πŸ”ͺ Slice For Life πŸ”ͺ
3.38K subscribers
817 photos
2 videos
689 links
Download Telegram
‼️ Handala is back on a new clearnet domain:

handala-team[.]to
❀3
Cyberattack News Alert
━━━━━━━━━━━━━━━━━━━━━━━━━

Victim: Westport Fuel Systems
Domain: wfsinc.com

Country: πŸ‡¨πŸ‡¦ CA
Date: Mar 17th, 2026

Summary:
Westport Fuel Systems reported unauthorized access to parts of its network, affecting internal computer applications and commercial information, on 17 March 2026. Although production systems remained intact and commercial transactions were not disrupted, the company delayed the filing of its annual financial statements beyond the regulatory deadline of March 31, 2026 to conduct additional audits. This cyberattack led to a neutral rating of the action by TipRanks AI, highlighting weak financial performance despite operational resilience.

Source: https://www.tipranks.com/news/company-announcements/westport-fuel-systems-discloses-cyberattack-and-warns-of-delay-to-2025-annual-results
β€ΌοΈπŸ‡ΊπŸ‡Έ World Leaks has allegedly claimed the City of Los Angeles (LA).

The listing shows 159.9 GB of confidential data across 779 files, with 3 screenshots provided as proof.

The City of Los Angeles has a reported revenue of $10.2 billion.
⚠️ FBI Watchdog - WHOIS Change ⚠️
πŸ”— DarkWebInformer.com - Cyber Threat Intelligence

Domain: breachforums.ac
Record Type: WHOIS Change
Time Detected: 2026-03-20 15:35:55 UTC

Previous Records:
name_servers: ['1-you njalla no', '2-can njalla in', '3-get njalla fo']

New Records:
name_servers: ['1-you njalla no', '2-can njalla in', '3-get njalla fo'] β†’ ['amber ns cloudflare com', 'chris ns cloudflare com']
β€ΌοΈπŸ‡«πŸ‡· A threat actor is allegedly selling personal data of 109,302 people from the ConfΓ©dΓ©ration Musicale de France (CMF), a national organization that brings together amateur music ensembles such as wind bands, orchestras, and choirs across France.

The data reportedly includes 86,809 unique addresses, 81,404 unique phone numbers, and 80,518 unique emails. A 1K sample and proof links were provided.
⚠️ FBI Watchdog - WHOIS Change ⚠️
πŸ”— DarkWebInformer.com - Cyber Threat Intelligence

Domain: breachforums.ac
Record Type: WHOIS Change
Time Detected: 2026-03-20 15:57:53 UTC

Previous Records:
name_servers: ['amber ns cloudflare com', 'chris ns cloudflare com']

New Records:
name_servers: ['amber ns cloudflare com', 'chris ns cloudflare com'] β†’ ['1-you njalla no', '2-can njalla in', '3-get njalla fo']
⚠️ FBI Watchdog - DNS New Domain (AAAA) ⚠️
πŸ”— DarkWebInformer.com - Cyber Threat Intelligence

Domain: breachforums.ac
Record Type: DNS New Domain (AAAA)
Time Detected: 2026-03-20 16:16:10 UTC

Previous Records:
None

New Records:
2606:4700:3030::6815:6cb
2606:4700:3037::ac43:8740
⚠️ FBI Watchdog - IP Change (new ips added) ⚠️
πŸ”— DarkWebInformer.com - Cyber Threat Intelligence

Domain: breachforums.ac
Record Type: IP Change (new ips added)
Time Detected: 2026-03-20 16:18:53 UTC

Previous Records:
A: 88.214.24.107
AAAA:

New Records:
AAAA: None β†’ 2606:4700:3030::6815:6cb, 2606:4700:3037::ac43:8740
Classification: 2 new IP(s) added
⚠️ FBI Watchdog - WHOIS Change ⚠️
πŸ”— DarkWebInformer.com - Cyber Threat Intelligence

Domain: breachforums.ac
Record Type: WHOIS Change
Time Detected: 2026-03-20 16:43:27 UTC

Previous Records:
name_servers: ['1-you njalla no', '2-can njalla in', '3-get njalla fo']

New Records:
name_servers: ['1-you njalla no', '2-can njalla in', '3-get njalla fo'] β†’ ['amber ns cloudflare com', 'chris ns cloudflare com']
⚠️ FBI Watchdog - IP Change (ip change) ⚠️
πŸ”— DarkWebInformer.com - Cyber Threat Intelligence

Domain: breachforums.ac
Record Type: IP Change (ip change)
Time Detected: 2026-03-20 16:43:29 UTC

Previous Records:
A: 88.214.24.107
AAAA: 2606:4700:3030::6815:6cb, 2606:4700:3037::ac43:8740

New Records:
A: 88.214.24.107 β†’ 104.21.6.203, 172.67.135.64
Classification: 2 added, 1 removed
⚠️ FBI Watchdog - DNS Change (A) ⚠️
πŸ”— DarkWebInformer.com - Cyber Threat Intelligence

Domain: breachforums.ac
Record Type: DNS Change (A)
Time Detected: 2026-03-20 17:02:14 UTC

Previous Records:
88.214.24.107

New Records:
104.21.6.203
172.67.135.64
‼️ Operation Alice: 23 Nations Unite to Dismantle Massive Dark Web CSAM Network

23 countries. 440 suspects identified. One operator running it all from China.

German authorities & Europol spent nearly 5 years unraveling a sprawling network of fraudulent dark web sites advertising child sexual abuse material & cybercrime-as-a-service. The twist? It was all a scam, the operator collected Bitcoin payments (earning €345K+ from ~10,000 customers) but never delivered anything.

Didn't matter. Customers became suspects too. Investigators traced cryptocurrency payments, identified buyers across the globe, and launched prosecutions, including a Bavarian father convicted after paying just €20.

An international arrest warrant has been issued for the 35-year-old operator. Investigations into 100+ individuals are still ongoing.

The message from Europol is clear: attempting to buy illegal material is enough to put you in law enforcement's crosshairs. The dark web isn't as anonymous as you think.

Source: https://www.europol.europa.eu/media-press/newsroom/news/global-cybercrime-crackdown-over-373-000-dark-web-sites-shut-down
❀2
πŸ‡ͺπŸ‡Ί Europol Press Release
━━━━━━━━━━━━━━━━━━━━━

Global cybercrime crackdown: over 373 000 dark web sites shut down

Full Press Release β†’ europol.europa.eu

━━━━━━━━━━━━━━━━━━━━━
πŸ•΅οΈ Dark Web Informer β€’ Europol Monitor
❀1😭1
Europol press releases will come to this channel now just like the DOJ press releases. Working on other countries.
❀2
πŸ”ͺ Slice For Life πŸ”ͺ
πŸ’₯ One change is coming this weekend and another in the coming week. I will be removing the Pro/Elite feed. The only difference between that feed and the Plus feed is that the Pro/Elite feed has Ransomware, which is now entirely covered by the Ransomware feed.…
Just a reminder, that I'm removing the Pro/Elite threat feed in a couple of hours.

Please use the other threat feed going forward. Nothing really changes. The pro/elite threat feed had ransomware, but that is now fully covered by the ransomware feed.

I have also renamed the URL to the threat feed to: https://darkwebinformer.com/threat-feed/. This is the one you want to use going forward.
β€ΌοΈπŸ‡ΊπŸ‡Έ Tampa Smoke Shop Owner Arrested in Dark Web Narcotics Case

Ryan Perez, a Spring Hill resident who owned two "Hippie Crib" smoke shops in Tampa, was arrested after a year-long investigation into allegations that he used cryptocurrency to purchase narcotics through the dark web and sold them in the Tampa Bay area.

The case gained momentum after a man in Pasco County died of an overdose on December 26, 2025. The victim's wife identified the person who supplied her husband with MDMA (ecstasy) and told deputies he had complained about feeling extremely hot the night before his death. Investigators traced the drug supply chain through a series of suppliers, ultimately leading back to Perez as the source.

According to Hernando County Sheriff Al Nienhuis, the MDMA linked to the overdose death was roughly two and a half times stronger than what is typically found on the street.

When authorities executed a search warrant at Perez's home, they reported finding:

β–ͺ️2 pounds of MDMA
β–ͺ️10 counterfeit Adderall pills
β–ͺ️14 Β½ grams of LSD
β–ͺ️2 pounds of psilocybin mushrooms
β–ͺ️1 pound of marijuana plants
β–ͺ️20 pounds of other types of marijuana

Perez was charged with trafficking MDMA, trafficking LSD, possession of mushrooms with intent to sell, and additional drug-related offenses.

His wife, Adina Perez, was also arrested on MDMA trafficking charges. A third person at the home was arrested for felony marijuana possession.

The DEA also obtained warrants for the two Hippie Crib shops, where agents reportedly seized firearms and cryptocurrency machines (???).

A DEA agent stated that Perez had been importing chemicals from China, India, and European countries, packaging them, and distributing products whose contents, including synthetic opioids and cannabinoids, were unknown to buyers.