Base de datos de filtraciones

Actor: #incransom Victim: Life Bridges Date: 2026-06-26 05:08:35 UTC+3 According to #DarkWeb #Ransomware activity detected by the ThreatMon Threat Intelligence Team. The “#incransom” Ransomware group has added Life Bridges to its victims. Ransomware …

Actor: #nightspire Victim: Grupo Riquelme Date: 2026-06-26 03:15:53 UTC+3 According to #DarkWeb #Ransomware activity detected by the ThreatMon Threat Intelligence Team. The “#nightspire” Ransomware group has added Grupo Riquelme to its victims. Ranso…

RT by @H4ckmanac: Cyber Alert ‼ Spain - 𝗟𝗲𝗿𝗼𝘆 𝗠𝗲𝗿𝗹𝗶𝗻 𝗘𝘀𝗽𝗮ñ𝗮 The threat actor Saturne claimed to have leaked a database belonging to Leroy Merlin Spain, allegedly exposing 54,723 customer records. The leaked data reportedly includes personal, contact,…

#RiskFriday 𝟏𝟕-𝟐𝟑/𝟎𝟔/𝟐𝟎𝟐𝟔 Here’s this week’s snapshot from https://hackrisk.io based on our proprietary 𝐄𝐒𝐈𝐗© (𝐸𝑠𝑡𝑖𝑚𝑎𝑡𝑒𝑑 𝑆𝑒𝑣𝑒𝑟𝑖𝑡𝑦 𝐼𝑛𝑑𝑒𝑥) metric that measures operational, financial (direct & indirect), technical and reputational impact of cyber a…

Cyber Alert ‼ USA - 𝗣𝗼𝗹𝘆𝗺𝗮𝗿𝗸𝗲𝘁 Polymarket confirmed a third-party compromise that enabled attackers to inject malicious code into its website, leading to the theft of user funds. The company contained the incident and will refund affected users. Arou…

Cyber Alert ‼ USA - 𝗖𝗮𝗹 𝗔𝗜 A threat actor using the name "calaibreached" claimed to be selling a database allegedly belonging to Cal AI, containing 12,002,324 records. Threat actor: calaibreached Sector: ICT Data exposure (claimed): 12,002,…

@heiseonline @golem @etguenni Threat intelligence and cyber alert feed covering data breaches, ransomware incidents and vulnerability disclosures. @heiseonline @golem @etguenni Referencias Tweet original en X Perfil de @H4ckmanac

Cyber Alert ‼ Dominican Republic - 𝗣𝗢𝗟𝗜𝗧𝗨𝗥 Krybit hacking group claims to have breached POLITUR. Allegedly, the attackers exfiltrated 154 GB of data. Threat actor: Krybit Sector: Gov / Mil / LE Data exposure (claimed): 154 GB of data Data type: Not s…

Cyber Alert ‼ Germany - 𝗔𝘁𝗹𝗮𝘀 𝗘𝗹𝗲𝗸𝘁𝗿𝗼𝗻𝗶𝗸 The Gentlemen hacking group claims to have breached Atlas Elektronik. Threat actor: The Gentlemen Sector: Manufacturing Data exposure (claimed): Not specified Data type: Not specified Observed: Jun 25, 2026 St…

𝗗𝗮𝘆 𝟮 𝗶𝘀 𝗶𝗻 𝗳𝘂𝗹𝗹 𝘀𝘄𝗶𝗻𝗴 𝗮𝘁 𝗜𝗻𝘁𝗲𝗿𝗻𝗮𝘁𝗶𝗼𝗻𝗮𝗹 𝗣𝗼𝗹𝗶𝗰𝗲 𝗘𝘅𝗽𝗼 𝟮𝟬𝟮𝟲! The best part of an event isn't the presentations. It's the conversations happening in between. Day 2 has been full of great discussions, new connections, and live demos at the Steal…

One thing we've learned from 𝗗𝗮𝘆 𝟭 𝗮𝘁 𝗜𝗻𝘁𝗲𝗿𝗻𝗮𝘁𝗶𝗼𝗻𝗮𝗹 𝗣𝗼𝗹𝗶𝗰𝗲 𝗘𝘅𝗽𝗼 𝟮𝟬𝟮𝟲 The best part of any event isn't the booth. It's the people you meet. Today was filled with conversations, new perspectives, and plenty of great moments with visitors…

We identified a deceptive browser extension campaign involved in affiliate marketing fraud, impersonating consumer brands (streaming, productivity, music, etc) with typosquatted .shop domains. 2,000-plus installations so far. Details at https://bit.l…

Stormous is back with increased activity. Recent victims have had their public websites defaced with a ransomware message displayed directly on the homepage—a pressure tactic sometimes used by ransomware groups to increase urgency and force negotiati…

Country Spotlight: Canada Over the past 7 days, our AI-powered platform tracked ransomware and cyber extortion attacks targeting Canada. Independent cyber threat research covering malware campaigns, phishing infrastructure and vulnerability exploitat…

Sector Spotlight: HealthCare Over the past 7 days, our AI-powered platform tracked ransomware and cyber extortion groups actively targeting the HealthCare sector. Independent cyber threat research covering malware campaigns, phishing infrastructure a…

How is the Millenium RAT developer "ShinyEnigma" enabling widespread access to this threat through a low-cost MaaS model? Read our full technical analysis on the command structure, persistence mechanisms, and complete MITRE ATT&CK mappi…

The Y2K Operators threat actor is using sophisticated #socialengineering lures, disguising payloads as legitimate software, cracked applications, gaming cheat tools (e.g., Roblox), and used PDF decoy documents. Group-IB Threat Intelligence feed featu…

Group-IB telemetry has identified over 62,000 compromised endpoints across more than 160 countries infected with #MilleniumRAT (4.x). The infection velocity is alarming, with over 39,000 of these detections occurring in Q1 2026 alone, representing 64…

Pinned: #MilleniumRAT (v4.x) marks a significant evolution in the threat landscape. The #malware has been completely rewritten from .NET to a native C++ application, removing .NET dependencies. This architectural shift enables greater stealth and res…

RT by @H4ckmanac: Cyber Alert ‼ Spain: 𝗠𝘂𝘁𝘂𝗮 𝗠á𝘀 - 𝗘𝗹𝗣𝗮𝗿𝗸𝗶𝗻𝗴 Mutua Más disclosed a data breach affecting its ElParking app after unauthorised access, exposing user email addresses, phone numbers, licence plates, and DNI numbers. Threat actor: Not spe…

Source: https://www.democrata.es/en/economy/data-breach-at-mutua-mas-s-elparking-emails-phone-numbers-license-plates-and-national-id-numbers-of-users-exposed/ Threat intelligence and cyber alert feed covering data breaches, ransomware incidents and v…

Cyber Alert ‼ Italy - 𝗣𝗜𝗡𝗞𝗢 betway threat actor claims to have breached PINKO, allegedly exfiltrating 3,000,000 records related to customers. Threat actor: betway Sector: Wholesale / Retail Data exposure (claimed): 3,000,000 records Data type: Custom…

Cyber Alert ‼ Peru - 𝗢𝘀𝗶 𝗠𝗲𝗱𝗶𝗰𝗮𝗹 𝗖𝗲𝗻𝘁𝗲𝗿 Kazu threat actor claimed a data breach on Peru’s Centro Médico Especializado OSI, allegedly exfiltrating data from 159,824 users across 504,413 files. Threat actor: Kazu Sector: Healthcare Data exposure (claim…

RT by @stealthmole_int: Following the Money: Mapping KidBin's Cryptocurrency Infrastructure Across Darkweb Note: When visiting this blog, you may see a "Sensitive Content" warning from Blogger. This warning is automatically generated b…

Security OSINT Highlights — Third Week of June 2026 The reporting set is dominated by vulnerability activity, with repeated coverage of actively exploited flaws, broad multi-CVE product advisories, and several clusters affecting browsers, enterprise …

We detected a Browser-in-the-Browser phishing kit for malware delivery rather than credential theft. It uses a draggable pop-up with a spoofed URL to serve a fake "software out of date" warning. It sends malware that it instructs users to r…

We continue to monitor additional sources in the darknet. Here are some of the events that were added to our platform in the last week. 1 A major breach exposed over 500GB of sensitive personal information from job seekers, posing a high risk of iden…

The Gentleman is on another victim-publishing spree. Today alone, the group added victims across multiple sectors and regions, including: Construction, Healthcare Retail Manufacturing Media & Culture Engineering & IT Services Real Estate Busi…

24H Cyber Pulse — ransomware & breach activity snapshot Total Attacks (24h): 18 Top Countries (24h): United States: 6 Brazil: 2 Colombia: 1 Myanmar: 1 South Korea: 1 Top Sectors (24h): Financial: 3 HealthCare: 2 Retail: 2 Technology: 1 Legal: 1 T…

RT by @H4ckmanac: Cyber Alert ‼ Japan - 𝗞𝗗𝗗𝗜 KDDI warned users to change their passwords after disclosing unauthorised access to its email system used by six internet service providers (ISPs), potentially exposing up to 14.22 million email accounts. …

Cyber Alert ‼ Kuwait - 𝗗𝗵𝗼𝘄 𝗜𝗻𝘁𝗲𝗿𝗻𝗮𝘁𝗶𝗼𝗻𝗮𝗹 𝗛𝗼𝗹𝗱𝗶𝗻𝗴 The Gentlemen ransomware group claims to have breached Dhow International Holding. Threat actor: The Gentlemen Sector: Financial Data exposure (claimed): Not specified Data type: Not specified Observe…

Source: https://www.47news.jp/14513146.html Threat intelligence and cyber alert feed covering data breaches, ransomware incidents and vulnerability disclosures. Source: 47news.jp/14513146.html Link 速報1422万件メール情報漏えいとKDDI KDDIは23日プロバイダー6社に提供するメールシステムに不…

RT by @stealthmole_int: Government-Related Leak and Sale Activity Observed Across Dark Web and Deep Web Sources — 3rd Week of June 2026 Observed activity shows a broad set of government-related leak, sale, and extortion-related postings distributed a…

The latest macOS ClickFix variant invisibly mounts DMG images in the background to execute a macOS infostealer and hijack cryptocurrency wallet info. Details at https://bit.ly/4ahgmhJ Palo Alto Networks Unit 42 threat intelligence on APT groups, rans…

The Icarus supply chain extortion campaign continues to unfold. The group has now added 5 additional victims, all with their identities partially concealed. The guessing game has officially begun. How many organizations were impacted through this sup…

APT73 continues to expand its operations. The group has added 3 new victims to its leak site, including a government entity in South America and a major international airport operator in Central Europe serving tens of millions of passengers annually.…

Meet Wallstreet — not the financial market, but the latest ransomware group added to our monitoring platform. The group's leak site currently lists a single victim: a manufacturing company from India. With 1,000+ ransomware and cyber extortion v…

#HackTuesday Hack Tuesday: Week 17 - 23 Jun 2026 374 cyber attacks across 62 countries The most active threat actor last week was NoName057(16) claiming responsibility for 38 cyber attacks. The USA is the most affected country, accounting for 21.4% o…

An evolved deepfake video campaign is distributing an AI-generated instructional video that guides social media users through stealing their own session cookies via the browser's DevTools. Abuse of 6 SaaS platforms with 800+ lure pages so far. D…

FortiBleed is a large-scale password spraying and credential theft campaign targeting Fortinet, Sophos and MSSQL devices. Threat actors are using a curated password list developed through previous breaches and vulnerability exploits. We detail mitiga…

Threat Group Update Prinz Eugen has launched a newly redesigned leak site and updated its public profile. According to the group's latest statement, it describes itself as a for-profit organization that "specializes in hacking" while c…

Qilin remains one of the most active ransomware groups in the threat landscape. The group has recently claimed a new victim from Libya's financial sector, continuing its aggressive pace of operations. Over the past year, Qilin has consistently p…

Weekly Ransomware & Cyber Extortion Intelligence Report Our platform continuously monitors ransomware groups and darknet activity worldwide. Independent cyber threat research covering malware campaigns, phishing infrastructure and vulnerability e…

RT by @H4ckmanac: #MondayPoll: What worries you most for H2 2026? Threat intelligence and cyber alert feed covering data breaches, ransomware incidents and vulnerability disclosures. #MondayPoll: What worries you most for H2 2026? Poll 25% — Ransomwa…

Supply Chain Extortion Alert The Icarus ransomware group has escalated pressure tactics against a major Canadian consulting and competitive intelligence provider. After initially naming the organization, the group is now threatening to release data b…

New Ransomware Groups Added to DarkFeed Over the past few days, we added two new ransomware/extortion groups to the DarkFeed intelligence platform: SevyWare A newly launched RaaS operation claiming ties to former members of established ransomware gro…

A new ransomware-linked vulnerability has recently been added to DarkFeed's CISA KEV monitoring. CVE-2026-35273 affects Oracle PeopleSoft Enterprise PeopleTools and allows unauthenticated attackers to potentially gain control over vulnerable sys…

We identified a vulnerability in the Google Cloud Vertex AI SDK for Python involving predictable staging bucket names. This flaw enabled remote code execution through bucket squatting and pickle deserialization. Read our analysis for technical detail…

NEET Exam Leak: We Saw It Coming StealthMole AI Agent detected a 430% surge in NEET-related dark web activity before the leak went public. StealthMole cyber threat intelligence on ransomware, data leaks and criminal underground ecosystems. NEET Exam …

A large email #phishing campaign impersonates popular retail stores with expiring reward points as a lure. Emails are likely generated from a shared kit with LLM-crafted text, unique nonce padding to evade classifiers, hidden with CSS tricks. Details…