kblog1

Dark Web News Analysis A threat actor on a known cybercrime forum is claiming to sell an exploit for SimpleHelp, a popular remote support and access software. According to the seller’s post, the exploit allows for the silent installation of the remote access client on a target system and is ...

Dark Web News Analysis A threat actor on a known cybercrime forum is claiming to sell a database that they allege was stolen from KuCoin, a major global cryptocurrency exchange. According to the seller’s post, the database contains the information of approximately 6 million users. The actor is using the ...

Dark Web News Analysis A threat actor on a known cybercrime forum is claiming to sell a highly sensitive database that they allege originates from Bank of America. The seller describes the data as containing “fulllock” information, which appears to be a comprehensive collection of the personal and financial details ...

Dark Web News Analysis A post has been identified on a known cybercrime forum in which a threat actor is actively recruiting a partner with specific expertise in SQL injection attacks. The stated objective is to extract user data from an internal Customer Relationship Management (CRM) system. In a particularly ...

Dark Web News Analysis A threat actor on a known cybercrime forum is claiming to sell a massive database that they allege was stolen from a company or service named “Mychoice.” According to the seller’s post, the database contains a staggering 14 million records. While the specific data fields were ...

Dark Web News Analysis A threat actor on a known cybercrime forum is claiming to have leaked a database that they allege originates from Sandia, a financial intelligence platform. According to the post, the compromised data contains 3,726 rows of user information. The purportedly leaked data includes usernames, email addresses, ...

Dark Web News Analysis A threat actor on a known cybercrime forum is claiming to have leaked unauthorized SMTP access credentials that they allege belong to users of BIGLOBE, a major internet service provider in Japan. According to the post, the compromised data includes the necessary components for sending email ...

Dark Web News Analysis A new and highly advanced version of the Airavat Remote Access Trojan (RAT), dubbed the 2025 version, has been detected being shared and sold on a monitored hacker forum. According to the advertisement, this Android RAT is a sophisticated, multi-purpose tool designed for complete device takeover. ...

Dark Web News Analysis A new Android Remote Access Trojan (RAT), dubbed “DOGERat 2025,” has been detected being shared on a monitored hacker forum. According to the analysis, the new malware is a sophisticated tool designed to achieve a complete takeover of an infected Android device, giving a remote attacker ...