CTI Updates

Updates about all things threat intelligence & updates about stuffs going on in the cybersec, ransomware, OSINT, SOCMINT, and hacking communities #threatintel

[CTI Updates @CTI__Updates]

Drughub vendor usernames now tracked and added to https://t.co/MmUNlik4Sj

#osint #threatintel #cti #cybersecurity #infosec #dnm

[CTI Updates @CTI__Updates]

Cracked states they have fixed some thingy things

[CTI Updates @CTI__Updates]

the Cracked hacking forum is down because DDoS Guard has suspended services to them. they are actively working on alternative solutions.

[CTI Updates @CTI__Updates]

@Jacob_Hacks @solminingpunk you must fall into the "no jokes allowed" type of autism

[CTI Updates @CTI__Updates]

the Cracked hacking forum is down because DDoS Guard has suspended services to them. they are actively working on alternative solutions.

[CTI Updates @CTI__Updates]

digga is a free and open-source domain and infrastructure research toolkit. It combines DNS lookups, RDAP with WHOIS fallback, passive subdomain discovery, IP and ASN information, email authentication checks, and TLS certificate inspection in one interface.

https://t.co/LHBs2rxPLv

[CTI Updates @CTI__Updates]

@solminingpunk yeah those types are the absolutely worst. to them is hilarious but really they are gambling w someone's life and they could get killed.

[CTI Updates @CTI__Updates]

wake up babe we got a new Op Endgame video drop about Gootloader

[CTI Updates @CTI__Updates]

@chrisschmitz

[CTI Updates @CTI__Updates]

the Metaencryptor ransomware group has published a listing for ProMantra, Inc., a US-based healthcare IT/BPO company (Somerset, NJ) specializing in revenue cycle management, medical billing, coding, and claims processing. ~50GB of data claimed, 7-day deadline before further action.

[CTI Updates @CTI__Updates]

@DC214DFW @Dallas_Hackers

[CTI Updates @CTI__Updates]

the Qilin ransomware group has just listed The University of Texas at Arlington and UTA Libraries

[CTI Updates @CTI__Updates]

update: the Spear forum is offline atm

[CTI Updates @CTI__Updates]

Spear forum usernames now added to
https://t.co/Ygt4vaiIVI

#osint #threatintel #cti #cybersecurity #infosec

[CTI Updates @CTI__Updates]

@olavilaitala @IntCyberDigest TIL

[CTI Updates @CTI__Updates]

@DoxfeedCompute i have always found this dude creepy

[CTI Updates @CTI__Updates]

the Barracuda ransomware group claims to have exfiltrated 1.23TB from ProLiant (Payroll/HR services provider), including contracts, financial data, and employee information for the company and its partners. Asking price: $50,000.

[CTI Updates @CTI__Updates]

@oOuz3rnam3Oo

[CTI Updates @CTI__Updates]

the Play ransomware group has listed Minor League Baseball (MiLB) @MiLB

Scheduled publication date: Nov 15, 2026.

Claimed data: confidential client documents, budget, payroll, IDs, tax, and financial information.

[CTI Updates @CTI__Updates]

the initial access broker skra is advertising bot based access to a Singapore transportation company (~$300M revenue), claiming SYSTEM-level and local admin credentials across a domain environment with ~500 users and 150 AD computers and will install the implant for the buyer.

(claim unverified)

[CTI Updates @CTI__Updates]

a new RaaS group named Curious Worm has appeared and dropped a few victims on their DLS today. Is this some AI powered skid group, a 0APT style fake group, or actual threat actors?? Time will tell!

.¸¸.· Atlas Healthcare Partners
.¸¸.· Marquis Companies
.¸¸.· Safco Dental Supply
.¸¸.·Life Line Screening
.¸¸.· Raleigh Orthopaedic
.¸¸.· Baron & Budd
.¸¸.· Shannon Medical Center
.¸¸.· SBH Health System
.¸¸.· SACHEM

[CTI Updates @CTI__Updates]

VPN Detection - checks whether an IP is a VPN, proxy, Tor exit or hosting address. Free, no signup. Also a Chrome extension that looks up an IP you select on any page.

https://t.co/p922mjL0W5