Cybermidnight Club Podcast - Hackers, Music🏴‍☠

Cybermidnight #Podcast #CyberSecurity #CyberCrime #Hackers #Hacking #Infosec #Podcast #Darkweb #Deepweb @DarkwebToday @ADanielHill #NFTs #NFTCommunity #NFTArt

[Cybermidnight Club Podcast - Hackers, Music🏴‍☠ @TodayDarkweb]

Listen to "Data Analysis: Cybermidnight Club Podcast" by Cybermidnight Club– Hackers, Cyber Security and Cyber Crime. https://t.co/ppVx23A0zf

[Alberto Daniel Hill 🇺🇾🏴‍🏴‍☠️ @ADanielHill]

https://t.co/iAoYaQufTQ

[VECERT Analyzer @VECERTRadar]

CYBER INTELLIGENCE ALERT: POSSIBLE NEW INCIDENTS DETECTED — MEXICO 🇲🇽

[STATUS: UNCONFIRMED / NEW INCIDENTS]

Malicious activity has been detected against two public and private entities in Mexico, identified as cases #6867 and #6866, attributed to the same threat actor.

Affected Entities:

IMSS Bienestar (Mexico City) 🏥

Private Security of the State of Baja California 🛡️

Threat Actor: CHRONUSTEAM 👤

Date of Registration: June 2, 2026 📅

Mitigation Recommendations 🛡️

Technical Audit: The affected entities (IMSS Bienestar and the Baja California Private Security Agency) are urged to initiate incident response protocols to verify the extent of the intrusion.

Infrastructure Monitoring: Strengthen surveillance of endpoints and databases following confirmed activity by the CHRONUSTEAM actor.

Strategic Monitoring Tools 🌐
Intelligence Platform: https://t.co/wk9bZJ3laQ 💻

Security Verification: https://t.co/5LuqwzZ2HE 🛡️

#CyberSecurity #Mexico #IMSSBienestar #BajaCalifornia #CHRONUSTEAM #DataBreach #ThreatIntelligence #CyberAlert #VECERT #UnderInvestigation

[Alberto Daniel Hill 🇺🇾🏴‍🏴‍☠️ @ADanielHill]

@VECERTRadar https://t.co/QjsTLry2ZN

[Alberto Daniel Hill 🇺🇾🏴‍🏴‍☠️ @ADanielHill]

🚨 CYBER ALERT: Chronus Team Activity

The "Chronus Team" has announced the formation of a new subdivision, the "Chronus Revolution Team," in collaboration with a new member identified as "H1." This group is actively recruiting and explicitly targeting banking fraud and carding operations throughout Mexico, with plans to expand across Latin America.

Additionally, intelligence indicates new malicious activity attributed to this actor, targeting public and private entities in Mexico. Stay vigilant—the "devil is on the loose." 😈

#CyberSecurity #LatAmUnderAttack @Thelizard001 #FraudPrevention #ChronusTeam #DataBreach

[Alberto Daniel Hill 🇺🇾🏴‍🏴‍☠️ @ADanielHill]

🚨 ALERTA DE CIBERCRIMEN: Actividad del Chronus Team

El "Chronus Team" ha anunciado el lanzamiento de una nueva subdivisión llamada "Chronus Revolution Team", junto con su nuevo miembro "H1". El grupo está reclutando activamente y se dedica específicamente al fraude bancario y a la clonación de tarjetas (carding) en México, con planes de expansión hacia toda Latinoamérica.

Además, se ha detectado actividad maliciosa atribuida a este mismo actor, la cual ha afectado a entidades públicas y privadas en México. Como ellos mismos han advertido, "el diablo anda suelto". Manténganse alerta.

#CyberSecurity #FraudeBancario @Thelizard001 #LatAmUnderAttack #ChronusTeam #Ciberseguridad

[FΛЦƧƬӨ ZΛVΛᄂΛ M𝕏 @faustozavala]

Que interesante documento en video nos presenta Alberto D. Hill, experto en estos temas.

Como siempre con una gran capacidad de análisis nos relata lo que pasa en su país el cual es un espejo de lo que vivimos en cualquier lugar de LA.

Tienes que escuchar. 🫵🏼

[Alberto Daniel Hill 🇺🇾🏴‍🏴‍☠️ @ADanielHill]

Entrevista Exclusiva: Alberto Daniel Hill vs. PampaLeaks https://t.co/MI6KwtNrUp

[Alberto Daniel Hill 🇺🇾🏴‍🏴‍☠️ @ADanielHill]

Exclusive Interview: Alberto Daniel Hill vs. PampaLeaks https://t.co/VzZ2MooNGx

[Digital Army @DigitalArmyio]

Just a Big Reminder there’s No hiding on the Internet 🫵🏽💯

[Alberto Daniel Hill 🇺🇾🏴‍🏴‍☠️ @ADanielHill]

#Pampaleks Nuevo servicio 🤔

[White Coat Black Cat @medsci_yb3r]

Other update #2: To be fair I would not have know about this Tenant (or the other two without @userlolxxl to begin with).

cc: @cyb3rops

1) I believe there are more of these Tenants out there - have not gotten to them (I’ve never touched ‘cloud stuff’ before in my life)
2) Even this @virustotal graph - I may have thrown some data (i.e. ‘the kitchen sink’ into VT, but it was - and to be clear, the expertise of @userlolxxl who put in the work to make it look nice & pretty.

2) @Cyb3rops you put out a statement earlier re: ‘Bug Bounty & Responsible Disclosure’. Once is an instance, thrice is a hobby?
-Unclear if that applies here, it just sounds nice

-I tried reporting these, I sounded like a dipstick calling/writing to Microsoft that ‘hey guys…sooo…there is this one tenant thing that isn’t mine but is open with my ID/Creds/etc. No dice.

-@userlolxxl took it to the next level and put the data in an easily readable form & submitted it in to MSRC (it’s been a minute now), a ‘bug bounty report’ for these 3 Tenants). Have not heard back from MSRC about them.
-If not mistaken, I believe @userlolxxl also put in a bug bounty report for the subdomain (takeover/makeover?) for -> myCCID[.]ualberta[.]ca
-The email address that had the BEC/ATO (reported 100x over, fell upon deaf ears). My old email address is also a ‘subdomain’ now - I have no idea how that happens (not the only instance of this) -> I was told by @easyDNS and @CIRA the only way this would have been possible, is if I was a ‘Global admin’ at some point or another ( I provided screenshots of that and both #Evidence & #Data to @userlolxxl ) regarding this showing that I was at one point or another ( Uni told me “No Problems” when providing them a vulnerability report = IRL a significant amount of problems across sectors & countries ).

So to be clear…just wanted to clarify…I might have the #Data and #Evidence, but it is @userlolxxl who found the other 2 ‘Rogue’ Tenants that are under my name (still up and running…). I’ve tried reporting - I sounded like a dipstick.

@userlolxxl put in the ‘hard earned work’ - they have yet to receive any acknowledgement about the 3 malicious ‘Tenants’ nor the Subdomain thing.

It’s only #Canada ‘s 3rd largest University [ #Education, and our Provincial #Healthcare & #Government systems ] no big deal right?

No response from @albertaNDP @NathanIpYEG (who I have reported to directly and provided a ‘live presentation on’ ( wherein during ‘live presentation’ @albertaNDP was found to be ‘bleeding out’ their #Data direct to RU ip address - still active )

cc: @ADanielHill this is the kind of ‘ridiculousness’ I was referring to. I could literally slap a report on ‘whoevers’ desk here, but a lack of understanding (similar to your points on a ‘protocol of silence’ - I liken this much to be similar to a lesser and mas estupido version of that).

[Digital Army @DigitalArmyio]

@ADanielHill Shining the light on the Madness as it’s Happening ‼️🔥

[Alberto Daniel Hill 🇺🇾🏴‍🏴‍☠️ @ADanielHill]

https://t.co/kxmfTUfBHk

[White Coat Black Cat @medsci_yb3r]

@userlolxxl @g0njxa Just sent the best metaphor of what this means to @TheBreakdownAB here in @Alberta that makes some sense (if you will) to non-technical people. Does this look about correct @ADanielHill ??

[Alberto Daniel Hill 🇺🇾🏴‍🏴‍☠️ @ADanielHill]

https://t.co/eXWbidXAxu

[Alberto Daniel Hill 🇺🇾🏴‍🏴‍☠️ @ADanielHill]

Tested and validated by me.

[Alberto Daniel Hill 🇺🇾🏴‍🏴‍☠️ @ADanielHill]

Validated by me.

[Alberto Daniel Hill 🇺🇾🏴‍🏴‍☠️ @ADanielHill]

Darias Daries https://t.co/lK2O2iDS0Y

[White Coat Black Cat @medsci_yb3r]

@g0njxa (Looking for “Defo not an Expert”) - I have 3 Tenants (not mine, not my jam, your guess is as good as mine).

Oh wait…#DataBreach at #Canada’s 3rd Largest University, ATO/BEC -> Multi-Account Takeover b/c non-technical Karen’s -> “No Problems” [ #Education ] + Time for Lateral Movement & Privilege Escalation over to @youralberta @albertandp @albertaUCP @Treaty8FNA @CT6FN_ RCMP/EPS/CrimeStoppers #Government + @AHS_media #Healthcare = this is only 3 Tenants of ??
- - -
Translation: You are actively being (literally not figuratively) robbed as we speak #Alberta
- - -
@cyb3rops to follow up, reporting things like this = MSRC @microsoft folks weren’t friendly or helpful when I tried to report these (when I had less of an idea of what was going on).
- - -
cc: @userlolxxl I believe is finding much of the same:

“I did reported: EntraID POwerAppsPOrtal - blank page template: d2e21312-0f63-4c25-8e95-fbd008baed07
Report
Web site: https://t.co/t2Nk1xa5pZ contains in its source code publicly available tenant 718b8a9b-44d8-441a-a344-4294ea842172. This tenant was misused/abused by criminals. The complex study is published: https://t.co/AoNrdNoJdh. We identified the url of PowerApps circa a year ago using FOFA: https://t.co/5jzmDrcUrV further, published on X (latest): https://t.co/m0BgOp1VlG
Pulses are published on LevelBlue/OTX; the most important: https://t.co/nd29Uha2KT (https://t.co/OoSgb51cHg), 2096 group especially focusing to solve stolen identity of the person associated with this tenant 718b8a9b-44d8-441a-a344-4294ea842172. Could you please remove the tenant from the publicly available website? .......................I wonder if anyone will hear back at all.”

https://t.co/A3cF3juzZx = 1x Tenant of the 3 highlighted below.
- - -
Certificates cc: @magicswordio are being pulled (apparently they’re on everything). It’s wild. @skocherhan just matching them up for takedown yayyy (there are literally thousands - that…is not normal). Taking their sweet time finally to ‘go away’ hopefully. ***************************************************
- - -
***Psuedo-related Q: Anyone want to buy a sub-domain at one of #Canada’s largest Universities? (or more?) The said subdomain is quite literally my name & email (just one) siphoning off #Data #Money #Evidence whathaveyou for a ‘hot minute’. But the registrars say it’s legit and mine - so…there is that. cc: @ADanielHill