Updates about all things threat intelligence & updates about stuffs going on in the cybersec, ransomware, OSINT, SOCMINT, and hacking communities. #threatintel
Threat Actor Username Search: Search through 2M+ threat actor usernames and find where they operate
Link: https://t.co/HOoxZ5Ezkh
Credit: @CTI__Updates
‼️ Nightmare Eclipse is back on GitHub under a new alias and has released a new Windows Defender vulnerability zero-day called RoguePlanet.
PoC: https://t.co/n0xF6uGt4u
New GitHub Account: https://t.co/qwU93VedpH
@zekly_@DarkWebInformer@vxunderground these are usernames straight up scraped from forums mainly so someone made those usernames on a forum. unfortunately anyone can make their username anything they want.
https://t.co/YC4ii76Xza by @CTI__Updates
Input a username and locate active forum accounts, very useful for your OSINT research or finding posts shared on X
Akira ransomware group lists HRC Sicherheitsdienste, a family-owned security service provider with more than 45 years of experience.
The group claims it will soon publish 24 GB of corporate data, including employee information, German passports and IDs, credit cards, payment details, financials, agreements, contracts, and confidential documents.
#osint #threatintel #raas #german #germany
Newer ransomware group BlackX has listed one new victim on its leak site. The company has not been named yet, but the listing identifies it as a Japanese organization.
#osint#threatintel#raas
❗️Lexar's regional manager says RAM prices are expected to double by the end of 2026. The current "stable" pricing is an illusion.
• Discounts mean sellers are dumping old stock before higher-priced inventory arrives.
• AI demand is pulling nearly all chip capacity toward high-bandwidth memory, leaving consumers last in line.
Someone hid a self-replicating worm inside 37 npm packages.
Written in Rust.
Hidden behind an eBPF kernel rootkit.
Talking to its operator over Tor.
It steals 86 environment variables.
AWS keys. GCP keys. Vault secrets. Kubernetes tokens.
Your Anthropic API key. Your OpenAI key.
Your Exodus wallet seed phrase.
Then it uses your own npm credentials to republish itself into your packages.
So your code infects the next developer.
Who infects the next one.
The commits were backdated up to 13 years.
The commit author name was “claude.”
The malware named itself after the AI to hide in plain sight.
The attacker also left their own wallet recovery phrase in the debug data.
Nobody is having a good day.
Check your preinstall hooks.
Krybit ransomware group lists Shantou Huashan Electronic Devices Co., Ltd. (SHEDCL), a Chinese manufacturer of semiconductor devices and electronic components based in Shantou, Guangdong Province.
The company produces and distributes components including voltage regulators, transistors, Schottky diodes, wafers, capacitors, inductors, and resistors.
#china #chinese #osint #threatintel #cti #raas
Well, well, well. The public JSON formatter sites your developers paste production data into have been quietly publishing every paste for about seven years. Naturally, we read all seven years of it.
200,000+ documents. Cloud keys, SSH keys, payment API keys, whole tax returns with SSNs, people's full identities, bank balances. Nobody hacked anything. People pasted it in to make it look tidy, as you do.
Full writeup below. Yes, it's as bad as it sounds.
Akira ransomware group lists three new victims on its DLS: Oaks Park, Kennon Worldwide, and T/CCI Manufacturing.
The group claims it will soon publish 10 GB of data from Oaks Park, 30 GB from Kennon Worldwide, and 35 GB from T/CCI Manufacturing. Alleged data includes employee information, payment details, contracts, NDAs, client information, financials, and confidential files.
#osint #threatintel #raas
@JustWantToQ1 iirc if you have the bot token you can whip up a quick script to spam their telegram channel depending upon how they have it exactly setup
LockBit lists Uni-China Group, a Hong Kong-based conglomerate with more than 25 years of history in retail, wholesale trade, logistics, cold storage, and market operations. The group claims to have stolen 170,656 files across 9,075 folders, totaling roughly 195 GB of data.
#ransomware #raas #osint #threatintel #china #chinese