X XFediYour place in the Fediverse
XFEDI

Remote profile

ActivityPub
Profile banner

CTI Updates

@[email protected]

Updates about all things threat intelligence & updates about stuffs going on in the cybersec, ransomware, OSINT, SOCMINT, and hacking communities #threatintel

Open remote profile ↗
Posts

it's time for a game of "who is the real Tanaka?"

an interesting and good example of how quickly the waters can get muddied and confused in this scene on the popular hacking forums and how you get scammed

which one(s) are you trusting?

DarkForums

Media attachment
↩ Reply ♡ 0 · ↻ 0 ↗ Original

an initial access broker, divisibly, is advertising SSL/VPN corporate access to a US-based energy sector company (~500-1000 employees, ~$500M revenue). Target identity withheld pending sale.

claim unverified

Media attachment
↩ Reply ♡ 0 · ↻ 0 ↗ Original

an initial access broker named 'APT73' is advertising live access to a large TV channel group’s internal infrastructure, including Active Directory domain admin credentials, ESXi/vCenter root access, and access to broadcast CMS, billing, and CDN systems.

Claim unverified

Media attachment
↩ Reply ♡ 0 · ↻ 0 ↗ Original

the WhiteArmour ransomware group has listed crypto swap platform Wagyu with a demand of $5,000,000

"We hold 38,628 orders and 10,139 IPs from Wagyu (@PerpetualCow): wallets, sessions, fingerprints, countries, $907M XMR-heavy volume."

Media attachment
↩ Reply ♡ 0 · ↻ 0 ↗ Original

The Booba Project ransomware group has listed 8 new victims

_-. RCOA- Regent Christian Online Academy
_-. KING FAMILY MEDICAL
_-. City of Big Spring
_-. Charter Township of Commerce
_-. Aesthetic Specialty Centre
_-. Kerckstede vzw
_-. BASS Medical Group
_-. Hudson River Museum

Media attachment
↩ Reply ♡ 0 · ↻ 0 ↗ Original