Arnaud Dlms

Cybersecurity @NoxHuntFR

[BeeRumP @BeeRumP_Paris]

La billetterie est ouverte ! N'hésitez pas à prendre aussi le t-shirt imaginé et dessiné par l'équipe BeeRumP 🍻
https://t.co/ERyzUrAVaa

[NoxHunt @NoxHuntFr]

#TeamPCP and the Breached[.]st guys just announced a supply chain competition after open-sourcing the Shai Hulud npm worm.
#supplychain #shaihulud #npm

[NoxHunt @NoxHuntFr]

Other malicious domains from this 🇰🇵 campaign:
precommit-nyx.vercel[.]app
precommit-chk-one.vercel[.]app
tanxilabs[.]com
code-beautify[.]com
precommit-chk.vercel[.]app
gitconfig-nyx.vercel[.]app

Some of them were also used in phishing attacks.
#dprk #malware #github

[NoxHunt @NoxHuntFr]

Someone on Darkforums is allegedly leaking 300,000+ records and 10,000+ users PII from Polymarket. Seems more like an API scrape than a breach though. Comes with some POC scripts and a "redteam" report.
#polymarket #breach #darkweb

[Arnaud Dlms @ArnaudDlms]

From a domain name to compromised computers: read our latest investigation on DPRK IT workers #dprk #infostealers

[NoxHunt @NoxHuntFr]

Fake personas passing as web developers, brand impersonation, use of AI copilots for job interview...

Following @ZachXBT’s DPRK workers investigation, we used our STEALINT platform to see what infostealers could uncover.

Here are our findings: https://t.co/Bhqt2glXtb
#dprk

[Ambionics Security @ambionics]

🚨 Critical File Upload to RCE in @NinjaForms File Uploads @WordPress plugin (CVE-2026-0740)!

Deep dive & PoC:
👉https://t.co/ZLu5KMsj9D
🔍By @whattheslime from @Ambionics CTEM solution
🛡️Patch available (v3.3.27) — Update now!

#WordPress #RCE #InfoSec #CyberSecurity #CVE

[ZachXBT @zachxbt]

1/ Recently an unnamed source shared data exfiltrated from an internal North Korean payment server containing 390 accounts, chat logs, crypto transactions.

I spent long hours going through all of it, none of which has ever been publicly released.

It revealed an intricate ~$1M/month scheme of fraudulent identities, forged legal documents, and crypto-to-fiat conversion.

Enjoy the findings!

[NoxHunt @NoxHuntFr]

The BF(.)ac crew announced that they just launched a brand new forum called LeaksForums. BF(.)ac had been down for some days.

[NoxHunt @NoxHuntFr]

Des centaines de milliers de documents et de photos d'identité dans la nature... l'hémorragie chez les fédérations françaises de sport se poursuit : découvrez notre Hebdo Cybercrime du 2 mars !

https://t.co/eyzCdQN4S6

[NoxHunt @NoxHuntFr]

Comment utiliser VSCode et Sliver dans vos audits redteam :
#redteam #sliver #vscode
https://t.co/pjGs0XCuId

[NoxHunt @NoxHuntFr]

Unlucky Chucky: Uncovering Solonik's personas and origin
#darkweb #leak #infostealer
https://t.co/5A4ATnkdSb

[NoxHunt @NoxHuntFr]

MANOMANO piraté, des données personnelles de députés et de sénateurs publiées... Découvrez notre Hebdo Cybercrime du 9 février !

https://t.co/xUX0O7D6m0
#darkweb #ransomware #0apt #leak

[NoxHunt @NoxHuntFr]

Rapid7 confirms the supply chain attack was used to deliver the Chrysalis backdoor which they attribute to the Chinese APT group Lotus Blossom. Technical report and IOCs: https://t.co/4tAL3h3pwL
#supplychainattack #lotusblossom

[NoxHunt @NoxHuntFr]

🚨Notepad++ targeted in supply chain attack: its update infrastructure was hijacked, letting attackers redirect some of the update traffic to malicious servers between June–Dec 2025. Infrastructure is now secured according to the Notepad++ team.
https://t.co/sp8QOUbIku

[Arnaud Dlms @ArnaudDlms]

Dure semaine ! Découvrez un condensé des attaques et fuites de données contre des entités 🇫🇷 ces sept derniers jours :
#DarkWeb #leaks

[NoxHunt @NoxHuntFr]

🏴 Encore une semaine noire pour les données françaises... Nous venons de publier notre Hebdo Cybercrime du 2 février ! Vous y trouverez les événements liés au cybercrime ayant impacté la France ces sept derniers jours.
https://t.co/PkQvW44j3V
#darkweb #stealer #leak #ransomware

[NoxHunt @NoxHuntFr]

Someone is allegedly selling an access to an extranet portal of the main french telecom company Orange, where you can lookup phones and view customers information. Price is very cheap so not sure if legit.
#darkweb #access #Orange

[NoxHunt @NoxHuntFr]

New stealer ISTEALER is being advertised on DNA
#stealer #darkweb #malware

[Silent Push @silentpush]

Silent Push is tracking a sophisticated phishing campaign linked to #SLSH that is mirroring TTPs recently reported by @Okta and @BleepingComputer.

Read full blog here: https://t.co/QQXPshVtyu

#cti #soc #ir #cybersec #threat #scatteredspider

[CyberKnow @Cyberknow20]

Another new pro-Russian hacktivist group, Russian Legion, has formed a new cluster of pro-Russian hacktivist groups and are currently targeting #Denmark

Claimed DDoS atm, but they could shift attacks if the campaign is sustained.

[Fusion Intelligence Center @ StealthMole @stealthmole_int]

Old Data, New Actor: Investigating Solonik’s Alleged Instagram 17 M Leak

This report documents how StealthMole was used to trace the origins, movement, and rebranding of this dataset across forums, Telegram channels, and domains, ultimately challenging Solonik’s claims and highlighting the growing trend of breach recirculation under false timelines.

https://t.co/9sxO0ExJ7E