kblog1

Dark Web News Analysis A threat actor on a known cybercrime forum is claiming to sell a database and associated access that they allege was stolen from CsisContria (also known as Columbia Shop), an e-commerce platform. According to the seller’s post, the package, priced at just $200, includes a database ...

Dark Web News Analysis A threat actor on a known cybercrime forum is claiming to sell a comprehensive database that they allege was stolen from Salvex, an industrial surplus auction platform. According to the seller’s post, the data, allegedly from September 2025, includes a wide range of highly sensitive business-to-business ...

Dark Web News Analysis A threat actor on a known cybercrime forum is selling what they claim is a highly valuable “stealer log” obtained from a botnet infection at a marketing agency. The advertisement details a comprehensive and catastrophic level of compromise. The log purportedly contains access to Google Ads ...

Dark Web News Analysis A threat actor on a known cybercrime forum is claiming to have leaked a database of email addresses that they allege was stolen from the National Observatory for the Rights of the Child (ONDE) of Morocco. According to the seller’s post, the compromised data is associated ...

Dark Web News Analysis A threat actor on a known cybercrime forum is claiming to sell unauthorized access to the systems of PayTrace, a payment gateway company. According to the seller’s post, the access is being offered for sale with a tiered pricing model, a common tactic for Initial Access ...

Dark Web News Analysis A threat actor on a known cybercrime forum is making an extremely serious claim to be selling unauthorized access to a company’s Cisco ThousandEyes system. According to the seller’s post, the access, which is being offered for a high price of $50,000, provides comprehensive control over ...

Dark Web News Analysis A threat actor on a known cybercrime forum is claiming to sell unauthorized administrative access to the network of a US-based construction firm. According to the seller’s post, the access is provided via RDP, VPN, or cPanel and includes local administrator rights. In a highly critical ...

Dark Web News Analysis A new Ransomware-as-a-Service (RaaS) offering, named “Mimic_v2.0,” is being actively advertised on a known hacker forum. The operators are providing other criminals with a ready-made tool to encrypt a wide range of Windows systems, including servers, ESXi virtual machines, and Network Attached Storage (NAS) devices. The ...

Dark Web News Analysis A threat actor on a known cybercrime forum is making an extraordinarily serious claim to be selling unauthorized VPN access to the internal network of an American defense company. While the specific company is not named, any such claim represents a security incident of the highest ...