โผ๏ธ New Dark Web Informer Blog Post!
Title: Ivanti Warns of New EPMM Zero-Day Exploited Using Credentials Stolen in January Attacks
Link: https://darkwebinformer.com/ivanti-warns-of-new-epmm-zero-day-exploited-using-credentials-stolen-in-january-attacks/
Title: Ivanti Warns of New EPMM Zero-Day Exploited Using Credentials Stolen in January Attacks
Link: https://darkwebinformer.com/ivanti-warns-of-new-epmm-zero-day-exploited-using-credentials-stolen-in-january-attacks/
Dark Web Informer
Ivanti Warns of New EPMM Zero-Day Exploited Using Credentials Stolen in January Attacks
Ivanti has issued an urgent security advisory for its Endpoint Manager Mobile (EPMM) product, disclosing five vulnerabilities including one that is actively exploited in the wild.
Forwarded from FBI Watchdog Alerts by Dark Web Informer
โ ๏ธ FBI Watchdog - DNS Change (A) โ ๏ธ
๐ DarkWebInformer.com - Cyber Threat Intelligence
Domain: pwnforums.st
Record Type: DNS Change (A)
Time Detected: 2026-05-07 18:11:12 UTC
Previous Records:
New Records:
๐ DarkWebInformer.com - Cyber Threat Intelligence
Domain: pwnforums.st
Record Type: DNS Change (A)
Time Detected: 2026-05-07 18:11:12 UTC
Previous Records:
31.58.220.14
New Records:
209.99.188.105
๐1
FBI Watchdog Alerts by Dark Web Informer
โ ๏ธ FBI Watchdog - DNS Change (A) โ ๏ธ ๐ DarkWebInformer.com - Cyber Threat Intelligence Domain: pwnforums.st Record Type: DNS Change (A) Time Detected: 2026-05-07 18:11:12 UTC Previous Records: 31.58.220.14 New Records: 209.99.188.105
PF
209[.]99[.]188[.]105
________________________________________
Main Channel: https://t.me/SliceForLifeee
Backup Channel: https://t.me/SliceForLifeeee
Website: darkwebinformer.com
Pricing (Includes Crypto): darkwebinformer.com/pricing
API Access: darkwebinformer.com/api-details
Socials: darkwebinformer.com/socials
Donations: darkwebinformer.com/donations
209[.]99[.]188[.]105
________________________________________
Main Channel: https://t.me/SliceForLifeee
Backup Channel: https://t.me/SliceForLifeeee
Website: darkwebinformer.com
Pricing (Includes Crypto): darkwebinformer.com/pricing
API Access: darkwebinformer.com/api-details
Socials: darkwebinformer.com/socials
Donations: darkwebinformer.com/donations
๐2๐1
โผ๏ธ๐จ๐ฑ Multiple Chilean .cl websites allegedly being sold as access by Pharaoh's Team market
A threat group operating as "Pharaoh's Team market" is advertising access to 14 separate Chilean (.cl) websites on a Telegram channel, explicitly stating each is a different server rather than a shared host. The listing includes Domain Authority and Page Authority metrics for each target, suggesting the access is being marketed for SEO abuse, redirects, or further compromise.
Post details:
โธ Actor(s): Pharaoh's Team market
โธ Sector: Mixed (highway tolls, pharmacy/health, tourism, religious, education, news, real estate)
โธ Type: Access Sale
โธ Price: Negotiable (DM)
โธ Country: Chile
โธ Date: 07/05/2026
Affected entities:
โช๏ธ alercweb.cl (DA 20 / PA 26)
โช๏ธ autopistasdeantofagasta.cl (DA 26 / PA 36)
โช๏ธ barbulnes.cl (DA 21 / PA 16)
โช๏ธ boticadelalma.cl (DA 28 / PA 43)
โช๏ธ carnalprime.cl (DA 26 / PA 42)
โช๏ธ clubeve.cl (DA 28 / PA 23)
โช๏ธ colegiovirgendepompeya.cl (DA 20 / PA 43)
โช๏ธ concursowistuba.cl (DA 28 / PA 26)
โช๏ธ decotextil.cl (DA 21 / PA 33)
โช๏ธ embalselaspalmas.cl (DA 21 / PA 24)
โช๏ธ galeriaweb.cl (DA 29 / PA 19)
โช๏ธ isf-chile.org (DA 32 / PA 33)
โช๏ธ newtrans.cl (DA 24 / PA 15)
โช๏ธ porunchilequelee.cl (DA 30 / PA 33)
A threat group operating as "Pharaoh's Team market" is advertising access to 14 separate Chilean (.cl) websites on a Telegram channel, explicitly stating each is a different server rather than a shared host. The listing includes Domain Authority and Page Authority metrics for each target, suggesting the access is being marketed for SEO abuse, redirects, or further compromise.
Post details:
โธ Actor(s): Pharaoh's Team market
โธ Sector: Mixed (highway tolls, pharmacy/health, tourism, religious, education, news, real estate)
โธ Type: Access Sale
โธ Price: Negotiable (DM)
โธ Country: Chile
โธ Date: 07/05/2026
Affected entities:
โช๏ธ alercweb.cl (DA 20 / PA 26)
โช๏ธ autopistasdeantofagasta.cl (DA 26 / PA 36)
โช๏ธ barbulnes.cl (DA 21 / PA 16)
โช๏ธ boticadelalma.cl (DA 28 / PA 43)
โช๏ธ carnalprime.cl (DA 26 / PA 42)
โช๏ธ clubeve.cl (DA 28 / PA 23)
โช๏ธ colegiovirgendepompeya.cl (DA 20 / PA 43)
โช๏ธ concursowistuba.cl (DA 28 / PA 26)
โช๏ธ decotextil.cl (DA 21 / PA 33)
โช๏ธ embalselaspalmas.cl (DA 21 / PA 24)
โช๏ธ galeriaweb.cl (DA 29 / PA 19)
โช๏ธ isf-chile.org (DA 32 / PA 33)
โช๏ธ newtrans.cl (DA 24 / PA 15)
โช๏ธ porunchilequelee.cl (DA 30 / PA 33)
๐ช Slice For Life - Part 2 ๐ช
โผ๏ธ New Dark Web Informer Blog Post! Title: When the Watchman Gets Watched: Trellix Discloses Source Code Breach Link: https://darkwebinformer.com/when-the-watchman-gets-watched-trellix-discloses-source-code-breach/
โผ๏ธRansomHouse has claimed Trellix
________________________________________
Main Channel: https://t.me/SliceForLifeee
Backup Channel: https://t.me/SliceForLifeeee
Website: darkwebinformer.com
Pricing (Includes Crypto): darkwebinformer.com/pricing
API Access: darkwebinformer.com/api-details
Socials: darkwebinformer.com/socials
Donations: darkwebinformer.com/donations
________________________________________
Main Channel: https://t.me/SliceForLifeee
Backup Channel: https://t.me/SliceForLifeeee
Website: darkwebinformer.com
Pricing (Includes Crypto): darkwebinformer.com/pricing
API Access: darkwebinformer.com/api-details
Socials: darkwebinformer.com/socials
Donations: darkwebinformer.com/donations
โผ๏ธ๐ซ๐ท Deezer allegedly leaked exposing 2.5 million Russian user records from the French music streaming platform
A threat actor claims to have leaked a Russian-region subset of Deezer, the French music streaming platform, releasing 2,557,577 records. The CSV sample (filename "deezer_russian.csv") shows user IDs, full names, gender, dates of birth, emails, and country/language codes.
Post details:
โธ Actor(s): NormalLeVrai
โธ Sector: Music streaming / Entertainment
โธ Type: Data Leak
โธ Format: CSV
โธ Price: Free
โธ Records: 2,557,577
โธ Country: France (Russian user subset)
โธ Date: 07/05/2026
Compromised data:
โช๏ธ User ID
โช๏ธ First name and last name
โช๏ธ Gender
โช๏ธ Date of birth
โช๏ธ Email address
โช๏ธ Country code
โช๏ธ Language code
Don't like the redacted screenshots? Subscribe... darkwebinformer.com/pricing
________________________________________
Main Channel: https://t.me/SliceForLifeee
Backup Channel: https://t.me/SliceForLifeeee
Website: darkwebinformer.com
Pricing (Includes Crypto): darkwebinformer.com/pricing
API Access: darkwebinformer.com/api-details
Socials: darkwebinformer.com/socials
Donations: darkwebinformer.com/donations
A threat actor claims to have leaked a Russian-region subset of Deezer, the French music streaming platform, releasing 2,557,577 records. The CSV sample (filename "deezer_russian.csv") shows user IDs, full names, gender, dates of birth, emails, and country/language codes.
Post details:
โธ Actor(s): NormalLeVrai
โธ Sector: Music streaming / Entertainment
โธ Type: Data Leak
โธ Format: CSV
โธ Price: Free
โธ Records: 2,557,577
โธ Country: France (Russian user subset)
โธ Date: 07/05/2026
Compromised data:
โช๏ธ User ID
โช๏ธ First name and last name
โช๏ธ Gender
โช๏ธ Date of birth
โช๏ธ Email address
โช๏ธ Country code
โช๏ธ Language code
Don't like the redacted screenshots? Subscribe... darkwebinformer.com/pricing
________________________________________
Main Channel: https://t.me/SliceForLifeee
Backup Channel: https://t.me/SliceForLifeeee
Website: darkwebinformer.com
Pricing (Includes Crypto): darkwebinformer.com/pricing
API Access: darkwebinformer.com/api-details
Socials: darkwebinformer.com/socials
Donations: darkwebinformer.com/donations
โค1
โผ๏ธ Users of Instructure are currently logging into Canvas with a ShinyHunters message
Ruthless.
________________________________________
Main Channel: https://t.me/SliceForLifeee
Backup Channel: https://t.me/SliceForLifeeee
Website: darkwebinformer.com
Pricing (Includes Crypto): darkwebinformer.com/pricing
API Access: darkwebinformer.com/api-details
Socials: darkwebinformer.com/socials
Donations: darkwebinformer.com/donations
Ruthless.
________________________________________
Main Channel: https://t.me/SliceForLifeee
Backup Channel: https://t.me/SliceForLifeeee
Website: darkwebinformer.com
Pricing (Includes Crypto): darkwebinformer.com/pricing
API Access: darkwebinformer.com/api-details
Socials: darkwebinformer.com/socials
Donations: darkwebinformer.com/donations
๐ฅ1
๐ช Slice For Life - Part 2 ๐ช
โผ๏ธ Users of Instructure are currently logging into Canvas with a ShinyHunters message Ruthless. ________________________________________ Main Channel: https://t.me/SliceForLifeee Backup Channel: https://t.me/SliceForLifeeee Website: darkwebinformer.com Pricingโฆ
Canvas is now under "scheduled maintenance."
________________________________________
Main Channel: https://t.me/SliceForLifeee
Backup Channel: https://t.me/SliceForLifeeee
Website: darkwebinformer.com
Pricing (Includes Crypto): darkwebinformer.com/pricing
API Access: darkwebinformer.com/api-details
Socials: darkwebinformer.com/socials
Donations: darkwebinformer.com/donations
________________________________________
Main Channel: https://t.me/SliceForLifeee
Backup Channel: https://t.me/SliceForLifeeee
Website: darkwebinformer.com
Pricing (Includes Crypto): darkwebinformer.com/pricing
API Access: darkwebinformer.com/api-details
Socials: darkwebinformer.com/socials
Donations: darkwebinformer.com/donations
๐3
๐ช Slice For Life - Part 2 ๐ช
Canvas is now under "scheduled maintenance." ________________________________________ Main Channel: https://t.me/SliceForLifeee Backup Channel: https://t.me/SliceForLifeeee Website: darkwebinformer.com Pricing (Includes Crypto): darkwebinformer.com/pricingโฆ
https://www.instructure.com/canvas/login
Enter a school and it will redirect you to the Canvas page with the maintenance message.
Enter a school and it will redirect you to the Canvas page with the maintenance message.
Instructure
Login
Official Login page for Canvas student login, School Search Canvas, Canvas Network, Canvas Community, and Canvas Free For Teacher accounts.
โผ๏ธ DOJ Press Release
โโโโโโโโโโโโโโโโโโโโโ
Federal Jury Convicts Virgina Man on Charges Relating to the Deletion of U.S. Government Databases
Full Press Release โ justice.gov
โโโโโโโโโโโโโโโโโโโโโ
๐ต๏ธ Dark Web Informer โข DOJ Monitor
Note: DOJ articles that are not Cyber related will be removed manually.
โโโโโโโโโโโโโโโโโโโโโ
Federal Jury Convicts Virgina Man on Charges Relating to the Deletion of U.S. Government Databases
Full Press Release โ justice.gov
โโโโโโโโโโโโโโโโโโโโโ
๐ต๏ธ Dark Web Informer โข DOJ Monitor
Note: DOJ articles that are not Cyber related will be removed manually.
www.justice.gov
Federal Jury Convicts Virgina Man on Charges Relating to the Deletion
A federal jury convicted Sohaib Akhter, 34, of Alexandria, Virgina, today on charges of conspiracy to commit computer fraud, password trafficking, and possession of a firearm by a prohibited person.
โผ๏ธ ShinyHunters has removed Instructure from their Pay or Leak portal.
Seems negotiations are ongoing.
________________________________________
Main Channel: https://t.me/SliceForLifeee
Backup Channel: https://t.me/SliceForLifeeee
Website: darkwebinformer.com
Pricing (Includes Crypto): darkwebinformer.com/pricing
API Access: darkwebinformer.com/api-details
Socials: darkwebinformer.com/socials
Donations: darkwebinformer.com/donations
Seems negotiations are ongoing.
________________________________________
Main Channel: https://t.me/SliceForLifeee
Backup Channel: https://t.me/SliceForLifeeee
Website: darkwebinformer.com
Pricing (Includes Crypto): darkwebinformer.com/pricing
API Access: darkwebinformer.com/api-details
Socials: darkwebinformer.com/socials
Donations: darkwebinformer.com/donations
๐ช Slice For Life - Part 2 ๐ช
โผ๏ธ ShinyHunters has removed Instructure from their Pay or Leak portal. Seems negotiations are ongoing. ________________________________________ Main Channel: https://t.me/SliceForLifeee Backup Channel: https://t.me/SliceForLifeeee Website: darkwebinformer.comโฆ
They are still down, with no updates.
________________________________________
Main Channel: https://t.me/SliceForLifeee
Backup Channel: https://t.me/SliceForLifeeee
Website: darkwebinformer.com
Pricing (Includes Crypto): darkwebinformer.com/pricing
API Access: darkwebinformer.com/api-details
Socials: darkwebinformer.com/socials
Donations: darkwebinformer.com/donations
________________________________________
Main Channel: https://t.me/SliceForLifeee
Backup Channel: https://t.me/SliceForLifeeee
Website: darkwebinformer.com
Pricing (Includes Crypto): darkwebinformer.com/pricing
API Access: darkwebinformer.com/api-details
Socials: darkwebinformer.com/socials
Donations: darkwebinformer.com/donations
โค1
โผ๏ธ๐ฎ๐ณ Indian real estate firm allegedly being sold as Azure AD server admin access
A threat actor is offering Server Admin level Azure AD access to an unnamed Indian real estate company, with the target profile listing $10M-$25M in revenue and roughly 100 hosts on the network. The post notes Malwarebytes EDR is in place. ๐
Post details:
โธ Actor(s): tiger
โธ Sector: Real Estate
โธ Type: Access Sale
โธ Access: Azure AD, Server Admin privilege
โธ AV / EDR: Malwarebytes EDR
โธ Network size: ~100 hosts
โธ Revenue: $10M - $25M
โธ Country: India
โธ Date: 07/05/2026
Don't like the redacted screenshots? Subscribe... darkwebinformer.com/pricing
________________________________________
Main Channel: https://t.me/SliceForLifeee
Backup Channel: https://t.me/SliceForLifeeee
Website: darkwebinformer.com
Pricing (Includes Crypto): darkwebinformer.com/pricing
API Access: darkwebinformer.com/api-details
Socials: darkwebinformer.com/socials
Donations: darkwebinformer.com/donations
A threat actor is offering Server Admin level Azure AD access to an unnamed Indian real estate company, with the target profile listing $10M-$25M in revenue and roughly 100 hosts on the network. The post notes Malwarebytes EDR is in place. ๐
Post details:
โธ Actor(s): tiger
โธ Sector: Real Estate
โธ Type: Access Sale
โธ Access: Azure AD, Server Admin privilege
โธ AV / EDR: Malwarebytes EDR
โธ Network size: ~100 hosts
โธ Revenue: $10M - $25M
โธ Country: India
โธ Date: 07/05/2026
Don't like the redacted screenshots? Subscribe... darkwebinformer.com/pricing
________________________________________
Main Channel: https://t.me/SliceForLifeee
Backup Channel: https://t.me/SliceForLifeeee
Website: darkwebinformer.com
Pricing (Includes Crypto): darkwebinformer.com/pricing
API Access: darkwebinformer.com/api-details
Socials: darkwebinformer.com/socials
Donations: darkwebinformer.com/donations
If you were curious to know how the info stealer situation is at Instructure, here is the dashboard courtesy of @whiteintel_io.
________________________________________
Main Channel: https://t.me/SliceForLifeee
Backup Channel: https://t.me/SliceForLifeeee
Website: darkwebinformer.com
Pricing (Includes Crypto): darkwebinformer.com/pricing
API Access: darkwebinformer.com/api-details
Socials: darkwebinformer.com/socials
Donations: darkwebinformer.com/donations
________________________________________
Main Channel: https://t.me/SliceForLifeee
Backup Channel: https://t.me/SliceForLifeeee
Website: darkwebinformer.com
Pricing (Includes Crypto): darkwebinformer.com/pricing
API Access: darkwebinformer.com/api-details
Socials: darkwebinformer.com/socials
Donations: darkwebinformer.com/donations
๐ช Slice For Life - Part 2 ๐ช
If you were curious to know how the info stealer situation is at Instructure, here is the dashboard courtesy of @whiteintel_io. ________________________________________ Main Channel: https://t.me/SliceForLifeee Backup Channel: https://t.me/SliceForLifeeeeโฆ
Adding consumer events just to stay fair.
________________________________________
Main Channel: https://t.me/SliceForLifeee
Backup Channel: https://t.me/SliceForLifeeee
Website: darkwebinformer.com
Pricing (Includes Crypto): darkwebinformer.com/pricing
API Access: darkwebinformer.com/api-details
Socials: darkwebinformer.com/socials
Donations: darkwebinformer.com/donations
________________________________________
Main Channel: https://t.me/SliceForLifeee
Backup Channel: https://t.me/SliceForLifeeee
Website: darkwebinformer.com
Pricing (Includes Crypto): darkwebinformer.com/pricing
API Access: darkwebinformer.com/api-details
Socials: darkwebinformer.com/socials
Donations: darkwebinformer.com/donations
๐ช Slice For Life - Part 2 ๐ช
They are still down, with no updates. ________________________________________ Main Channel: https://t.me/SliceForLifeee Backup Channel: https://t.me/SliceForLifeeee Website: darkwebinformer.com Pricing (Includes Crypto): darkwebinformer.com/pricing API Access:โฆ
Instructure provided an update on their status page.
Update - Instructure has placed Canvas, Canvas Beta and Canvas Test in maintenance mode. We anticipate being up soon, and will provide updates as soon as possible
May 07, 2026 - 17:37 MDT
https://status.instructure.com/
Update - Instructure has placed Canvas, Canvas Beta and Canvas Test in maintenance mode. We anticipate being up soon, and will provide updates as soon as possible
May 07, 2026 - 17:37 MDT
https://status.instructure.com/
โผ๏ธ ShinyHunters wants you to know that no further comments will be made regarding the recent hack.
Instructure still is no longer listed on their Pay or Leak portal.
________________________________________
Main Channel: https://t.me/SliceForLifeee
Backup Channel: https://t.me/SliceForLifeeee
Website: darkwebinformer.com
Pricing (Includes Crypto): darkwebinformer.com/pricing
API Access: darkwebinformer.com/api-details
Socials: darkwebinformer.com/socials
Donations: darkwebinformer.com/donations
Instructure still is no longer listed on their Pay or Leak portal.
________________________________________
Main Channel: https://t.me/SliceForLifeee
Backup Channel: https://t.me/SliceForLifeeee
Website: darkwebinformer.com
Pricing (Includes Crypto): darkwebinformer.com/pricing
API Access: darkwebinformer.com/api-details
Socials: darkwebinformer.com/socials
Donations: darkwebinformer.com/donations