Cyber Breaches

Dark Web News Analysis A threat actor using the alias “yeestge33” on a known cybercrime forum is advertising the sale of a database containing approximately 140,000 individual records from the Japan Financial Investment Education Association (JFIEA). This claim, if true, represents a significant data breach targeting Japan’s educational and non-profit ...

Dark Web News Analysis A detailed technical analysis released on November 17, 2025, by malware researchers (0x0d4y) has exposed the inner workings of ScoringMathTea, the flagship Remote Access Trojan (RAT) used in the Lazarus Group’s new “Gotta Fly” campaign. This campaign, first identified by ESET in October 2025, targets Unmanned ...

Dark Web News Analysis A threat actor on a known cybercrime forum is advertising the alleged sale of a database containing the personal identifiable information (PII) of Malaysian citizens. The data, which includes full names, usernames, email addresses, mobile numbers, and physical addresses, is being offered for a “fire sale” ...

Dark Web News Analysis A threat actor on a known cybercrime forum is advertising the alleged sale of a database from an Indonesian Government database website. This claim, if true, represents the most severe, nation-scale data breach in Indonesia’s history, providing a “fullz” (full information) package for mass identity theft. ...

Dark Web News Analysis A threat actor on a known cybercrime forum is advertising the alleged sale of a 29.4 GB database from the District 1 Medical Examiner’s Office (d1meo.org) in Florida. This claim, if true, represents one of the most severe and sensitive types of data breaches possible, targeting ...

Dark Web News Analysis A threat actor on a known cybercrime forum is advertising the alleged database of ICBSCAC.org. This claim, if true, represents a targeted data breach against a non-commercial, religious organization. My analysis confirms ICBSCAC.org is the official website for the Information Communication Board of the Sarawak Chinese ...

Dark Web News Analysis A threat actor on a known cybercrime forum is advertising an alleged data leak from Blossom Cloud (BlossomCloud.co.kr), a South Korean tech company. This claim, if true, represents a critical, active supply chain attack and a severe intellectual property theft. This is not an isolated incident. ...

Dark Web News Analysis A threat actor on a known cybercrime forum is advertising the alleged sale of a database from Goyal Brothers Prakashan (goyal-books.com). This claim, if true, represents a critical supply chain attack on the Indian education sector. My analysis confirms Goyal Brothers Prakashan is not a small ...

Dark Web News Analysis A threat actor on a known cybercrime forum has leaked the alleged database of MAN 2 Rembang, an Indonesian public Islamic secondary school. The leaked data, a 25MB SQL file, indicates a full compromise of the institution’s information systems. This claim, if true, is not an ...