Hedawich

[Repacked Tools @AlistairI3613]

SA Shield Threat Intelligence | 6 October 2026 https://t.co/xFoyp8ikiG

[Luke Stephens (hakluke) @hakluke]

I am one good post away from cracking 100k followers and it's driving me bonkers, so here's the deal.

I'll post a WiFi pineapple pager to someone who follows me and likes this post.

[Dark Web Intelligence @DailyDarkWeb]

🇿🇦 South Africa: Webafrica Customer Database Allegedly Advertised for Sale

* Threat actor claims to be offering data allegedly sourced from Webafrica, a South African internet service provider

* The listing advertises approximately 742,000 records containing customer, subscription, and support-related information

* According to the seller, the dataset is organized into three primary categories:
* Customer contact records
* Internet service subscription information
* Customer support case data

* Allegedly exposed customer information includes:
* Full names
* Dates of birth
* Email addresses
* Mobile and landline phone numbers
* Physical and mailing addresses
* Postal codes
* Customer segmentation details
* Language preferences
* Account tier information
* Marketing preferences
* Login activity
* Assigned account managers
* Contact scores and lifecycle status

* The subscription dataset reportedly contains:
* Subscription identifiers
* Service plan information
* Activation and expiration dates
* Monthly fees
* Payment methods
* Outstanding balances
* Contract durations
* Data usage statistics
* Internet speed tiers
* Installation dates
* Service provider information
* Account management details
* Service termination reasons

* The support case section allegedly includes:
* Customer support tickets
* Issue descriptions and categories
* Resolution notes
* Assigned support personnel
* Escalation levels
* SLA deadlines
* Customer satisfaction scores
* Interaction histories
* Follow-up records
* Internal support notes

* The threat actor is advertising the dataset as containing customer communications, subscription records, and support case information from the organization

* At the time of reporting, Daily Dark Web has not independently verified the authenticity of the dataset or the claims made by the threat actor

Analyst Note:

Telecommunications and ISP datasets are particularly valuable because they combine identity information, billing records, service usage data, and customer support interactions. If authentic, such information could facilitate highly targeted phishing campaigns, SIM-swap preparation, account takeover attempts, customer impersonation, and business email compromise operations against both customers and employees.

#DDW #Intelligence #Webafrica #DarkWeb

[Hedawich @sinister_kenny]

@vxgiveaways This would be awesome 😎

[Hedawich @sinister_kenny]

@_0b1d1 pdf

[Hedawich @sinister_kenny]

@_0b1d1 Pdf

[Hedawich @sinister_kenny]

@MWEBTweets Waiting 20 min to have a call answered and the app is broken with no live chat that works

[Hedawich @sinister_kenny]

@MWEBTweets We suppose to have 500mb , spent the morning with Mweb support and still nothing close to a 100mb’s

[Hedawich @sinister_kenny]

1500 Day Streak Badge on TryHackMe 🥳
https://t.co/bkGvMP60dO #tryhackme via @tryhackme

[Hedawich @sinister_kenny]

@JHBWater There is no water in Amorosa

[Hedawich @sinister_kenny]

@vxunderground @_MG_ @Hak5 Vat hom fluffy - great stuff

[Hedawich @sinister_kenny]

@vxunderground Great stuff guys , love your work 😉

[Hedawich @sinister_kenny]

@vxunderground @AlteredSecurity This is a great one ☝️

[Hedawich @sinister_kenny]

@vxunderground Go for gold again 😀

[Hedawich @sinister_kenny]

@vxunderground @cyberwarfarelab Go for gold 😆

[Hedawich @sinister_kenny]

@_JohnHammond 🦃 @NahamSec 🦃

[Hedawich @sinister_kenny]

@cyb3rshi3ld Hi 👋

[Hedawich @sinister_kenny]

@JHBWater @BoertjieBeer Will this affect Amorosa , little falls and surrounding areas ? Ref: 404905768

[Hedawich @sinister_kenny]

@JHBWater Can we have feedback for Amorosa , call logged 404905768