alleged sale of 1,700,000,000 Facebook scrapped data including ID, gender, DOB, place, relationship, and friends count
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/402/277/912/168/781/original/5ee470d72031e7e6.png

2025-10-19 18:33:18 UTC

2025-10-19 17:03:10 UTC

🚨 Alleged Data Breach of CyberCoders.com Exposing 35 Million Records
📌 United States
• Industry: Recruitment / Technology
• Threat Actor: wikkid
• Network: Clearnet
Details: Threat actor wikkid is claiming responsibility for a massive data breach affecting CyberCoders.com, a U.S.-based recruiting and staffing platform connecting employers with professionals in tech, finance, engineering, and healthcare sectors.
The leak reportedly includes 35 million records across multiple datasets containing full names, email addresses, phone numbers, employment and education histories, salary details, and security clearance data.
Files listed include:
candidates.jsonl – 32.8M records
emails.jsonl – 27.7M records
resumes.jsonl – 10.3M records
Total size: 274 GB uncompressed (38 GB compressed).
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/401/907/282/073/697/original/9372804f8739a9c3.png

2025-10-19 16:46:16 UTC

🚨Qilin Ransomware has claimed 26 Victims
🇬🇧 JA Jennings
🇲🇽 BIOPHARMEX, SA de CV
🇨🇦 Stephenson's Rental Services
🇬🇧 London Women's Clinic
🇺🇸 Scales Sales & Service
🌐 Laloma
🇺🇸 Khatami Law
🌐 SANgel
🇺🇸 Kudela & Weinheimer
🇪🇸 Distribuciones Camba
🇵🇱 Klima-Therm
🇺🇸 The Blood and Marrow Transplant Group of Georgia
🇺🇸 Platinum Wines & Spirits
🌐 Sports Medicine and Orthopaedics
🇺🇸 Winholt Equipment Group
🇺🇸 All Weather Architectural Aluminum
🇨🇿 Wassa, SRO
🇺🇸 SIGN Fracture Care International
🇺🇸 Indian Spring Country Club
🇨🇦 Grande Prairie Public Library
🇺🇸 BARCO Rent-A-Truck
🇫🇮 Octomeca OY
🇬🇧 Gas Generator Solutions
🇺🇸 Cellini Design Center
🌐 Stowaway Storage
🇺🇸 Long Island Weight Loss Institute
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/401/831/130/777/890/original/6e3640c1c1c368ff.jpg

2025-10-19 16:43:40 UTC

🚨Qilin Ransomware has claimed 27 Victims
🇬🇧 JA Jennings
🇲🇽 BIOPHARMEX, SA de CV
🇨🇦 Stephenson's Rental Services
🇬🇧 London Women's Clinic
🇺🇸 Scales Sales & Service
🌐 Laloma
🇺🇸 Khatami Law
🌐 SANgel
🇺🇸 Kudela & Weinheimer
🇪🇸 Distribuciones Camba
🇵🇱 Klima-Therm
🇺🇸 The Blood and Marrow Transplant Group of Georgia
🇺🇸 Platinum Wines & Spirits
🌐 Sports Medicine and Orthopaedics
🇺🇸 Winholt Equipment Group
🇺🇸 All Weather Architectural Aluminum
🇨🇿 Wassa, SRO
🇺🇸 SIGN Fracture Care International
🇺🇸 Indian Spring Country Club
🇨🇦 Grande Prairie Public Library
🇺🇸 BARCO Rent-A-Truck
🇫🇮 Octomeca OY
🇬🇧 Gas Generator Solutions
🇺🇸 Cellini Design Center
🌐 Stowaway Storage
🕊️ Commemoration of Commander Martyr Reza Awada (handala)
🇺🇸 Long Island Weight Loss Institute
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/401/831/130/777/890/original/6e3640c1c1c368ff.jpg

2025-10-19 03:12:36 UTC

Hackers are exploiting a 0-day vulnerability in Windows Remote Access Connection Manager in ongoing attacks.
CVE: CVE-2025-59230
https://gbhackers.com/hackers-exploit-windows-remote-access-connection-manager-0-day/

2025-10-18 23:22:13 UTC

It’s more peaceful when everything is private. #privacy
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/397/736/178/164/756/original/792696d1930072c1.jpg

2025-10-18 21:26:34 UTC

- reply

Stay Connected with Dark Web Informer
Get full access to exclusive intelligence, unredacted screenshots, claim URLs, early alerts and more at darkwebinformer.com
Join Telegram: t.me/SliceForLife🔪
Follow the X Bot for More Intel: x.com/DarkWebIntelBot

2025-10-18 21:26:25 UTC

🚨🇵🇪 MC INVERSIONES INMOBILIARIAS Construction Company has Fallen Victim to RADAR Ransomware
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/397/280/363/831/013/original/37e171a70a909457.png

2025-10-18 20:36:23 UTC

🚨TK HOLDINGS GROUP has been Claimed a Victim to RADAR Ransomware
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/397/084/915/536/103/original/b444a75f4840b0eb.png

2025-10-18 20:23:39 UTC

- reply

2025-10-18 20:23:17 UTC

Also updated the Threat Intelligence Analytics currently for Elite subscribers. It should be easier to view the onions on the below graph. I also expanded all of the other graphs for better viewing. Still working on a better view and more features.
https://darkwebinformer.com/threat-intelligence-analytics/
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/397/033/710/785/051/original/e1acb2800fdadf65.png

2025-10-18 19:42:40 UTC

- reply

2025-10-18 19:42:28 UTC

If you are an Elite subscriber, I made a lot of bug fixes to the Darknet Markets Timeline. There is still some inconsistencies and bugs but the flow is a lot better. 2024 and 2025 are the remaining years to be added.
https://darkwebinformer.com/darknet-markets-timeline/

2025-10-18 19:09:06 UTC

- reply

2025-10-18 19:09:04 UTC

🚨CVE-2025-21420: Proof of Concept for Windows Disk Cleanup Tool EoP
GitHub: https://github.com/moiz-2x/CVE-2025-21420_POC
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/396/741/814/097/842/original/fa863eb989021bcc.mp4

2025-10-18 17:09:11 UTC

🚨CVE-2025-49144: A high-severity local privilege escalation flaw in the Notepad++ installer affecting version 8.8.1 and earlier.
GitHub: https://github.com/TheTorjanCaptain/CVE-2025-49144_PoC
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/396/268/766/985/595/original/452fbab567720afc.png

2025-10-18 16:54:06 UTC

🚨Alleged Data Breach Exposing 1.5 Million Israeli Settlers
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/396/211/188/999/535/original/4ca4b0ff0fb3bd8e.png

2025-10-18 16:44:22 UTC

🚨Claimed Sale of Advanced Phishlets
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/396/172/887/277/107/original/86c03d239cfacf16.png

2025-10-18 01:33:12 UTC

🚨AirBorne: Full PoC Framework for CVE-2025-24252 & CVE-2025-24132
AirBorne is a combined proof-of-concept (PoC) framework targeting two serious vulnerabilities in Apple's AirPlay service.
GitHub: https://github.com/ekomsSavior/AirBorne-PoC
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/392/589/184/110/815/original/e23b72272a581d8a.png

2025-10-17 23:54:18 UTC

New Ransomware Note: Kyber
https://darkwebinformer.com/ransom-notes/

2025-10-17 21:32:23 UTC

🚨Colins Aerospace / RTX.com have been claimed by Everest Ransomware
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/391/643/067/424/721/original/10407d0dc61f8367.png
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/391/643/071/568/093/original/72e3ff5d8f7a8617.png

2025-10-17 21:00:56 UTC

Some of you are paranoid af. At least the comments are funny.
https://www.reddit.com/r/darknet/comments/1o5hdd9/tracking/
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/391/519/461/204/557/original/c0dbc8b60961a503.png

2025-10-17 20:33:43 UTC

Getting closer on the layout being done, and fixing some minor CSS issues, then just need to add the content. Still looking good for next week. Will definitely be adding features on to this.
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/391/406/944/354/605/original/4380fabf3e994967.png
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/391/406/974/739/340/original/86791bb06b34c35a.png

2025-10-17 18:01:12 UTC

🚨PoC & Exploit for CVE-2025-32023 / PlaidCTF 2025 "Zerodeo"
GitHub: https://github.com/leesh3288/CVE-2025-32023
Advisory: https://github.com/redis/redis/security/advisories/GHSA-rp2m-q4j6-gr43
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/390/811/669/983/197/original/7c9b5cd6e6eb7539.png

2025-10-17 17:23:54 UTC

🚨🇺🇸 Alleged Data Breach of TripWorks
https://darkwebinformer.com/alleged-data-breach-of-tripworks/

2025-10-17 16:43:05 UTC

🚨Alleged sale of ATM cash‑out platform called “Cutlet Maker"
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/390/504/409/993/522/original/f5aabf243c4bceb8.png
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/390/504/420/433/446/original/426738694183d74c.png

2025-10-17 16:17:31 UTC

🚨🇬🇧 Alleged Data Breach of University of Oxford
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/390/404/263/800/055/original/c9e622b810b408f9.png

2025-10-16 23:51:34 UTC

Looks like X is going to start to allow you to acquire handles. This is currently a Premium Business feature.
The domain: https://handles.x.com
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/386/527/407/704/668/original/16fefa7c9910c569.png
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/386/527/429/635/329/original/98a1cb2f589f797e.png

2025-10-16 22:40:43 UTC

My main Telegram account and the Telegram channel (Phasyr) were both just banned... again.

2025-10-16 20:20:59 UTC

🚨🇬🇧 BMP Europe Ltd has Fallen Victim to PLAY Ransomware
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/385/700/085/654/555/original/799a5aeedcc2955c.png

2025-10-16 20:06:45 UTC

🚨🇺🇸 CL0P Ransomware has Published Data of American Airlines
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/385/644/098/447/561/original/196b3b945250ad10.png

2025-10-16 18:37:39 UTC

Working on a seizure archive page of verified and unverified seizures. It's almost done. There is some things that need to be adjusted CSS wise, as well as adding articles, images, etc. Hoping for this to be ready next week!
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/385/288/371/393/122/original/1baa71fb352a1331.png
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/385/288/405/458/074/original/01beb7d498c95e03.png

2025-10-16 17:00:10 UTC

🚨CVE-2025-24071 // CVE-2025-24054: PoC for NTLM Hash Leak via RAR/ZIP Extraction and .library-ms File
Write-up: https://cti.monster/blog/2025/03/18/CVE-2025-24071.html
GitHub: https://github.com/0x6rss/CVE-2025-24071_PoC
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/384/908/376/741/557/original/7e111e19062807a2.mp4

2025-10-16 16:08:44 UTC

⚠️Dread: Rate my OpSec
2.5/10
Thread: https://dreadytofatroptsdj6io7l3xptbet6onoyno2yv7jicoxknyazubrad[.]onion/post/247a8b022fed66e9b89d
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/384/707/086/456/870/original/5891f8d0663f48fe.png

2025-10-16 15:07:28 UTC

🚨🇪🇸 Alleged Data Sale of University of Cádiz
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/384/467/265/390/491/original/c72f712b070ff446.png

2025-10-15 22:51:03 UTC

Massachusetts Man Sentenced to Four Years for PowerSchool Hacking Incident
https://www.reuters.com/legal/government/massachusetts-man-behind-powerschool-hacking-gets-4-years-prison-2025-10-14/
Matthew Lane, 20, was sentenced by U.S. District Judge Margaret Guzman in Worcester, Massachusetts, after pleading guilty in June to charges stemming from the hacking of two companies, one of which was PowerSchool, based in Folsom, California.
Judgement (PDF): https://s3.documentcloud.org/documents/26187692/matthew-lane-judgement-095113233744.pdf
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/380/627/800/960/909/original/a4c7a15a00089b16.webp

2025-10-15 22:38:02 UTC

🚨🇪🇸 Alleged Ransomware Claim of Agencia Tributaria (Spanish Tax Administration Agency)
📌 Spain
• Industry: Government / Taxation
• Threat Actor: Qilin
• Network: Dark Web
Details: The ransomware group Qilin has allegedly claimed responsibility for breaching Spain’s Agencia Tributaria, the national tax agency responsible for managing tax and customs systems. The listing indicates 238,799 files totaling 60 GB, alongside 16 leaked screenshots. The agency, which operates with over 26,000 employees and an annual budget of $1.5 billion, is responsible for tax enforcement and collection for both national and EU resources.
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/380/576/589/012/496/original/8244a138dd52eb9b.png
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/380/576/590/751/176/original/2782f4dba295021a.png

2025-10-15 22:24:12 UTC

Daily Dose of Dark Web Informer - 15th of October 2025
https://darkwebinformer.com/daily-dose-of-dark-web-informer-15th-of-october-2025/

2025-10-15 21:45:07 UTC

Ransomware Attack Update for the 15th of October 2025
https://darkwebinformer.com/ransomware-attack-update-for-the-15th-of-october-2025/

2025-10-15 20:37:37 UTC

SLSH updated their Onion site with the following message and new Telegram.
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/380/103/211/898/212/original/1d8a2dc380797220.png

2025-10-15 20:00:41 UTC

🚨PLAY Ransomware Claims 5 Victims
🇺🇸 Royal Thai
🇺🇸 Koch & White Heating & Cooling
🇺🇸 Legacy Manufacturing
🇺🇸 Global Shop Solutions
🇺🇸 Cellucap Manufacturing
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/379/957/161/509/853/original/1985cdcdf1d58733.png

2025-10-15 18:20:51 UTC

🚨ShinyHunters clearnet now directs to the following message under the Cloudflare DNS.
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/379/565/298/832/452/original/28f0c2f36f8465b6.png

2025-10-15 17:48:15 UTC

⚠️Dread: Rate my OpSec
1/10
Thread: https://dreadytofatroptsdj6io7l3xptbet6onoyno2yv7jicoxknyazubrad[.]onion/post/cc4621f5ee45577d134b
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/379/436/264/262/638/original/dee2e99b3aea6581.png

2025-10-15 17:27:20 UTC

🚨CVE-2025-33073: PoC Exploit for the NTLM reflection SMB flaw
GitHub: https://github.com/mverschu/CVE-2025-33073
▪️GUI (Screenshot 1)
▪️CLI (2)
▪️Custom command (3)
▪️SOCKS (4)
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/379/353/727/809/076/original/3cf36f82267ea18f.png
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/379/353/733/053/587/original/e9214fee03ee39d1.png
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/379/353/736/155/627/original/4043cbd39de32679.png
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/379/353/744/919/183/original/edd9036e344361c6.png

2025-10-15 17:03:56 UTC

🚨🇺🇸 East Jefferson General Hospital has Fallen Victim to Sinobi Ransomware
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/379/262/059/961/917/original/2b66944e5a44cd23.png

2025-10-15 16:51:17 UTC

🚨 Alleged Sale of Tron and EVM Crypto Drainer Tool
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/379/212/445/493/808/original/710cdaa13b0e4de9.png

2025-10-15 16:21:44 UTC

🚨🇺🇸 U.S. Identity Data Sold on a Popular Forum; Fullz, SSN, DL, EIN, More
https://darkwebinformer.com/u-s-identity-data-sold-on-a-popular-forum-fullz-ssn-dl-ein-more/

2025-10-15 16:00:03 UTC

🚨🇺🇸 Navigator Business Solutions (NBS) has Fallen Victim to PEAR Ransomware
Data Volume: 9.9 TB
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/379/010/912/794/475/original/bc3de981d7d6d06d.png

2025-10-15 15:52:41 UTC

🚨🇬🇧 Alleged Data Leak of Teknobuilt
https://darkwebinformer.com/alleged-data-leak-of-teknobuilt/

2025-10-15 15:39:46 UTC

🚨🇧🇴 Alleged Data Breach of Fiscalía General del Estado
https://darkwebinformer.com/alleged-data-breach-of-fiscalia-general-del-estado/

2025-10-15 15:17:20 UTC

🚨🇺🇸 Kearney Public Schools has been Claimed by INTERLOCK Ransomware
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/378/843/191/989/912/original/b55ef5a1b95a620d.png
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/378/843/198/322/746/original/34f57298b3b3db9e.png

2025-10-15 01:53:11 UTC

Lenovo CVE-2025-8061: PoC for popping a system shell against the LnvMSRIO.sys driver
GitHub: https://github.com/symeonp/Lenovo-CVE-2025-8061