Hacking Space 📡

A source for security researchers, and tech enthusiast

#OSINT #Pentesting #ThreatIntelligence

[Hacking Space 📡 @hackingspace]

Android was sold to us as an open platform. Now Google wants every developer to register and submit ID just to let you install their apps. Don't let them rug-pull 3 billion users. https://t.co/AEPw1MmZFV @AlteredDeal #KeepAndroidOpen

[Hacking Space 📡 @hackingspace]

A threat actor on a Dark web forum claims to have hacked Turkish call center firm UlakCX, allegedly affecting major banks, airlines and telecoms. They claim 100GB+ was sold and threaten a 40GB leak.
#DataBreach #ThreatIntel

[Hacking Space 📡 @hackingspace]

A dark web forum post claims to share 12,566 files from Tera (Turkey) for free, allegedly including 193K+ KYC documents, 17 databases and crypto wallet data. Not independently verified. #CyberSecurity #DataBreach

[Hacking Space 📡 @hackingspace]

@kiri_pak @grok @grok answer him

[Hacking Space 📡 @hackingspace]

exploits, random files just chilling in public... 🤓
#cybersecurity

[Hacking Space 📡 @hackingspace]

Some people are so busy. I admire their motivation.
#cybersecurity

[Hacking Space 📡 @hackingspace]

@abuse_ch The findings clearly indicate that the malware in question was developed by Turkish-speaking threat actors.

[Hacking Space 📡 @hackingspace]

@pidoras3458 I found this today too.
3 different full iOS RCEs.
Hint: Chinese server 😃

[Steven Lim @0x534c]

🎣 https://t.co/LElYRAAzfB researchers identified 𝗦𝗸𝘆𝘄𝟰𝗹𝗸𝗲𝗿, a 𝗱𝗲𝘃𝗶𝗰𝗲 𝗰𝗼𝗱𝗲 𝗽𝗵𝗶𝘀𝗵𝗶𝗻𝗴 campaign primarily 𝘁𝗮𝗿𝗴𝗲𝘁𝗶𝗻𝗴 𝗨.𝗦. 𝗼𝗿𝗴𝗮𝗻𝗶𝘇𝗮𝘁𝗶𝗼𝗻𝘀 across the manufacturing, technology, and healthcare sectors. The campaign uses password-protected contract or service-proposal decoys and sites[.]google[.]com lures to redirect victims to Microsoft authentication, seeking M365 token access without directly harvesting passwords.
​
#Skyw4lker #DeviceCodePhishing

[Hacking Space 📡 @hackingspace]

@abuse_ch A screenshot from their stealer panel dashboard.

[abuse.ch @abuse_ch]

Nyxar Stealer with potential Turkish roots 🇹🇷, sold as malware-as-a-service with of 60 modules, including:

🪝 Browser credential and cookies stealer
💬 Messaging app credential stealer (Discord, Telegram, etc)
👛 Crypto wallet stealer
🎮 Gaming app credential stealer (Steam, Epic, etc)

Probably of turkish origin:
🕑 Client quotas reset at 03:00 Instanbul time
🇹🇷 tr-TR formatting and error messages in bot admin panel

Botnet C2s:
📡nyxar .cc
📡nyxar .lol
📡nyxarstealer .lol
📡nyxarst .lol
📡polnet .lol

Malware samples:
https://t.co/89iA4Y8kQR

[0x6rss @0x6rss]

Türk tehdit aktörleri chatgpt daybreak için KYC kovalamaya başlamışlar. artık tehdit aktörlerimizin "doğrulanmış" onlarca siber ajanları olabilir. sıkıntı

[Hacking Space 📡 @hackingspace]

@_shadowintel_ 😄

[0x6rss @0x6rss]

hatırlarsanız geçtiğimiz yaz BtcTürk'teki cüzdanlar hedef alınarak yaklaşık 45-50 milyon dolarlık bir siber saldırı gerçekleşmişti. @Root0ne 'ın geliştirdiği PusulaTrace isimli algoritmik model, bu saldırının Kuzey Kore ilişkili Lazarus APT grubuna atfetdildiğini önemli ölçüde kanıtlar nitelikte. 👇

[Hacking Space 📡 @hackingspace]

@AikidoSecurity

[Hacking Space 📡 @hackingspace]

@kaganisildak

[Hacking Space 📡 @hackingspace]

https://t.co/m1LDLrSiJn

Open search engine for domain research and OSINT: 38.5M domains scanned, free API tier, no tracking, no tracking, no tracking no tracking, no tracking

[Hacking Space 📡 @hackingspace]

@akaclandestine

[International Cyber Digest @IntCyberDigest]

‼️ BREAKING: This is the voice Dutch police want identified: a Dutch-speaking man who called Odido's customer service posing as a colleague from IT.

That single call is how ShinyHunters ended up with the data of more than 6 million people.

Police say the recording is not AI.

[Hacking Space 📡 @hackingspace]

@ridvanyagli 🤣