Dark Web Informer :verified_paw:

I am currently only posting on X and Telegram as of 2026/02/13. Visit my socials below!

Website: https://darkwebinformer.com/

Website Pricing (Includes Crypto): https://darkwebinformer.com/pricing

Socials: https://darkwebinformer.com/socials

API Access: https://darkwebinformer.com/api-details

Donations: https://darkwebinformer.com/donations

Advertise (Only Legitimate Companies): https://darkwebinformer.com/advertising

About Dark Web Informer: https://darkwebinformer.com/about-dark-web-informer

Updated: 2026-02-13

Public Key

npub1xcpw8fqmxj2xmqwqql70ttsd4t39n9a5up93ql5zu44qjrqdnwqsfthx5s

NIP-05 Address

DarkWebInformer@infosec-exchange.mostr.pub

Profile Code

nprofile1qqsrvqhr5sdnf9rds8qq0l844cx64cjej76wqjcs06pw26sfpsxehqgpz3mhxue69uhhyetvv9ujuerpd46hxtnfduqs6amnwvaz7tmwdaejumr0dsvsvq4c

Publishing to

relay.damus.io

nos.lol

Author Public Key

npub1xcpw8fqmxj2xmqwqql70ttsd4t39n9a5up93ql5zu44qjrqdnwqsfthx5s

Show more details

Published at

2026-04-28T20:06:15Z

Kind type

0 Metadata

Event JSON

{ "id": "87b21421ea4c820c5ca7ee3d3043c671279397b2faf06bc7cc0dadd4b29c598e", "pubkey": "3602e3a41b34946d81c007fcf5ae0daae25997b4e04b107e82e56a090c0d9b81", "created_at": 1777406775, "kind": 0, "tags": [ [ "emoji", "verified_paw", "https://media.infosec.exchange/infosec.exchange/custom_emojis/images/000/162/404/original/e464c64f5a98dc53.png" ], [ "proxy", "https://infosec.exchange/users/DarkWebInformer", "activitypub" ], [ "client", "Mostr", "31990:6be38f8c63df7dbf84db7ec4a6e6fbbd8d19dca3b980efad18585c46f04b26f9:mostr", "wss://relay.ditto.pub" ] ], "content": "{\"name\":\"Dark Web Informer :verified_paw:\",\"about\":\"I am currently only posting on X and Telegram as of 2026/02/13. Visit my socials below!\\n\\nWebsite: https://darkwebinformer.com/\\n\\nWebsite Pricing (Includes Crypto): https://darkwebinformer.com/pricing\\n\\nSocials: https://darkwebinformer.com/socials\\n\\nAPI Access: https://darkwebinformer.com/api-details\\n\\nDonations: https://darkwebinformer.com/donations\\n\\nAdvertise (Only Legitimate Companies): https://darkwebinformer.com/advertising\\n\\nAbout Dark Web Informer: https://darkwebinformer.com/about-dark-web-informer\\n\\nUpdated: 2026-02-13\",\"picture\":\"https://media.infosec.exchange/infosec.exchange/accounts/avatars/112/253/795/748/183/030/original/8806fc8e13350e19.png\",\"banner\":\"https://media.infosec.exchange/infosec.exchange/accounts/headers/112/253/795/748/183/030/original/3b116fd806f5e6d6.png\",\"nip05\":\"DarkWebInformer@infosec-exchange.mostr.pub\",\"fields\":[[\"Dark Web Informer\",\"https://darkwebinformer.com\"],[\"X/Twitter\",\"https://www.x.com/DarkWebInformer\"],[\"Medium\",\"https://medium.com/@DarkWebInformer\"],[\"GitHub\",\"https://github.com/DarkWebInformer\"]]}", "sig": "e79cdeb4fc49d3edd6df6781bac10022589b36a88ab073022952774724f2c3e5b6842c5b1829c867eb06ff3c77ed2c8cc7c55e588608f788cb3a01cfb4a521e8" }

Last Notes

2026-02-11 16:41:24 UTC

‼️🇰🇼 A data set allegedly from Zain Kuwait, a major telecommunications provider, has been posted for sale containing 3,849,601 subscriber records totaling 11.3GB in JSON format.
The breach is dated 2026 and includes subscriber numbers, owner names, and associate names. Sample data shows Arabic-language subscriber records with phone numbers, verification status, and spam flags.
The seller offers tiered pricing in Monero: 15 XMR for takedown, 10 XMR for exclusive purchase with deletion, 5 XMR for non-exclusive access, or 2 XMR for the scraping exploit itself.
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/052/989/216/160/172/original/3af896c0c9ba0626.png
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/052/989/203/693/696/original/a9e25b850d4224c8.png

2026-02-10 20:02:46 UTC

Story of my life. 😭
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/048/118/743/353/697/original/d5ccf5d851ceac23.webp

2026-02-06 19:38:52 UTC

❗️🇺🇸 A group calling themselves "The Islamic Cyber Resistance in Iraq - Team 313" has claimed responsibility for a cyberattack against the Internet Archive (archive.org).
The group posted a screenshot showing the site timing out, claiming the attack caused the website to go offline and was ongoing at the time of their announcement.
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/025/374/527/091/495/original/c1d860684f1279ff.png

2026-02-06 00:20:50 UTC

‼️ Dutch authorities just seized one Windscribe VPN server without a warrant, claiming they'll return it after they "fully analyze it."
They say their real concern "is the unredacted Epstein files we had on there..."
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/020/821/121/627/915/original/08308233d455cf6d.png

2026-01-30 16:48:13 UTC

‼️ An international law enforcement operation called "Operation Switch off" has concluded, targeting what authorities describe as a large-scale illegal IPTV streaming network.
Led by Italy's Catania Public Prosecutor's Office and coordinated through Eurojust, Europol, and Interpol, the investigation identified 31 individuals allegedly connected to a transnational criminal organization. The suspects face accusations including unauthorized broadcasting of access-controlled content, computer fraud, and money laundering.
According to investigators, the network captured and redistributed live broadcasts and on-demand content from major platforms including Sky, DAZN, Amazon Prime, Netflix, Paramount, and Disney+, allegedly serving millions of users worldwide.
More than 100 Italian Postal Police officers executed searches across 11 Italian cities and 14 international locations, with cooperation from authorities in the United Kingdom, Spain, Romania, Kosovo, Canada, India, South Korea, and the United Arab Emirates.
The year-long investigation built on intelligence from a previous operation called "Taken Down." Authorities allege the suspects used cryptocurrency investments, shell companies, and fictitious asset registrations to obscure proceeds that reportedly generated millions of euros monthly.
The operation disrupted approximately 1,000 Italian resellers and cut service to over 100,000 end users in Italy, with millions more affected globally. Three illegal IPTV platforms were seized in Italy, while investigators in Romania identified a significant distribution operation running six servers.
The original video is in 360p. Source: https://www.poliziadistato.it/articolo/166979f86bd0846335000880
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/985/068/226/878/280/original/aeee38b875f0d78a.mp4

2026-01-25 01:58:07 UTC

Clawdbot: A personal AI assistant you run on your own devices.
GitHub: https://github.com/clawdbot/clawdbot
Clawdbot answers you on the channels you already use (WhatsApp, Telegram, Slack, Discord, Google Chat, Signal, iMessage, Microsoft Teams, WebChat), plus extension channels like BlueBubbles, Matrix, Zalo, and Zalo Personal. It can speak and listen on macOS/iOS/Android, and can render a live Canvas you control.
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/953/253/246/849/388/original/ae07fbb027b6c046.jpg

2026-01-23 21:20:57 UTC

‼️Microsoft reportedly provided the FBI with a set of BitLocker encryption keys that allowed investigators to unlock laptops belonging to criminal suspects, according to reports.
https://techcrunch.com/2026/01/23/microsoft-gave-fbi-a-set-of-bitlocker-encryption-keys-to-unlock-suspects-laptops-reports
The case centered on multiple individuals suspected of committing fraud tied to the Pandemic Unemployment Assistance program in Guam, a U.S. territory in the Pacific.

2026-01-15 23:32:44 UTC

A Hacker Shares His Biggest Fears
A white hat hacker, a cybersecurity analyst with more than 30 years of experience at a major Silicon Valley firm, reflects on why he walked away from black hat hacking to use his skills for the greater good.
He explains the unsettling truth about how vulnerable modern systems really are, from the possibility of attackers crippling the American power grid or shutting down critical medical facilities to how effortlessly someone with nothing more than WiFi and spare time can access private information most people assume is secure.
Video Credit: youtube.com/@VICE
Video Date: August 11th, 2021
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/901/723/916/286/946/original/ec8943640825feb0.mp4

2026-01-10 15:50:29 UTC

‼️17.5 Million Instagram Accounts Exposed in Major API Data Leak
Meta is facing a significant security incident after cybersecurity firm Malwarebytes confirmed a breach impacting 17.5 million Instagram users.
The leaked dataset, which includes usernames, email addresses, phone numbers, and partial physical addresses, is now being actively circulated on dark web forums.
In the aftermath, millions of Instagram users have reported receiving unexpected password reset emails from the platform’s legitimate domain: security@mail[.]instagram[.]com.
Although the emails are authentic, they were not requested by recipients, fueling widespread confusion over whether Instagram is experiencing a glitch or if users are being targeted in phishing attempts.
Security researchers now believe these unsolicited reset emails are directly linked to the breach, suggesting threat actors may be using the exposed data to initiate account recovery flows or to obscure targeted phishing activity.
The dataset is believed to have been obtained by a hacker known as “Solonik”, with the underlying issue reportedly tied to an API-related exposure dating back to 2024 (see screenshot 2).
As of now, Meta has not issued an official statement regarding the incident.
Sources: https://cybersecuritynews.com/instagram-data-leak-exposes-sensitive-info-of-17-5m-accounts/
https://cyberinsider.com/malwarebytes-warns-of-instagram-data-breach-impacting-17-5-million-users/
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/871/593/655/931/961/original/1b91be7c78d052e2.png
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/871/593/663/194/671/original/42462a623c6c05d5.png

2026-01-03 00:05:42 UTC

A hacker going by the name Martha Root... takes down a white supremacist dating website and leaks all of the data. Good f*cking shit @BackTwoTheRoot!
okstupid[.]lol
https://x.com/DarkWebInformer/status/2007241716831793170

2025-12-26 19:12:21 UTC

KeePassXC: A modern, secure, and open-source password manager that stores and manages your most sensitive information.
GitHub: https://github.com/keepassxreboot/keepassxc
Highly recommended!
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/787/453/270/887/269/original/b6939621fbfe7a67.png

2025-12-25 02:44:29 UTC

🚨 AWS is currently having an outage. Many services are being affected by it; Arc Raiders, Fortnite, Steam, Rocket League, Epic Games, Embark Studios, PlayStation Network, etc.
Happy Holidays!
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/777/907/467/223/379/original/af36162f3365bd14.png
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/777/907/467/868/773/original/ea9f9552b5c83313.png
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/777/907/469/535/648/original/ea6dc8e1e77e6832.png

2025-12-23 17:49:11 UTC

Anubis: A Web AI Firewall Utility that weighs the soul of your connection using one or more challenges in order to protect upstream resources from scraper bots.
GitHub: https://github.com/TecharoHQ/anubis
Docs: https://anubis.techaro.lol/
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/770/139/346/060/812/original/2f6a9598c4aa03b7.png

2025-12-13 20:12:45 UTC

🚨 Ledger, Binance, Coinbase, Gemini, and Kraken User Leads For Sale on a Hacker Forum
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/714/080/561/114/404/original/c437af0b39931b76.png

2025-12-08 19:48:47 UTC

Silent.Link: Buy global mobile 4G/5G Internet access and burner phone numbers instantly and privately on any modern eSIM-compatible smartphone.
KYC: Terms explicitly state KYC will never be requested.
X: @silentlink1
Payment: Monero (XMR), Bitcoin (BTC), Lightning
Clearnet: https://silent.link
Dark Web: http://silentlnit5ryavvfz5vw7s4qg62jujd666lnc4tg2chj64zuwuqtvqd[.]onion
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/685/675/019/159/095/original/c7fa78f70605971f.png

2025-12-02 23:33:45 UTC

Dread: "As a vendor, LE is trying to attack OPSEC via direct deals with BTC. Just a warning for all vendors."
Thread: https://dreadytofatroptsdj6io7l3xptbet6onoyno2yv7jicoxknyazubrad[.]onion/post/6151bf0dbac72e4800a1
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/652/586/620/560/762/original/528b967156b43808.png

2025-11-30 20:42:55 UTC

Dread: "FEDs completely f*cked Graphene of one of the Scattered Spider kids"
Thread: https://dreadytofatroptsdj6io7l3xptbet6onoyno2yv7jicoxknyazubrad[.]onion/post/1ecb68690e978ed6e076
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/640/590/207/089/523/original/bed510370c39d3ec.png
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/640/590/218/234/462/original/7f8106451b6ed157.png

2025-11-24 19:59:48 UTC

Never seems to get old.
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/606/446/913/788/003/original/d4718e41d84e176e.jpeg

2025-11-23 18:04:47 UTC

My @nprofile…znqz was suspended and I can't even login to appeal. No email either. GGs. All of my code/repos is locally backed up.
https://github.com/darkwebInformer/
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/600/330/705/373/646/original/c8f53c9f17665874.png

2025-11-18 15:58:26 UTC

🚨🇺🇸 Alleged Spirit Halloween Data Leak with 3,600 Employees Exposed
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/571/523/072/322/920/original/1b6d6a16f254d6b4.png

2025-11-16 20:33:01 UTC

🚨Claimed Bulk Auction of 800 Fullz With 70% Validity Rate
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/561/277/344/575/101/original/bdfb22d80effbf3a.png

2025-11-16 17:25:53 UTC

🚨CrazyRDP raid footage has been released showing law enforcement loading many servers into different trucks
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/560/542/586/258/583/original/dd41e7aed530defb.mp4

2025-11-12 23:16:03 UTC

Ransomware Attack Update for the 12th of November 2025
https://darkwebinformer.com/ransomware-attack-update-for-the-12th-of-november-2025/

2025-11-12 17:35:25 UTC

It's 1995 & you startup a 486DX
Video Credit: youtube.com/@PCUSER486
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/537/931/167/438/750/original/7705ac80814922d1.mp4

2025-11-11 17:32:04 UTC

🚨RansomHouse Ransomware claims 3 victims
🇫🇮 Octomeca Oy
🇵🇭 Public Safety Mutual Benefit Fund
🇲🇹 Polidano Group
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/532/254/974/395/434/original/7c4b78adde7ed68c.png

2025-11-06 22:48:09 UTC

Just a reminder that there is an informative secure messaging comparison website. https://www.securemessagingapps.com/
Filter out the ones that are not privacy friendly... Google, Apple, Facebook, Twitter, etc.
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/505/187/271/300/936/original/dcaefdc8db2c1e57.png

2025-11-06 22:34:14 UTC

⚠️NaviChat: "A tor-based messaging platform with end-to-end encryption and no logging."
Onion: http://navi5jbi3apijnyvp5ck6q4n656niqt4jrleiwb2eeaokonfxs22wiid[.]onion
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/505/131/510/172/153/original/b97ca3290be9a07d.png

2025-11-06 22:16:32 UTC

🚨 Claimed Leak of Data of ISIS
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/505/062/987/940/891/original/1de00a90d5629874.png

2025-11-06 22:08:45 UTC

Why can't some of you just take the time to read the DNM Bible? It's literally not that difficult. https://github.com/DarkWebInformer/dnmbible
Thread: https://dreadytofatroptsdj6io7l3xptbet6onoyno2yv7jicoxknyazubrad[.]onion/post/2d0e1855371d862d13cb
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/505/032/375/519/697/original/ff3e53c5c2945930.png

2025-11-01 00:04:18 UTC

Check Point has a Halloween inspired Threat Map going on. Pretty neat.
https://darkwebinformer.com/check-point-live-cyber-threat-map/
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/471/512/831/652/529/original/e922a842fceda39b.png

2025-10-29 23:38:40 UTC

Lol, wtf... currently the Aisuru botnet C2 domain is ranked #1 in the world of top domains.
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/460/086/112/991/287/original/1665c488c611de54.png

2025-10-29 17:01:06 UTC

🚨 Microsoft is currently investigating a world wide outage related to DNS.
https://x.com/MSFT365Status/status/1983571232122671591
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/458/524/079/108/032/original/adb64ebfc128c166.jpg
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/458/524/084/228/558/original/9068f70580e3498c.png
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/458/524/086/569/217/original/f166992551f12859.png
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/458/524/092/309/839/original/3f0fe682720feab6.png

2025-10-22 19:11:02 UTC

CypherGoat: Swap your crypto at the beeest rate on the market. Fast, private, and open source.
Clearnet: https://cyphergoat.com
Onion: https://cyphergmw4huw7jzhat3misfm5jj2m4nvafockqbj7i5rrlec6mobdid[.]onion
I2P: http://cjorx2hmv3jxs5sshxhw73nmkiayupim6gfye3sfts2pzmjgk5rq.b32.i2p
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/419/397/767/728/150/original/1662354bdd590284.png

2025-10-19 21:39:37 UTC

🚨🇺🇸 Alleged Sale of RDP Access to US Business Services Company
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/402/996/231/222/845/original/e39b992ea5ad0f7b.png

2025-10-19 20:34:31 UTC

🚨Alleged Sale of Admin Access to Magento 2 website
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/402/738/782/844/305/original/88c6c4c6caefeb1e.png

2025-10-19 19:02:18 UTC

🚨CVE-2025-38001: Linux HFSC Eltree Use-After-Free - Debian 12 PoC
GitHub: https://github.com/0xdevil/CVE-2025-38001
Bounty: $82,000
Write-up: https://syst3mfailure.io/rbtree-family-drama/
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/402/376/464/640/223/original/5e28bc75df96e933.mp4

2025-10-19 18:36:57 UTC

🚨🇺🇸 Alleged sale of 1,700,000,000 Facebook scrapped data including ID, gender, DOB, place, relationship, and friends count
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/402/277/912/168/781/original/5ee470d72031e7e6.png

2025-10-19 18:33:18 UTC

2025-10-19 17:03:10 UTC

🚨 Alleged Data Breach of CyberCoders.com Exposing 35 Million Records
📌 United States
• Industry: Recruitment / Technology
• Threat Actor: wikkid
• Network: Clearnet
Details: Threat actor wikkid is claiming responsibility for a massive data breach affecting CyberCoders.com, a U.S.-based recruiting and staffing platform connecting employers with professionals in tech, finance, engineering, and healthcare sectors.
The leak reportedly includes 35 million records across multiple datasets containing full names, email addresses, phone numbers, employment and education histories, salary details, and security clearance data.
Files listed include:
candidates.jsonl – 32.8M records
emails.jsonl – 27.7M records
resumes.jsonl – 10.3M records
Total size: 274 GB uncompressed (38 GB compressed).
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/401/907/282/073/697/original/9372804f8739a9c3.png

2025-10-19 16:46:16 UTC

🚨Qilin Ransomware has claimed 26 Victims
🇬🇧 JA Jennings
🇲🇽 BIOPHARMEX, SA de CV
🇨🇦 Stephenson's Rental Services
🇬🇧 London Women's Clinic
🇺🇸 Scales Sales & Service
🌐 Laloma
🇺🇸 Khatami Law
🌐 SANgel
🇺🇸 Kudela & Weinheimer
🇪🇸 Distribuciones Camba
🇵🇱 Klima-Therm
🇺🇸 The Blood and Marrow Transplant Group of Georgia
🇺🇸 Platinum Wines & Spirits
🌐 Sports Medicine and Orthopaedics
🇺🇸 Winholt Equipment Group
🇺🇸 All Weather Architectural Aluminum
🇨🇿 Wassa, SRO
🇺🇸 SIGN Fracture Care International
🇺🇸 Indian Spring Country Club
🇨🇦 Grande Prairie Public Library
🇺🇸 BARCO Rent-A-Truck
🇫🇮 Octomeca OY
🇬🇧 Gas Generator Solutions
🇺🇸 Cellini Design Center
🌐 Stowaway Storage
🇺🇸 Long Island Weight Loss Institute
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/401/831/130/777/890/original/6e3640c1c1c368ff.jpg

2025-10-19 16:43:40 UTC

🚨Qilin Ransomware has claimed 27 Victims
🇬🇧 JA Jennings
🇲🇽 BIOPHARMEX, SA de CV
🇨🇦 Stephenson's Rental Services
🇬🇧 London Women's Clinic
🇺🇸 Scales Sales & Service
🌐 Laloma
🇺🇸 Khatami Law
🌐 SANgel
🇺🇸 Kudela & Weinheimer
🇪🇸 Distribuciones Camba
🇵🇱 Klima-Therm
🇺🇸 The Blood and Marrow Transplant Group of Georgia
🇺🇸 Platinum Wines & Spirits
🌐 Sports Medicine and Orthopaedics
🇺🇸 Winholt Equipment Group
🇺🇸 All Weather Architectural Aluminum
🇨🇿 Wassa, SRO
🇺🇸 SIGN Fracture Care International
🇺🇸 Indian Spring Country Club
🇨🇦 Grande Prairie Public Library
🇺🇸 BARCO Rent-A-Truck
🇫🇮 Octomeca OY
🇬🇧 Gas Generator Solutions
🇺🇸 Cellini Design Center
🌐 Stowaway Storage
🕊️ Commemoration of Commander Martyr Reza Awada (handala)
🇺🇸 Long Island Weight Loss Institute
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/401/831/130/777/890/original/6e3640c1c1c368ff.jpg

2025-10-19 03:12:36 UTC

Hackers are exploiting a 0-day vulnerability in Windows Remote Access Connection Manager in ongoing attacks.
CVE: CVE-2025-59230
https://gbhackers.com/hackers-exploit-windows-remote-access-connection-manager-0-day/

2025-10-18 23:22:13 UTC

It’s more peaceful when everything is private. #privacy
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/397/736/178/164/756/original/792696d1930072c1.jpg

2025-10-18 21:26:34 UTC

- reply

Stay Connected with Dark Web Informer
Get full access to exclusive intelligence, unredacted screenshots, claim URLs, early alerts and more at darkwebinformer.com
Join Telegram: t.me/SliceForLife🔪
Follow the X Bot for More Intel: x.com/DarkWebIntelBot

2025-10-18 21:26:25 UTC

🚨🇵🇪 MC INVERSIONES INMOBILIARIAS Construction Company has Fallen Victim to RADAR Ransomware
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/397/280/363/831/013/original/37e171a70a909457.png

2025-10-18 20:36:23 UTC

🚨TK HOLDINGS GROUP has been Claimed a Victim to RADAR Ransomware
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/397/084/915/536/103/original/b444a75f4840b0eb.png

2025-10-18 20:23:39 UTC

- reply

2025-10-18 20:23:17 UTC

Also updated the Threat Intelligence Analytics currently for Elite subscribers. It should be easier to view the onions on the below graph. I also expanded all of the other graphs for better viewing. Still working on a better view and more features.
https://darkwebinformer.com/threat-intelligence-analytics/
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/397/033/710/785/051/original/e1acb2800fdadf65.png

2025-10-18 19:42:40 UTC

- reply

2025-10-18 19:42:28 UTC

If you are an Elite subscriber, I made a lot of bug fixes to the Darknet Markets Timeline. There is still some inconsistencies and bugs but the flow is a lot better. 2024 and 2025 are the remaining years to be added.
https://darkwebinformer.com/darknet-markets-timeline/

2025-10-18 19:09:06 UTC

- reply

2025-10-18 19:09:04 UTC

🚨CVE-2025-21420: Proof of Concept for Windows Disk Cleanup Tool EoP
GitHub: https://github.com/moiz-2x/CVE-2025-21420_POC
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/396/741/814/097/842/original/fa863eb989021bcc.mp4

2025-10-18 17:09:11 UTC

🚨CVE-2025-49144: A high-severity local privilege escalation flaw in the Notepad++ installer affecting version 8.8.1 and earlier.
GitHub: https://github.com/TheTorjanCaptain/CVE-2025-49144_PoC
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/396/268/766/985/595/original/452fbab567720afc.png

2025-10-18 16:54:06 UTC

🚨Alleged Data Breach Exposing 1.5 Million Israeli Settlers
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/396/211/188/999/535/original/4ca4b0ff0fb3bd8e.png

2025-10-18 16:44:22 UTC

🚨Claimed Sale of Advanced Phishlets
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/396/172/887/277/107/original/86c03d239cfacf16.png

2025-10-18 01:33:12 UTC

🚨AirBorne: Full PoC Framework for CVE-2025-24252 & CVE-2025-24132
AirBorne is a combined proof-of-concept (PoC) framework targeting two serious vulnerabilities in Apple's AirPlay service.
GitHub: https://github.com/ekomsSavior/AirBorne-PoC
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/392/589/184/110/815/original/e23b72272a581d8a.png

2025-10-17 23:54:18 UTC

New Ransomware Note: Kyber
https://darkwebinformer.com/ransom-notes/

2025-10-17 21:32:23 UTC

🚨Colins Aerospace / RTX.com have been claimed by Everest Ransomware
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/391/643/067/424/721/original/10407d0dc61f8367.png
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/391/643/071/568/093/original/72e3ff5d8f7a8617.png

2025-10-17 21:00:56 UTC

Some of you are paranoid af. At least the comments are funny.
https://www.reddit.com/r/darknet/comments/1o5hdd9/tracking/
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/391/519/461/204/557/original/c0dbc8b60961a503.png

2025-10-17 20:33:43 UTC

Getting closer on the layout being done, and fixing some minor CSS issues, then just need to add the content. Still looking good for next week. Will definitely be adding features on to this.
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/391/406/944/354/605/original/4380fabf3e994967.png
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/391/406/974/739/340/original/86791bb06b34c35a.png

2025-10-17 18:01:12 UTC

🚨PoC & Exploit for CVE-2025-32023 / PlaidCTF 2025 "Zerodeo"
GitHub: https://github.com/leesh3288/CVE-2025-32023
Advisory: https://github.com/redis/redis/security/advisories/GHSA-rp2m-q4j6-gr43
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/390/811/669/983/197/original/7c9b5cd6e6eb7539.png

2025-10-17 17:23:54 UTC

🚨🇺🇸 Alleged Data Breach of TripWorks
https://darkwebinformer.com/alleged-data-breach-of-tripworks/

2025-10-17 16:43:05 UTC

🚨Alleged sale of ATM cash‑out platform called “Cutlet Maker"
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/390/504/409/993/522/original/f5aabf243c4bceb8.png
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/390/504/420/433/446/original/426738694183d74c.png

2025-10-17 16:17:31 UTC

🚨🇬🇧 Alleged Data Breach of University of Oxford
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/390/404/263/800/055/original/c9e622b810b408f9.png

2025-10-16 23:51:34 UTC

Looks like X is going to start to allow you to acquire handles. This is currently a Premium Business feature.
The domain: https://handles.x.com
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/386/527/407/704/668/original/16fefa7c9910c569.png
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/386/527/429/635/329/original/98a1cb2f589f797e.png

2025-10-16 22:40:43 UTC

My main Telegram account and the Telegram channel (Phasyr) were both just banned... again.

2025-10-16 20:20:59 UTC

🚨🇬🇧 BMP Europe Ltd has Fallen Victim to PLAY Ransomware
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/385/700/085/654/555/original/799a5aeedcc2955c.png

2025-10-16 20:06:45 UTC

🚨🇺🇸 CL0P Ransomware has Published Data of American Airlines
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/385/644/098/447/561/original/196b3b945250ad10.png

2025-10-16 18:37:39 UTC

Working on a seizure archive page of verified and unverified seizures. It's almost done. There is some things that need to be adjusted CSS wise, as well as adding articles, images, etc. Hoping for this to be ready next week!
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/385/288/371/393/122/original/1baa71fb352a1331.png
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/385/288/405/458/074/original/01beb7d498c95e03.png

2025-10-16 17:00:10 UTC

🚨CVE-2025-24071 // CVE-2025-24054: PoC for NTLM Hash Leak via RAR/ZIP Extraction and .library-ms File
Write-up: https://cti.monster/blog/2025/03/18/CVE-2025-24071.html
GitHub: https://github.com/0x6rss/CVE-2025-24071_PoC
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/384/908/376/741/557/original/7e111e19062807a2.mp4

2025-10-16 16:08:44 UTC

⚠️Dread: Rate my OpSec
2.5/10
Thread: https://dreadytofatroptsdj6io7l3xptbet6onoyno2yv7jicoxknyazubrad[.]onion/post/247a8b022fed66e9b89d
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/384/707/086/456/870/original/5891f8d0663f48fe.png

2025-10-16 15:07:28 UTC

🚨🇪🇸 Alleged Data Sale of University of Cádiz
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/384/467/265/390/491/original/c72f712b070ff446.png

2025-10-15 22:51:03 UTC

Massachusetts Man Sentenced to Four Years for PowerSchool Hacking Incident
https://www.reuters.com/legal/government/massachusetts-man-behind-powerschool-hacking-gets-4-years-prison-2025-10-14/
Matthew Lane, 20, was sentenced by U.S. District Judge Margaret Guzman in Worcester, Massachusetts, after pleading guilty in June to charges stemming from the hacking of two companies, one of which was PowerSchool, based in Folsom, California.
Judgement (PDF): https://s3.documentcloud.org/documents/26187692/matthew-lane-judgement-095113233744.pdf
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/380/627/800/960/909/original/a4c7a15a00089b16.webp

2025-10-15 22:38:02 UTC

🚨🇪🇸 Alleged Ransomware Claim of Agencia Tributaria (Spanish Tax Administration Agency)
📌 Spain
• Industry: Government / Taxation
• Threat Actor: Qilin
• Network: Dark Web
Details: The ransomware group Qilin has allegedly claimed responsibility for breaching Spain’s Agencia Tributaria, the national tax agency responsible for managing tax and customs systems. The listing indicates 238,799 files totaling 60 GB, alongside 16 leaked screenshots. The agency, which operates with over 26,000 employees and an annual budget of $1.5 billion, is responsible for tax enforcement and collection for both national and EU resources.
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/380/576/589/012/496/original/8244a138dd52eb9b.png
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/380/576/590/751/176/original/2782f4dba295021a.png

2025-10-15 22:24:12 UTC

Daily Dose of Dark Web Informer - 15th of October 2025
https://darkwebinformer.com/daily-dose-of-dark-web-informer-15th-of-october-2025/

2025-10-15 21:45:07 UTC

Ransomware Attack Update for the 15th of October 2025
https://darkwebinformer.com/ransomware-attack-update-for-the-15th-of-october-2025/

2025-10-15 20:37:37 UTC

SLSH updated their Onion site with the following message and new Telegram.
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/380/103/211/898/212/original/1d8a2dc380797220.png

2025-10-15 20:00:41 UTC

🚨PLAY Ransomware Claims 5 Victims
🇺🇸 Royal Thai
🇺🇸 Koch & White Heating & Cooling
🇺🇸 Legacy Manufacturing
🇺🇸 Global Shop Solutions
🇺🇸 Cellucap Manufacturing
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/379/957/161/509/853/original/1985cdcdf1d58733.png

2025-10-15 18:20:51 UTC

🚨ShinyHunters clearnet now directs to the following message under the Cloudflare DNS.
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/379/565/298/832/452/original/28f0c2f36f8465b6.png

2025-10-15 17:48:15 UTC

⚠️Dread: Rate my OpSec
1/10
Thread: https://dreadytofatroptsdj6io7l3xptbet6onoyno2yv7jicoxknyazubrad[.]onion/post/cc4621f5ee45577d134b
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/379/436/264/262/638/original/dee2e99b3aea6581.png

2025-10-15 17:27:20 UTC

🚨CVE-2025-33073: PoC Exploit for the NTLM reflection SMB flaw
GitHub: https://github.com/mverschu/CVE-2025-33073
▪️GUI (Screenshot 1)
▪️CLI (2)
▪️Custom command (3)
▪️SOCKS (4)
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/379/353/727/809/076/original/3cf36f82267ea18f.png
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/379/353/733/053/587/original/e9214fee03ee39d1.png
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/379/353/736/155/627/original/4043cbd39de32679.png
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/379/353/744/919/183/original/edd9036e344361c6.png

2025-10-15 17:03:56 UTC

🚨🇺🇸 East Jefferson General Hospital has Fallen Victim to Sinobi Ransomware
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/379/262/059/961/917/original/2b66944e5a44cd23.png

2025-10-15 16:51:17 UTC

🚨 Alleged Sale of Tron and EVM Crypto Drainer Tool
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/379/212/445/493/808/original/710cdaa13b0e4de9.png

2025-10-15 16:21:44 UTC

🚨🇺🇸 U.S. Identity Data Sold on a Popular Forum; Fullz, SSN, DL, EIN, More
https://darkwebinformer.com/u-s-identity-data-sold-on-a-popular-forum-fullz-ssn-dl-ein-more/

2025-10-15 16:00:03 UTC

🚨🇺🇸 Navigator Business Solutions (NBS) has Fallen Victim to PEAR Ransomware
Data Volume: 9.9 TB
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/379/010/912/794/475/original/bc3de981d7d6d06d.png

2025-10-15 15:52:41 UTC

🚨🇬🇧 Alleged Data Leak of Teknobuilt
https://darkwebinformer.com/alleged-data-leak-of-teknobuilt/

2025-10-15 15:39:46 UTC

🚨🇧🇴 Alleged Data Breach of Fiscalía General del Estado
https://darkwebinformer.com/alleged-data-breach-of-fiscalia-general-del-estado/

2025-10-15 15:17:20 UTC

🚨🇺🇸 Kearney Public Schools has been Claimed by INTERLOCK Ransomware
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/378/843/191/989/912/original/b55ef5a1b95a620d.png
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/378/843/198/322/746/original/34f57298b3b3db9e.png

2025-10-15 01:53:11 UTC

Lenovo CVE-2025-8061: PoC for popping a system shell against the LnvMSRIO.sys driver
GitHub: https://github.com/symeonp/Lenovo-CVE-2025-8061

2025-10-15 00:06:44 UTC

For anyone who uses X, you should be aware of this. https://x.com/DarkWebInformer/status/1978249519344091364

2025-10-14 23:29:46 UTC

🚨🇮🇹 Alleged Sale of Italian Hosting Service Databases Containing 6546 MySQL Entries
📌 Italy
• Industry: Hosting / Infrastructure
• Threat Actor: 010010
• Network: Clearnet
Details: Threat actor 010010 is offering access to an Italian hosting provider’s databases and backups, allegedly spanning 40 servers, 526,193 site backups, 4,631 hosting customer accounts, and 6,546 MySQL databases. The package includes full phpMyAdmin access with root credentials and database dumps totaling 1.33 GB. The seller specifies a price of $1000 (TRC20).
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/375/116/756/890/065/original/28ca5e44ca446f4f.png
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/375/116/791/677/364/original/22cf2e1ad90c0f08.png
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/375/116/807/711/053/original/582fc9d5607a09ac.png

2025-10-14 22:06:53 UTC

🚨🇫🇷 Volkswagen Group France has Fallen Victim to Qilin Ransomware
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/374/791/853/790/215/original/63c0f04b15628ed1.png

2025-10-14 20:51:50 UTC

🚨Qilin Ransomware has so far named 36 victims today.
🌍 EURORDIS
🌍 PQCNC Hospitals
🇺🇸 UT Health Austin
🇫🇮 ZEF's
🇫🇷 Paris Rétina Vision
🌍 Buldi
🇺🇸 City of Riviera Beach, Florida
🌍 Gittens Healthcare
🌍 Trans-World Shipping Service
🇪🇹 Addis
🇨🇴 Ditransa
🇺🇸 LaRosa's
🇺🇸 McGeorge Architecture Interiors
🇫🇷 Typology
🇦🇷 Sistema Odontológico Privado
🇺🇸 American Journal of Managed Care
🇺🇸 Catawba County Government
🇺🇸 HMP Global
🇺🇸 Morris-Sockle
🌍 Capitol Construction Services
🇸🇪 Polar-studio
🌍 H. Gascon
🇺🇸 Clifford Paper
🇬🇷 MPM Imports
🇨🇦 Radiant Beauty Supplies
🇰🇷 Tong Yang Group
🇪🇸 Club Lleuresport
🇸🇪 Repeated Signal Solutions
🇪🇸 Atarfil
🇵🇰 Greenstar Social Marketing
🇺🇸 DuVal & Associates
🌍 Pratt Homes
🇺🇸 Force Marketing
🇨🇦 DV Hardwoods
🇺🇸 M&E Global Group
🇺🇸 Karnes Electric Cooperative
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/374/495/395/592/031/original/41ce3efc1de31ead.jpg

2025-10-14 20:38:39 UTC

🚨CVE-2025-23166: The C++ method SignTraits::DeriveBits() may incorrectly call ThrowException() based on user-supplied inputs when executing in a background thread, crashing the Node.js process.
CVSS: 7.5
FOFA Link: https://en.fofa.info/result?qbase64=YXBwPSJOb2RlLmpzIg%3D%3D
FOFA Query: app="Node.js"
Results: 18,136,044
Advisory: https://github.com/advisories/GHSA-rrjv-57mm-j6cm
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/374/443/961/696/596/original/ec97991cfa22a59f.png
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/374/443/985/188/258/original/5973768d1c366ab9.png

2025-10-14 20:22:32 UTC

🚨🇷🇺 Alleged Sale of Russia Gambling Casino Leads
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/374/380/824/539/881/original/6c02b98dbf80cb67.png

2025-10-14 19:57:11 UTC

🚨 IOC Alert: Kongtuke JavaScript Payload Masquerading as Restaurant Website
https://darkwebinformer.com/ioc-alert-kongtuke-javascript-payload-masquerading-as-restaurant-website/

2025-10-14 19:05:48 UTC

🚨🇦🇺 Claimed Sale of Australian Data Lookup API Service
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/374/076/578/842/689/original/b6dd27c387d487de.png
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/374/076/567/003/354/original/93b75497a797827d.png

2025-10-14 18:25:27 UTC

🚨🇺🇸 UT Health Austin has Fallen Victim to Qilin Ransomware
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/373/921/093/661/007/original/c45ab4dfabc15708.png

2025-10-14 17:47:57 UTC

[Darknetlive Archive] German Man Purchased Counterfeit Euros On the Dark Web
https://darkwebinformer.com/darknetlive-archive-german-man-purchased-counterfeit-euros-on-the-dark-web/

2025-10-14 17:32:32 UTC

🚨🇺🇸 Catawba County Government has been Claimed a Victim to Qilin Ransomware
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/373/712/410/898/440/original/763a0c9f52d31498.png