Cybersecurity News

Dark Web News AnalysisA hacker forum post is advertising the sale of a dataset allegedly containing IBAN information for approximately 6 million Spanish citizens. The threat actor claims the data includes full names, phone numbers, area codes, PIN codes, IBAN numbers, and associated bank names such as DEUTSCHE BANK S.A.E., ...

Dark Web News AnalysisA hacker forum post is advertising the sale of user data allegedly stolen from MEXC, a cryptocurrency exchange. The seller claims the dataset contains 60,000 records from September 2025, including full names, email addresses, phone numbers, account balances, 2FA status, last login IPs and timestamps, and Know ...

Dark Web News AnalysisA threat actor on a known cybercrime forum is advertising the sale of a Git repository allegedly tied to a telephone recharge system. The system reportedly supports major telecom providers including AT&T, Movistar, Telcel, and Unefon. According to the seller, the repository contains source code, internal documentation, ...

Dark Web News Analysis A threat actor on a known cybercrime forum is making an extraordinarily serious claim to be selling not just a database but also internal access, private source code, and private tools that they allege were stolen from RIPE NCC. RIPE NCC (Réseaux IP Européens Network Coordination ...

Dark Web News Analysis A threat actor has posted an announcement on a known cybercrime forum, actively seeking to purchase “fresh” customer data stolen from British energy companies. According to the post, the actor is offering to pay £1 per line for a minimum of 100 lines per day. The ...

Dark Web News Analysis A new and highly sophisticated Android Remote Access Trojan (RAT) is being actively advertised on a known hacker forum. The seller claims the tool was “built from scratch” and is designed to provide criminals with a ready-made toolkit for a full takeover of modern Android devices ...

Dark Web News Analysis A threat actor on a known cybercrime forum is making an extraordinarily serious claim to be selling a database that they allege was stolen from an internal server at Huawei, the global technology company. According to the seller’s post, the database contains 1.5 million user records ...

Dark Web News Analysis A threat actor is claiming to have leaked a database originating from MX Zambrana, an off-road equipment dealer. According to the claim, the leaked data contains the personal information of 25,000 users in CSV format. The exposed data reportedly includes a wide range of sensitive details, ...

Dark Web News AnalysisA threat actor group calling itself “Scattered LAPSUS$ Hunters”—a fusion of ShinyHunters, Scattered Spider, and LAPSUS$—has surfaced on a known cybercrime forum, claiming to possess nearly one billion records allegedly stolen from Salesforce and its customers. According to the post, the attackers used social engineering tactics, specifically ...

Dark Web News AnalysisA threat actor has allegedly leaked the source code of Kiple, a digital payment solutions provider, on a known hacker forum. The breach reportedly occurred in October 2025 and may include core components of Kiple’s payment systems, e-wallet architecture, and card processing logic.Given Kiple’s partnerships with Visa ...