Blog

Dark Web News AnalysisA threat actor group calling itself “Scattered LAPSUS$ Hunters”—a fusion of ShinyHunters, Scattered Spider, and LAPSUS$—has surfaced on a known cybercrime forum, claiming to possess nearly one billion records allegedly stolen from Salesforce and its customers. According to the post, the attackers used social engineering tactics, specifically ...

Dark Web News AnalysisA threat actor has allegedly leaked the source code of Kiple, a digital payment solutions provider, on a known hacker forum. The breach reportedly occurred in October 2025 and may include core components of Kiple’s payment systems, e-wallet architecture, and card processing logic.Given Kiple’s partnerships with Visa ...

Dark Web News AnalysisA threat actor has posted a listing on a known cybercrime forum offering unauthorized access to the admin dashboard of a Prestashop-based e-commerce platform, allegedly operated by a Spanish company. The listing claims “FullRights” access, suggesting complete control over the platform’s backend.The seller includes monthly traffic statistics, ...

Dark Web News AnalysisA threat actor is offering unauthorized shell access to a Danish e-commerce company via a known hacker forum. The access appears to grant control over a PHP shell, enabling remote command execution on the compromised server. The listing references payment redirection through altapaysecure.com and includes data tied ...

Dark Web News AnalysisA threat actor has reportedly leaked a user database from the Dominic Government Library, accessible via library.dlis.gov.dm. The data appears to have been extracted using SQL injection — a critical web application vulnerability — and includes sensitive user information such as names, addresses, emails, phone numbers, dates ...

Dark Web News AnalysisA dark web listing has surfaced claiming to leak user data from GEckoVPN, a popular VPN service. The exposed dataset allegedly includes usernames, aliases, email addresses, passwords, and VIP-related metadata such as vipendsec and vipendtime.This leak, if verified, suggests a serious vulnerability in GEckoVPN’s infrastructure and raises ...

Dark Web News AnalysisA hacker forum post has surfaced advertising access to multiple Israeli organizations, spanning sectors such as energy, schools, healthcare, military, and commercial enterprises. The listing includes credentials for VPNs, cloud services, and Remote Desktop Protocols (RDPs), suggesting deep infiltration capabilities.The seller’s use of the phrase “work with ...

Dark Web News AnalysisA threat actor has posted a request on a known cybercrime forum to purchase ongoing access to online casino databases. This type of listing suggests either a breach has already occurred or is being actively pursued. The attacker’s intent to maintain persistent access indicates a strategic plan ...

Dark Web News AnalysisA threat actor has announced the sale of a database allegedly linked to multiple life insurance companies, specifically naming AIL Life and Globe Life. The listing, surfaced on a known hacker forum, suggests that the breach may involve sensitive customer data and is available for purchase or ...

Dark Web News AnalysisA listing on a known cybercrime forum advertises unauthorized admin access to a Content Management System (CMS), specifically a Prestashop platform, allegedly operated by a Spanish shopping company. The seller claims the access includes full control over the admin dashboard and visibility into transaction volumes and card ...