Supertrain_fan

Estudiante de Ingeniería Electrónica, músico, modelador 3d, ferroaficionado.
Keyboard warrior simracer, #TrainSimulator enthusiast.

Blue and Orange morality.

[Papa León XIV @Pontifex_es]

Las inteligencias artificiales no viven una experiencia, no poseen un cuerpo, no pasan por la alegría y el dolor, no maduran en las relaciones ni conocen desde dentro lo que significan el amor, el trabajo, la amistad y la responsabilidad. Tampoco tienen una conciencia moral: no juzgan el bien y el mal, no captan el sentido último de las situaciones ni asumen el peso de las consecuencias. Pueden imitar, pueden simular pero no conocen lo que producen, porque no residen en el horizonte afectivo, relacional y espiritual en el que el ser humano se hace sabio. #MagnificaHumanitas

[Ariel López @arieIIopez]

Era de manual que no iba a funcionar

Chicureo expresa el límite del suburbio, un modelo urbano basado en movilidad individual que tarde o temprano colapsa por dependencia del auto, segregación y expansión dispersa, aumentando costos y tiempos de viaje

Entrevista en @latercera

[Germán Fernández @1ZRR4H]

🇨🇱 CHILE: Campaña de fraude sigue activa 💰
Según nuestro conocimiento, el origen de este fraude debería ser una tienda falsa o comprometida que redirecciona a las víctimas hacia esta "pasarela de pago" Webpay falsa controlada por los delincuentes.

La infraestructura corresponde a un live panel utilizado para operar y explotar en tiempo real las credenciales bancarias de las víctimas.

Incluye:
▪ Panel en vivo para monitorear sesiones activas.
▪ Robo de tarjetas, credenciales y códigos SMS/OTP.
▪ Chat de operadores para coordinar ataques.
▪ Interacción en tiempo real mientras la víctima completa los datos.
▪ Clasificación de víctimas por estado: "Standby", "Finalizada", "Coronada", etc.

Al menos 9 templates para bancos chilenos.

H/T @tial_cl 💪

[TIAL @tial_cl]

🚨 Atención #Chile | web suplanta a Webpay para robo de información bancaria.

Dominio:
pagowebpayplus[.]cl

@1ZRR4H
#Ciberseguridad #Phishing #CTI #Fraude

[Killed by Google @killedbygoogle]

we knew search was dead

but now it's dead dead

[VECERT Analyzer @VECERTRadar]

🚨 CYBER INTELLIGENCE ALERT: ALLEGED DATA LEAK - CHILE 🇨🇱

⚠️ MODERATE THREAT: ACTOR EXFILTERS OVER 6,000,000 RECORDS OF CHILEAN CITIZENS

[STATUS: COMPROMISE UNDER ANALYSIS / PROBABLE REPOST / UNCONFIRMED SAMPLES]

A threat actor operating under the alias hxleyys has announced the release of a massive database allegedly containing the private information of 6,000,000 users residing in Chile. The data batch has been hosted on the Mega cloud storage service. The size of the breach and the type of structured fields suggest that this is not a recent intrusion into state infrastructure, but rather has a high technical probability of being a REPOST (recycled or consolidated data) of previous historical incidents.

🎯 Affected Region: Republic of Chile

👤 Threat Actor: hxleyys

📂 Data Volume: 6,000,000 individual records.

📊 ANALYSIS OF EXPOSED INFORMATION FIELDS
The published manifesto outlines the extraction of a comprehensive data surface for profiling individuals:

🆔 Mandatory Contact and Identification:

Mobile and landline phone numbers, personal email addresses, and the Unique Account Identifier (UID / User ID).

👤 Personally Identifiable Information (PII):

Full names, surnames, registered gender, full dates of birth, and marital or relationship status.

📍 Geographic Location Data:

Record of current city of residence and hometown.

📈 Social, Employment, and Metadata Activity:

History of educational institutions (schools/universities), past and present employment records, interest groups, followed websites or commercial pages, exact date of original account registration, profile creation time, and metadata from the last system update.

🛡️ MITIGATION AND CONTAINMENT RECOMMENDATIONS

🔒 Strengthening Authentication Policies: Financial corporations in Chile should discontinue the use of security questions based on historical location data, date of birth, or previous employment history to validate identities via telephone support.

🔍 Repost Audit: Conduct a cross-correlation analysis of the sample provided by the actor against databases of historical incidents (such as the 2021 Facebook global breach) to confirm the percentage of duplicate data and determine the true extent of the threat.

⚡ MONITORING AND EVALUATION

🌐 Intelligence System: https://t.co/wk9bZJ2Nli

🛡️ Quickly assess your website's security with: https://t.co/YnDw1QjN9c

#CyberSecurity #Chile #DataLeak #ChileDB #hxleyys #MegaLeaks #PII #SocialScraping #ThreatIntelligence #CyberAlert

[TOYOTA RACING Fans @TOYOTARACEFANS]

@RandomWECMemes

[Motorsport @Motorsport]

THE DACIA LOGAN HAS FINISHED THE 24H NURBURGRING!!!

[VECERT Analyzer @VECERTRadar]

🚨 🇨🇱 CYBER INTELLIGENCE ALERT: MASSIVE CAMPAIGN AGAINST DIGITAL INFRASTRUCTURE IN CHILE

⚠️ MORE THAN 120 DOMAINS COMPROMISED

The Pharaoh's Team threat group has published a massive list of more than 120 compromised targets, almost all belonging to the Chilean domain name space (.cl). The attackers are offering for sale direct access to control panels (cPanel) and WordPress admin privileges (WP-admin), granting them complete control over the websites and their associated databases.

🎯 Affected Sectors: Government, Education, Legal, Transportation, and Commercial in Chile.

👤 Threat Actor: Pharaoh's Team

🛠️ Access Vectors: cPanel and WordPress Admin Credentials.

📅 Detection Date: May 2026

📊 ANALYSIS OF COMPROMISED ENTITIES

🕵️‍♂️ THREAT SUMMARY

The Pharaoh's Team threat group has published a massive inventory of compromised access points targeting almost exclusively Chilean digital infrastructure. The attackers gain complete control through cPanel and WP-admin credentials, allowing them to manipulate files, databases, and institutional emails.

These are the entities with the greatest institutional and social impact:

🏛️ Government and Municipal Sector

Municipality of Palmilla: https://t.co/HOlQj2TaYO. The compromise of municipal data subdomains represents a critical risk to citizens' privacy and the integrity of local public services.

🎓 Education Sector (Institutions and Schools)

San Viator School of Macul: https://t.co/heR1KK1x4f

Hispano Americano School: https://t.co/m6d0kf4uw5

Portales School: https://t.co/ogFog5onzb

La Igualdad High School: https://t.co/dMsgdpyVWO

GRC High School: https://t.co/XuX1X09Yfc

Prince of Asturias School (Valdivia): https://t.co/8pJe2wNhcP

⚖️ Notary and Legal Sector (Public Faith Services)
Julio Abuyeres Notary Office: https://t.co/TVuAVyAmHQ

Renata González Notary Office: https://t.co/bJHWqt7N1X

Villalobos Notary Office: https://t.co/z7HYDtFl3Q

CEP Abogados: https://t.co/AgdTwOVZsG

IP Abogados: https://t.co/X6RLhGHe5W

🚌 Transportation, Unions, and Health
Narbus: https://t.co/L5X7dLTvma (Intercity bus company).

Starbucks Union: https://t.co/YDUqSKDyLb.

Arrayán Mental Health: https://t.co/X3Rd1PKDRo.

💼 Unions and Associations:

https://t.co/YDUqSKDyLb (Starbucks Chile Workers' Union).

[RISK ANALYSIS]: By gaining access to cPanel, the attacker not only controls the website's visible content (via WP-admin), but also has the ability to intercept institutional emails, load phishing emails, deploy malware to infect visitors, and access databases containing Personally Identifiable Information (PII) of citizens and clients.

🛡️ MITIGATION AND RECOMMENDATIONS

🛑 Credential Reset: Administrators of the listed domains are urged to immediately change passwords at all levels (cPanel, Database, FTP, and WordPress Users).

⚠️ File Audit: Review the root directory for recently uploaded suspicious .php files (Webshells) that could allow the attacker to persist.

🔒 MFA Implementation: Mandatory Multi-Factor Authentication (2FA) must be enabled for access to control panels and content management.

💻 Plugin Audit: Update all WordPress components, as the exploit often stems from vulnerabilities in unpatched plugins.

⚡ MONITORING

🌐 Monitoring System: https://t.co/wk9bZJ3laQ

#Cybersecurity #Chile #DataBreach #cPanel #WordPress #PharaohsTeam #CriticalInfrastructure #VECERT #CyberAlert #InfosecChile

[H @hernan_sr]

Salen a la luz las pruebas que podrían poner fin al gobierno de Kast

Revelan que en los archivos de Viktor Orban, existen documentos donde hay un aporte de 1 millón de dólares a organización presidida por Kast.

Al parecer los viajes por el mundo que hizo Kast antes de asumir fueron financiadas por el estado Húngaro.

original👇. traducido👇

[Mirko Tarsetti @Mirk_T]

Pensé que era el cerro Santa Lucía.

[Bot Checker 🤖 @BotCheckerCL]

🚨 2da Alerta grave: hackers accedieron a sistemas de la Tesorería General de la República (pagos del Estado). cambiaron la contraseña para quedarse adentro. En riesgo los sistemas de recaudación.

Dato extra: El ex equipo técnico de la TGR hoy está casi todo en chilecompra 🫠

[B r o c c u u u u u u u u ~ (BLM) @BroccuChan64]

THEN LISTEN TO YOUR USERS

People don't want ai slop on the platform
People don't want ai moderation
People don't want illegal scam ads on their feed
People don't want unskippabe ads
People don't want to be banned for no reason

If you truly see us, THEN FUCKING DO SOMETHING

[Agencia Nacional de Ciberseguridad (ANCI) @ANCIChile]

Sobre los reportes de las últimas horas, la Agencia Nacional de Ciberseguridad (ANCI) informa lo siguiente: https://t.co/hv24nPpbtw

[VECERT Analyzer @VECERTRadar]

🚨 CRITICAL CYBER THREAT ALERT: ALLEGED COMPROMISE OF TRANSPORTATION INFRASTRUCTURE – EFE TRENES DE CHILE 🇨🇱🚆🗺️ [STATUS: UNVERIFIED]

A social media post has been detected from the threat actor NemorisHacking, suggesting unauthorized access to critical management systems belonging to the State Railway Company (EFE) in Chile. The actor claims to have control over the operations panel for Santiago's railway services.

🏢 Affected Entity: EFE Trenes de Chile (State Railway Company).

👤 Threat Actor: NemorisHacking.

🛠️ Compromised Asset (Alleged): Control and geographic monitoring panel for railway infrastructure.

🔑 Claimed Capabilities: The actor asserts the ability to activate and deactivate train service connection channels within Santiago.

📅 Date of Detection: April 30, 2026.

⚠️ Status: ALLEGED / UNVERIFIED.

#CyberSecurity #Chile #EFE #TrenesDeChile #NemorisHacking #CriticalInfrastructure #CSIRT #VECERT #InfoSec #Unverified 🇨🇱🛡️⚠️🚨🚆

[Radio ADN @adnradiochile]

Reportan incidente de ciberseguridad en Chile: TGR y Registro Civil entre los afectados
https://t.co/WpCYYkjS0V

[VECERT Analyzer @VECERTRadar]

🚨 CRITICAL CYBERINTELLIGENCE ALERT: GOVERNMENT INFRASTRUCTURE COMPROMISE – GENERAL TREASURY OF THE REPUBLIC (CHILE) 🇨🇱🏛️🔐

A high-impact technical breach targeting the General Treasury of the Republic (TGR) has been detected. According to activity monitored on specialized Telegram channels, the threat actor "rutify" has compromised and distributed critical administrative access credentials.

🏢 Affected Entity: General Treasury of the Republic (TGR), Chile.

👤 Threat Actor: rutify.

🛠️ Attack Vector: The data was reportedly initially extracted from an Infostealer log (malware designed for credential theft).

🔐 Credential Status: It is reported that the threat actor changed the password following initial access to ensure persistence.

🔑 Compromised Asset: API Design and Management Dashboard.

📅 Date of Detection: April 30, 2026.

📊 Impact Analysis (Public Sector)

Access to the TGR's API management platform poses systemic risks:

Revenue Collection Area: The user account is associated with external revenue collection processes, thereby compromising the integrity of the State's payment processing services.

API Control: As this is a management platform, the attacker could gain visibility into sensitive endpoints, technical documentation, and authentication methods for national financial services.

🛡️ Immediate Response Recommendations

🔒 Recovery and Lockdown: The TGR is urged to perform a forced password reset on the affected account and audit any changes made to the permissions of the managed APIs.

👁️ Mandatory MFA: Implement Multi-Factor Authentication (MFA) for all external access points to render passwords obtained via malware useless.

Monitor: https://t.co/wk9bZJ2Nli

#CyberSecurity #Chile #TGR #Infostealer #TelegramLeak #APICompromise #CSIRT #VECERT #InfoSec #SinVerificador 🇨🇱🛡️⚠️🚨🔐

[VECERT Analyzer @VECERTRadar]

🚨 UPDATE: INFRASTRUCTURE AND DATA – CHILE 🇨🇱🏛️📱

Persistent and critical activity targeting major telecommunications and public service entities in Chile has been detected. The threat actor "rutify" has published records suggesting the leakage of sensitive data over the past 48 hours.

📅 Detected Today (04/30/2026):

https://t.co/aQpz6XhvkR: Initially classified as "Unclassified," suggesting a breach within the operator's portals or databases.

https://t.co/eBxO5M5Thu: Incident categorized under the "Technology" sector, indicating a compromise of the company's infrastructure.

📅 Detected Yesterday (04/29/2026):

REGISTRO CIVIL, CORREO, CLAVEÚNICA: This finding is of the utmost severity, as it alleges the compromise of citizen identity systems (ClaveÚnica), civil registries, and mail servers.

⚠️ Risk Implications (VECERT Intelligence)

Compromise of National Identity: The alleged compromise of the *ClaveÚnica* (Unique Key) system could allow malicious actors to impersonate citizens in order to conduct legal, banking, and healthcare-related procedures on government portals.

Exposure of Telecommunications Data: The breaches at Claro and WOM expose the private information of millions of users, facilitating SIM swapping attacks, extortion, and telephone fraud.

🛡️ Immediate Response Recommendations

🔒 Urgent *ClaveÚnica* Password Change: Citizens are advised to update their passwords on the official *ClaveÚnica* portal and enable additional authentication methods if available.

🔑 Telco System Audit: Claro and WOM are urged to conduct a forensic review of their customer databases and internal system access logs.

👁️ Email Monitoring: Due to the mention of "CORREO" (Mail), users should remain alert for highly sophisticated phishing attempts that leverage actual leaked data.

Monitor: https://t.co/wk9bZJ3laQ

#CyberSecurity #Chile #RegistroCivil #ClaveUnica #ClaroChile #WOM #DataBreach #CSIRT #VECERT #InfoSec #SinVerificador 🇨🇱🛡️⚠️🚨🔐

[La Razón @larazon_es]

❌ Se acabaron los "daños colaterales" de Javier Tebas: el Congreso frena los bloqueos indiscriminados de IPs por parte de LaLiga.

➡️ Tras años de bloqueos masivos sin control, se impondrán límites para que el Internet español no se paralice cada... https://t.co/7VhELVmOtK

[Yo❤️🐧Pingüino de Humboldt & 🐸 Ranita de Darwin @Piureman]

Kast hasta las masas en el caso de corrupción en Hungría.
De comprobarse que hubo traspaso de dinero entre Budapest y Santiago para financiar la campaña de Kast, las presidenciales quedarían nulas, según la Ley N° 19.884 sobre Transparencia, Límite y Control del Gasto Electoral.