Blog

Dark Web News Analysis A threat actor has posted an announcement on a known cybercrime forum, actively seeking to exchange a database they claim to possess from “Coriolis,” likely Coriolis Télécom, a French telecommunications company. The actor is not selling the data for cash but is looking to trade it ...

Dark Web News AnalysisA threat actor on a hacker forum is soliciting the purchase of compromised credentials—specifically logins, passwords, and potentially geo-location data—linked to several trading platforms: avatrade.com, www.ig.com, xtb.com, vestedfinance.com, folionet.com, exante.eu, and trive.com. The actor is offering between $100 and $1,000 per account, with a preference for accounts ...

Dark Web News AnalysisA threat actor on a hacker forum is claiming to sell a database allegedly sourced from PT Surveyor Indonesia, a company specializing in surveying, inspection, certification, and consulting services. The dataset reportedly contains 50,211 records and includes a wide range of potentially sensitive information such as personally ...

Dark Web News AnalysisA threat actor on a hacker forum is claiming to sell a dataset allegedly sourced from American insurance companies. The data reportedly includes Personally Identifiable Information (PII) such as full names, addresses, phone numbers, email addresses, Social Security Numbers (SSNs), policy details, and potentially banking information. The ...

Dark Web News AnalysisA threat actor on a hacker forum is advertising the sale of “AnyLang Keylogger,” a C++-based malware tool designed for comprehensive input surveillance. The keylogger supports all languages and keyboard layouts, includes clipboard monitoring, and features a web panel for tracking victim statistics. The package also comes ...

Dark Web News AnalysisA threat actor on a hacker forum is claiming to sell a database allegedly sourced from MyGov, the Indian government’s citizen engagement platform. The dataset reportedly contains 25,940 records, including email addresses and “dehashed” passwords, dated October 5, 2025. The seller is offering the archive for $50 ...

Dark Web News AnalysisA threat actor on a hacker forum is claiming to sell login credentials allegedly linked to Airbus internal systems. The seller asserts that these credentials could provide access to sensitive operational environments but notes that the logins are “not checked,” introducing uncertainty about their validity.Despite the disclaimer, ...

Dark Web News AnalysisA threat actor on a hacker forum is claiming to sell a dataset containing transaction records from multiple American retail stores. The leak reportedly includes over 1 million transactions and 374,000 individual orders. Sample data suggests the presence of sensitive customer information such as names, phone numbers, ...

Dark Web News AnalysisA threat actor on a hacker forum is claiming to sell a dataset allegedly sourced from Spanish telecommunication companies. The sample data shared includes personal information such as full names, physical addresses, phone numbers, and possibly email addresses. The seller is promoting the full archive and directing ...

Dark Web News AnalysisA threat actor on a dark web forum is claiming to sell a batch of 855 Solana private keys, allegedly harvested through a “drainer” malware campaign. According to the post, the keys are valid, active, and were sourced between August 2025 and October 2025. The actor claims ...