Blog

Dark Web News Analysis A threat actor on a known cybercrime forum is claiming to have leaked a database that they allege was stolen from 17173, a major Chinese gaming news and community website. According to the post, the compromised data includes usernames, email addresses, and passwords, and is being ...

Dark Web News AnalysisSOCRadar has identified a leak of the source code for “Umbral Stealer 2025” on a monitored hacker forum. While the developer claims the release is for educational purposes, the stealer’s capabilities are clearly malicious. It is designed to extract sensitive data such as passwords, cookies, session files, ...

Dark Web News AnalysisA hacker forum post is advertising the leak of two datasets allegedly tied to Somatoles (domain: somatoles.mg), a company based in Madagascar. The first dataset, labeled “Clients,” is in XLSX format and contains names, surnames, company names, email addresses, and phone numbers for 5613 individuals. The second ...

Dark Web News AnalysisA hacker forum post is advertising the leak of a database allegedly tied to the Secretariat of Public Education of Mexico (SEP). The data is said to be in .xlsx format and includes a wide range of sensitive student information: full names, contact details, place of birth, ...

Dark Web News AnalysisA new phishing tool dubbed the “Eviginx cloaker” is being advertised on a hacker forum. Built on the Evilginx3 framework, this Android-compatible platform is designed to simulate legitimate login pages and intercept credentials and session cookies from Microsoft 365 and Google accounts. The tool includes cloaking features ...

Dark Web News AnalysisA hacker forum post is advertising the sale of databases allegedly belonging to Aguakan and CAPA, two major water and sewerage service providers in Quintana Roo, Mexico. The seller claims the data includes full names, physical addresses, company names, consumption metrics, payment deadlines, and account balances for ...

Dark Web News AnalysisA hacker forum post is advertising the leak of a database allegedly tied to The Restart Project. The data is reportedly structured in CSV format and includes fields suggesting user account information and website comment metadata. The exposed fields include usernames, email addresses, and passwords—likely hashed, but ...

Dark Web News AnalysisA hacker forum post is advertising the sale of a dataset allegedly containing business information for 991,000 Canadian companies. The data reportedly includes phone numbers, email addresses, business names, physical addresses, and other unspecified details. The seller is soliciting interest via Telegram, a platform often used to ...

Dark Web News Analysis A hacker forum listing has surfaced offering a “fund unblocking” service for MexC accounts. The threat actor claims to have developed a unique method to bypass MexC’s security restrictions, enabling withdrawals from accounts that are otherwise blocked. The service requires full account access and operates on ...

Dark Web News Analysis A hacker forum post is advertising the sale of unauthorized database access allegedly tied to a U.S. plastic surgery clinic. The seller claims the database contains records for 39,300 patients and includes names, contact details (such as phone numbers), and potentially sensitive medical information or personal ...