Cyber Breaches

Dark Web News Analysis A threat actor has posted an announcement on a known cybercrime forum, actively seeking to purchase “fresh” customer data stolen from British energy companies. According to the post, the actor is offering to pay £1 per line for a minimum of 100 lines per day. The ...

Dark Web News Analysis A new and highly sophisticated Android Remote Access Trojan (RAT) is being actively advertised on a known hacker forum. The seller claims the tool was “built from scratch” and is designed to provide criminals with a ready-made toolkit for a full takeover of modern Android devices ...

Dark Web News Analysis A threat actor on a known cybercrime forum is making an extraordinarily serious claim to be selling a database that they allege was stolen from an internal server at Huawei, the global technology company. According to the seller’s post, the database contains 1.5 million user records ...

Dark Web News Analysis A threat actor is claiming to have leaked a database originating from MX Zambrana, an off-road equipment dealer. According to the claim, the leaked data contains the personal information of 25,000 users in CSV format. The exposed data reportedly includes a wide range of sensitive details, ...

Dark Web News AnalysisA threat actor group calling itself “Scattered LAPSUS$ Hunters”—a fusion of ShinyHunters, Scattered Spider, and LAPSUS$—has surfaced on a known cybercrime forum, claiming to possess nearly one billion records allegedly stolen from Salesforce and its customers. According to the post, the attackers used social engineering tactics, specifically ...

Dark Web News AnalysisA threat actor has allegedly leaked the source code of Kiple, a digital payment solutions provider, on a known hacker forum. The breach reportedly occurred in October 2025 and may include core components of Kiple’s payment systems, e-wallet architecture, and card processing logic.Given Kiple’s partnerships with Visa ...

Dark Web News AnalysisA threat actor has posted a listing on a known cybercrime forum offering unauthorized access to the admin dashboard of a Prestashop-based e-commerce platform, allegedly operated by a Spanish company. The listing claims “FullRights” access, suggesting complete control over the platform’s backend.The seller includes monthly traffic statistics, ...

Dark Web News AnalysisA threat actor is offering unauthorized shell access to a Danish e-commerce company via a known hacker forum. The access appears to grant control over a PHP shell, enabling remote command execution on the compromised server. The listing references payment redirection through altapaysecure.com and includes data tied ...

Dark Web News AnalysisA threat actor has reportedly leaked a user database from the Dominic Government Library, accessible via library.dlis.gov.dm. The data appears to have been extracted using SQL injection — a critical web application vulnerability — and includes sensitive user information such as names, addresses, emails, phone numbers, dates ...