Georgia returns crypto after fake investment platform scam

A Cobb County resident lost hundreds of thousands of dollars after a stranger on social media introduced them to a fake crypto trading platform. The site displayed fabricated profits and allowed a small withdrawal before claiming the entire investment had been lost.

Georgia investigators traced a significant portion of the funds to a crypto exchange and returned the recovered cryptocurrency under a court order. Authorities did not disclose the platform’s name or the exact amount recovered.

@SableIndex | @SableIndexOTC

DarkForums.ru goes offline as operators move forum to .as

DarkForums.ru was unreachable in checks on August 28, while the forum is live at darkforums.as.

The shutdown reason has not been publicly explained.

@SableIndex | @SableIndexOTC

ATF confirms cyber incident after Qilin leak-site claim

The U.S. Bureau of Alcohol, Tobacco, Firearms and Explosives says a standalone system was compromised and is being investigated with the Justice Department.

ATF reports no signs of impact to its enterprise network or eForms. Qilin has provided no evidence of stolen data.

@SableIndex | @SableIndexOTC

RIP @blackhat

@SableIndex | @SableIndexOTC

Unbanned in 20 hours

@SableIndex | @SableIndexOTC

TITAN claims AI can process 700GB of stolen data hourly

TITAN ransomware operators claim their ransomware-as-a-service platform can analyse up to 700GB of stolen data per hour, helping identify financial records, personal information and trade secrets.

TITAN has now 24 claimed victims in 10 countries.

@SableIndex | @SableIndexDiscussion

Darkforums continues to face blocking issues. This time, the problem is with email.

@SableIndex | @SableIndexOTC

TerminalFix turns fake Cloudflare CAPTCHAs into network access

Microsoft reports a new ClickFix campaign on compromised websites that tricks users into running PowerShell commands. The malware installs persistence and a reverse tunnel, giving attackers a route into adjacent systems for reconnaissance, data theft or ransomware deployment.

@SableIndex | @SableIndexOTC

Exploit.in actor pitches extensions allegedly built to steal crypto

Aezakmi789 allegedly offers a Chrome Web Store bypass service with crypto drainers, seed-phrase theft and cookie hijacking.

No victims are confirmed.

@SableIndex | @SableIndexOTC

In China, an investor was robbed at gunpoint of 270 +888 numbers (594,000 TON).

Yesterday, someone listed a batch of 270 anonymous numbers on the market for $2,000 each, while the floor price was above $3,000.

A Chinese investor shared that armed men broke into his acquaintance's home. They held a gun to his head, beat him up, forced access to his crypto wallet, and liquidated everything via Marketapp. Half a million bucks went straight to the attackers address.

Victim's address:

UQATlFN7sPu-3yqw3QEoma4BXA7bULm2sES8Sz_mUw8vQfhb

Address used by the perpetrators to receive funds:

EQBocm8R7SRcKTO8L7SVmIqk332_-Ns1U1is01GDXQYxPJD5

@SableIndex | @SableIndexOTC

FindFemboys database allegedly offered on dark-web forum

A threat actor claims to be selling 40,198 FindFemboys user records for $20 in Monero, including emails, usernames, location and birth-date data, profile details and password hashes.

@SableIndex | @SableIndexOTC

Five companies just landed on Qilin’s dark-web hit list

Colonial Hyundai, The Big Table Group, Nolan Consulting Group, Jouvet SAS and G&S Technologies have appeared on Qilin’s ransomware portal.

Qilin’s next move could be a ransom deadline or data leak.

@SableIndex | @SableIndexOTC

267000 XRP Reportedly Drained - XRPH Wallet Tells Users to Quit

XRP Healthcare has urged users to stop using XRPH Wallet after reports of unauthorized transfers.

Tech Insider, citing CoinTurk, puts the reported loss at about 267000 XRP plus XRPH and XRPHAI tokens, with the main drain dated Sept 3

@SableIndex | @SableIndexOTC