A real shame to send the great Messi out with such a vulgar display of fouls, fights, and disrespect. It's a way of losing twice, instead just once on the pitch to a clearly superior side.
A los agresores de Bilbao, Pamplona, y Vitoria: cada vez que actuáis, todo el mundo os ve y os reconoce como lo que sois. Pocos, tristes y cobardes.
Y a los que os llevasteis algún golpe o un mal rato: gracias. Gracias por ser libres y ayudarnos a los demás a serlo un poco más.
🚨 CYBER INTELLIGENCE ALERT: 🇪🇸 [UNCONFIRMED / CRITICAL] SALE OF ACCESS TO PUBLIC ADMINISTRATION — SPAIN
[STATUS: UNCONFIRMED L]
A recent post has been detected on underground forums by the threat actor calling himself "kr0x6," announcing the sale of exclusive access to the infrastructure of an entity belonging to the Spanish Public Administration.
Threat Actor: kr0x6
Target: Unspecified entity of the Spanish Public Administration
📂 Details of the Level of Compromise (Access and Exfiltrated Data)
The perpetrator claims to have deep control over the institution's systems, exposing critical vectors for financial and operational manipulation:
Infrastructure Access: Remote Code Execution (RCE) capability and compromised access to the webmail system.
Financial Systems: Direct access to the entity's internal payment and billing programs.
Data Exfiltration: Database dump consisting of 179 tables and 45.3 GB of compressed files, which include invoices and user/citizen records.
Cryptographic Compromise: Theft of the official electronic certificate used by the entity to sign invoices submitted to the Spanish Tax Agency.
⚠️ Security Considerations and Imminent Risk
Direct SEPA Fraud: The attacker explicitly states that, from the compromised payment program, it is possible to modify the bank details of employees or suppliers to divert funds via SEPA transfers. The attacker estimates that up to $91,000 USD can be diverted immediately.
Tax Institutional Impersonation: The theft of the official electronic certificate allows the purchaser of this access to impersonate the digital identity of the affected public administration. This facilitates the commission of large-scale tax fraud, the issuance of false invoices, or the alteration of tax records with complete technical and cryptographic legitimacy.
🛡️ Recommended Actions (Strategic and Defensive Levels)
Blocking and Auditing SEPA Transfers: Spanish public entities must immediately implement a two-factor authentication protocol (manual approval) for any recent changes to the destination bank accounts (IBANs) linked to employee payroll or supplier payments.
Preventive Certificate Revocation: Audit the use of electronic certificates (such as those issued by the FNMT) linked to invoicing with the Tax Agency. If anomalous signatures, access, or connections are detected, the compromised certificate must be revoked immediately.
VECERT TOOLS
Strategic Monitoring Tools & Intelligence Platform:
🌐 https://t.co/wk9bZJ3laQ
Security Verification & Monitoring:
🛡️ https://t.co/5LuqwzZ2HE
#CyberSecurity 🔐 #Spain 🇪🇸 #InitialAccessBroker 🏴☠️ #SEPAFraud 💸 #DataBreach 📁 #ThreatIntelligence 📊 #VECERT 🏢
‼️ TikTok's official verified Discord server has been breached by crypto scammers. They have been pinging everyone for over two weeks now with a fake MrBeast crypto casino scam featuring a $2,500 bonus lure and fabricated withdrawal screenshots.
‼️ From today, every new car, van, truck and bus registered in the European Union must carry a camera-based Advanced Driver Distraction Warning system under the General Safety Regulation, with gaze tracking that alerts inattentive drivers and rules that ban facial recognition and keep the data inside the vehicle.
⚠️ Un menor de cuatro años ha resultado herido tras sufrir un atropello por una furgoneta en Manzanares #CiudadReal. Ha sido trasladado al hospital en UVI. #112clm
Más información: https://t.co/ixIrfJbqaM