Blog

Dark Web News Analysis: German Football Club VPN Access Auction A threat actor is auctioning unauthorized VPN access to the internal network of an unnamed German football club on a popular hacker forum. The post specifies that the club uses Sophos VPN technology and that the access could potentially lead ...

Dark Web News Analysis: Cdrxkj Network Access Sale A threat actor has listed unauthorized network access for sale on a hacker forum, with the target identified as Cdrxkj, a company operating under the Chinese domain cdrxkj.cn. This type of listing indicates that an initial compromise of the company’s network has ...

Dark Web News Analysis: KVM Zero-Day Vulnerability for Sale A threat actor has posted a zero-day vulnerability for sale on a hacker forum, targeting the KVM (Kernel-based Virtual Machine), the core virtualization technology built into the Linux kernel. This is a threat of the highest severity. The seller claims the ...

Dark Web News Analysis: Database of Arab Forex Brokers for Sale A threat actor has posted a database for sale on a hacker forum, allegedly containing the personal information of clients of various Arabian Forex Brokers. The compromised data is a toolkit for targeted fraud, reportedly including: The sale of ...

Dark Web News Analysis: El Jihad Energy & Utility Database on Sale A database allegedly belonging to El Jihad Energy & Utility, a Lebanese energy company, has been put up for sale on a hacker forum. The threat actor claims the dataset contains approximately 124,000 records. The leaked data is ...

Threat Intelligence Analysis: High-Impact Vulnerability for Sale on the Dark Web A highly concerning offer has been detected on the dark web, advertising the sale of a vulnerability that grants the buyer Domain Admin privileges. This represents the highest level of control in a Windows network environment, often referred to ...

Dark Web News Analysis: Dialab Medical Data on Sale A threat actor is offering a highly sensitive database for sale on a hacker forum, allegedly belonging to Dialab, a Russian medical laboratory. The dataset consists of 386 PDF files, totaling 214MB. The seller claims the data is “fresh,” with the ...

Dark Web News Analysis: Merca2.0 Database Credentials Leaked A recent leak has exposed the raw WordPress database credentials for Merca2.0, a prominent online magazine for marketing, advertising, and media. The exposed information appears to be the contents of a wp-config.php file, which includes the database name, host, username, and the ...

Dark Web News Analysis: Mexico Yucatan State Driver’s License Database for Sale A threat actor has posted a database for sale on a hacker forum, allegedly containing the complete driver’s license information for 373,000 citizens of Mexico’s Yucatan state. The actor is also attempting to extort the Yucatan government, threatening ...

Threat Intelligence Analysis: Minnesota Reports Relentless Cyberattacks on Public Sector State officials in Minnesota have confirmed that local government entities are facing a relentless barrage of cyberattacks, with incidents occurring on an “almost every day” basis. According to new data from Minnesota’s IT Services (MNIT), 186 cybersecurity incidents have been ...