kblog1

Dark Web News Analysis A threat actor on a known cybercrime forum is making an extraordinarily serious claim to be selling a database that they allege was stolen from an internal server at Huawei, the global technology company. According to the seller’s post, the database contains 1.5 million user records ...

Dark Web News AnalysisA threat actor group calling itself “Scattered LAPSUS$ Hunters”—a fusion of ShinyHunters, Scattered Spider, and LAPSUS$—has surfaced on a known cybercrime forum, claiming to possess nearly one billion records allegedly stolen from Salesforce and its customers. According to the post, the attackers used social engineering tactics, specifically ...

Dark Web News AnalysisA threat actor has allegedly leaked the source code of Kiple, a digital payment solutions provider, on a known hacker forum. The breach reportedly occurred in October 2025 and may include core components of Kiple’s payment systems, e-wallet architecture, and card processing logic.Given Kiple’s partnerships with Visa ...

Dark Web News AnalysisA threat actor has posted a listing on a known cybercrime forum offering unauthorized access to the admin dashboard of a Prestashop-based e-commerce platform, allegedly operated by a Spanish company. The listing claims “FullRights” access, suggesting complete control over the platform’s backend.The seller includes monthly traffic statistics, ...

Dark Web News AnalysisA threat actor is offering unauthorized shell access to a Danish e-commerce company via a known hacker forum. The access appears to grant control over a PHP shell, enabling remote command execution on the compromised server. The listing references payment redirection through altapaysecure.com and includes data tied ...

Dark Web News AnalysisA threat actor has reportedly leaked a user database from the Dominic Government Library, accessible via library.dlis.gov.dm. The data appears to have been extracted using SQL injection — a critical web application vulnerability — and includes sensitive user information such as names, addresses, emails, phone numbers, dates ...

Dark Web News AnalysisA dark web listing has surfaced claiming to leak user data from GEckoVPN, a popular VPN service. The exposed dataset allegedly includes usernames, aliases, email addresses, passwords, and VIP-related metadata such as vipendsec and vipendtime.This leak, if verified, suggests a serious vulnerability in GEckoVPN’s infrastructure and raises ...

Dark Web News AnalysisA hacker forum post has surfaced advertising access to multiple Israeli organizations, spanning sectors such as energy, schools, healthcare, military, and commercial enterprises. The listing includes credentials for VPNs, cloud services, and Remote Desktop Protocols (RDPs), suggesting deep infiltration capabilities.The seller’s use of the phrase “work with ...

Dark Web News AnalysisA threat actor has posted a request on a known cybercrime forum to purchase ongoing access to online casino databases. This type of listing suggests either a breach has already occurred or is being actively pursued. The attacker’s intent to maintain persistent access indicates a strategic plan ...