Classic Brechas Mapa Actores TTP Matrix Analitica Alertas CyberNews Arsenal Exploits KillChain Origen SSLBL RansomLook Ransomwhere

x-cti

47 incidentes 5 paises 5 sectores Ultimo: 2026-06-29

Ver en IntelTracker → APTTrail →

Actores similares

they-have-victimized-at-lactor · 1 activistsactor · 1 damage---destructionactor · 1 nbsp-activeactor · 1 crimson-collectiveactor · 1 actiniumactor · 1 Extra Window Memory Injectionactor · 1 Gather Victim Host Informationactor · 1 Internet Connection Discoveryactor · 1 Email Collectionactor · 1

Canales, DLS e infraestructura asociada

Clasificacion automatica desde IntelTracker/APTTrail/OSINT. Estado real solo si viene indicado por la fuente.

Tipo	Estado	Host / enlace	Title / ultimo titulo
DLS / leak site	unknown	nitter.net	Ransomware Monitor: Actor: #Qilin Victim: NASCO Date: 2026-06-29 10:23:25 UTC+3 According to #DarkWeb #Ransomware activity detected by the ThreatMon Threat Intelligence Team. The “#Qilin” Ransomware group has added NASCO to its victims.
X/Twitter	unknown	x.com	Ransomware Monitor: Actor: #nightspire Victim: Grupo Riquelme Date: 2026-06-26 03:15:53 UTC+3 According to #DarkWeb #Ransomware activity detected by the ThreatMon Threat Intelligence Team. The “#nightspire” Ransomware group has added Grupo Riquelme to its victims.
DLS / leak site	unknown	nitter.net	Ransomware Monitor: Actor: #Qilin Victim: AXIONLOG Date: 2026-06-29 10:23:27 UTC+3 According to #DarkWeb #Ransomware activity detected by the ThreatMon Threat Intelligence Team. The “#Qilin” Ransomware group has added AXIONLOG to its victims.
DLS / leak site	unknown	nitter.net	Dark Web Informer: Ancient civilization used to call this cable management.
Foro	unknown	x.com	Dark Web Informer: Government of Colima e-signature system compromise claim posted on a forum ACTIVA appears to be tied to the advanced electronic signature system used by the Government of the State of Colima, Mexico. A forum user claims they gained administrator access to the ACTIVA Firma portal and allegedly deleted users from the system, leaving only an administrator account under their control.
DLS / leak site	unknown	nitter.net	Ransomware Monitor: Actor: #Qilin Victim: TRANSCORE Date: 2026-06-29 02:30:45 UTC+3 According to #DarkWeb #Ransomware activity detected by the ThreatMon Threat Intelligence Team. The “#Qilin” Ransomware group has added TRANSCORE to its victims.
DLS / leak site	unknown	nitter.net	Ransomware Monitor: Actor: #Qilin Victim: 1-800-DENTIST Date: 2026-06-29 02:30:48 UTC+3 According to #DarkWeb #Ransomware activity detected by the ThreatMon Threat Intelligence Team. The “#Qilin” Ransomware group has added 1-800-DENTIST to its victims.
DLS / leak site	unknown	nitter.net	Dark Web Informer: RT by @DarkWebInformer: ‼ CVE-2026-48907: Joomla! JCE extension 2.9.99.5 - unauthenticated Remote Code Execution Video Credit: @0xgh057r3c0n
DLS / leak site	unknown	nitter.net	Dark Web Informer: RT by @DarkWebInformer: ‼ CVE-2026-48907: Joomla! JCE extension 2.9.99.5 - unauthenticated Remote Code Execution Video Credit: @0xgh057r3c0n
DLS / leak site	unknown	nitter.net	Dark Web Informer: I haven't posted many Ransomware free posts on the website in quite some time... that should change this week. I wanted to settle on a template that works better than the threat alert one I'm using. Nothing else changes in general... socials still get all the normal posts.
DLS / leak site	unknown	nitter.net	Dark Web Informer: ‼ 1-800-DENTIST has been claimed a victim to Qilin Ransomware
DLS / leak site	unknown	nitter.net	Dark Web Informer: Ugh, you may want to fix your auto posts mate.
DLS / leak site	unknown	nitter.net	Dark Web Informer: Ugh, you may want to fix your auto posts mate.
Foro	unknown	nitter.net	Dark Web Informer: Amigo Tech patient dataset claim posted on a forum Amigo Tech is a Brazilian healthtech company connected to healthcare scheduling and patient management services. A forum user claims a partial breach tied to Amigo Tech, allegedly containing 121,678 patient records from March 2026.
DLS / leak site	unknown	nitter.net	Dark Web Informer: ‼ New Ransomware Group: SETTRA htttp://settra5ldqwgtw5q7z5awbsvlksakyfojuc5slgrz5lvapune4fantqd[.]onion
DLS / leak site	unknown	nitter.net	Dark Web Informer: Priorities: save the codebase, then yourself.
Foro	unknown	nitter.net	Dark Web Informer: Why would a Ransomware affiliate to well known groups use the terminology "pro hacker?" Ransomware recruitment solicitation posted on a forum A Dread user is seeking a “pro hacker” for a project they claim could generate millions. The user claims affiliation with ransomware-related structures and appears to be looking for help compromising or gaining control of server/admin access for a small team.
Foro	unknown	nitter.net	Dark Web Informer: VRI Portal de Conteúdo dataset claim posted on a forum VRI Portal de Conteúdo is a Brazilian content portal focused on technical material in accounting, corporate, labor, and tax law areas. A forum user claims a dataset tied to VRI Portal de Conteúdo was exposed, allegedly containing 40K rows.
Foro	unknown	nitter.net	Dark Web Informer: Government of Colima e-signature system compromise claim posted on a forum ACTIVA appears to be tied to the advanced electronic signature system used by the Government of the State of Colima, Mexico. A forum user claims they gained administrator access to the ACTIVA Firma portal and allegedly deleted users from the system, leaving only an administrator account under their control.
Foro	seized	nitter.net	Daily Dark Web: Major International Anti-Piracy Operation Seizes Pirate Streaming Infrastructure Law enforcement agencies from multiple countries have seized domains and infrastructure associated with large-scale piracy services as part of Operation Offside. * The seizure banner identifies participation from agencies including: * U.S.
Foro	unknown	x.com	Daily Dark Web: French Hospital Patient Database Allegedly Repackaged and Shared A threat actor has published what they claim is a reformatted dataset originating from the 2024 Blackout ransomware leak targeting Centre Hospitalier d'Armentières in France. According to the post, the dataset contains information on approximately 203,928 patients, covering records from 2004 through March 2018.
Foro	unknown	nitter.net	Daily Dark Web: Is this accurate?
Foro	unknown	nitter.net	Daily Dark Web: Pinned: New Linux "pedit COW" Privilege Escalation Exploit Published Security researcher Massimiliano Oldani has released a public proof-of-concept (PoC) exploit, packet_edit_meme, for the Linux kernel vulnerability CVE-2026-46331, nicknamed pedit COW. * The flaw resides in Linux's net/sched act_pedit traffic control subsystem and allows an unprivileged local user to escalate privileges to root by corrupting shared page-cache memory.
Foro	unknown	nitter.net	Daily Dark Web: What do you think?