🚨 New Ransomware group being monitored: Titan
🇺🇸 ETM Electromatic
🇸🇬 Quahe Woo & Palmer LLC
🇫🇷 Groupe CRIT SA
🇹🇳 CRIT Tunisie
🇺🇸 DFI America
🇮🇹 Abp Autoricambi
🇲🇽 Mezta Corporativo
________________________________________
Main Channel: https://t.me/SliceForLifeee
Backup Channel: https://t.me/SliceForLifeeee
Website: darkwebinformer.com
Pricing (Includes Crypto): darkwebinformer.com/pricing
API Access: darkwebinformer.com/api-details
Socials: darkwebinformer.com/socials
Donations: darkwebinformer.com/donations
🇺🇸 ETM Electromatic
🇸🇬 Quahe Woo & Palmer LLC
🇫🇷 Groupe CRIT SA
🇹🇳 CRIT Tunisie
🇺🇸 DFI America
🇮🇹 Abp Autoricambi
🇲🇽 Mezta Corporativo
________________________________________
Main Channel: https://t.me/SliceForLifeee
Backup Channel: https://t.me/SliceForLifeeee
Website: darkwebinformer.com
Pricing (Includes Crypto): darkwebinformer.com/pricing
API Access: darkwebinformer.com/api-details
Socials: darkwebinformer.com/socials
Donations: darkwebinformer.com/donations
😁1
‼️ New Dark Web Informer Blog Post!
Title: DPMPTSP Kabupaten Belu Allegedly Breached: 12.3K+ Business Licensing and Investment Service Records Leaked
Link: https://darkwebinformer.com/dpmptsp-kabupaten-belu-allegedly-breached-12-3k-business-licensing-and-investment-service-records-leaked/
Title: DPMPTSP Kabupaten Belu Allegedly Breached: 12.3K+ Business Licensing and Investment Service Records Leaked
Link: https://darkwebinformer.com/dpmptsp-kabupaten-belu-allegedly-breached-12-3k-business-licensing-and-investment-service-records-leaked/
Dark Web Informer
DPMPTSP Kabupaten Belu Allegedly Breached: 12.3K+ Business Licensing and Investment Service Records Leaked
A threat actor claims to have leaked a database tied to Dinas Penanaman Modal dan Pelayanan Terpadu Satu Pintu Kabupaten Belu (DPMPTSP), the Indonesian local government agency responsible for investment services and integrated business licensing in Belu Regency.
‼️ New Dark Web Informer Blog Post!
Title: Indonesian LSP Certification Databases Allegedly Leaked: 20+ Professional Certification Institute Datasets Exposed
Link: https://darkwebinformer.com/indonesian-lsp-certification-databases-allegedly-leaked-20-professional-certification-institute-datasets-exposed/
Title: Indonesian LSP Certification Databases Allegedly Leaked: 20+ Professional Certification Institute Datasets Exposed
Link: https://darkwebinformer.com/indonesian-lsp-certification-databases-allegedly-leaked-20-professional-certification-institute-datasets-exposed/
Dark Web Informer
Indonesian LSP Certification Databases Allegedly Leaked: 20+ Professional Certification Institute Datasets Exposed
A threat actor claims to be publishing additional databases tied to Indonesian Professional Certification Institutes (LSP), alleging that more than 20 LSP datasets have been obtained and are being released as part of an ongoing extortion-driven leak campaign.
🚨🇫🇷 MediaVacances allegedly breached: 256K invoice and holiday rental records exposed from French vacation booking platform
A threat actor claims to have leaked a database tied to MediaVacances, a French holiday rental platform offering apartments, houses, cottages, and short-stay accommodations.
━━━━━━━━━━━━━━━━━━━━
Target: MediaVacances
Sector: Hospitality / Travel / Holiday Rentals
Incident: Database Leak
Exposure: 256K records / 188MB
Actor: ChimeraZ
Country: France
Date: 18/05/2026
━━━━━━━━━━━━━━━━━━━━
What’s allegedly included:
▪️ Invoice records allegedly linked to MediaVacances
▪️ Booking and rental listing-related records
▪️ Customer billing and payment reference fields
▪️ Invoice dates, invoice numbers, and transaction text fields
▪️ Accommodation advertising and subscription-related details
▪️ Company registration, VAT, and business identifier references
▪️ Structured JSON records shared as proof of access
Potential impact:
The exposed data could be used for phishing, invoice fraud, booking impersonation, rental scams, and targeted social engineering against customers, hosts, and platform users.
Status:
Unverified underground forum claim. The actor posted JSON invoice samples and claims.
Stop guessing what's redacted. Subscribers see everything → darkwebinformer.com/pricing
________________________________________
Main Channel: https://t.me/SliceForLifeee
Backup Channel: https://t.me/SliceForLifeeee
Website: darkwebinformer.com
Pricing (Includes Crypto): darkwebinformer.com/pricing
API Access: darkwebinformer.com/api-details
Socials: darkwebinformer.com/socials
Donations: darkwebinformer.com/donations
A threat actor claims to have leaked a database tied to MediaVacances, a French holiday rental platform offering apartments, houses, cottages, and short-stay accommodations.
━━━━━━━━━━━━━━━━━━━━
Target: MediaVacances
Sector: Hospitality / Travel / Holiday Rentals
Incident: Database Leak
Exposure: 256K records / 188MB
Actor: ChimeraZ
Country: France
Date: 18/05/2026
━━━━━━━━━━━━━━━━━━━━
What’s allegedly included:
▪️ Invoice records allegedly linked to MediaVacances
▪️ Booking and rental listing-related records
▪️ Customer billing and payment reference fields
▪️ Invoice dates, invoice numbers, and transaction text fields
▪️ Accommodation advertising and subscription-related details
▪️ Company registration, VAT, and business identifier references
▪️ Structured JSON records shared as proof of access
Potential impact:
The exposed data could be used for phishing, invoice fraud, booking impersonation, rental scams, and targeted social engineering against customers, hosts, and platform users.
Status:
Unverified underground forum claim. The actor posted JSON invoice samples and claims.
Stop guessing what's redacted. Subscribers see everything → darkwebinformer.com/pricing
________________________________________
Main Channel: https://t.me/SliceForLifeee
Backup Channel: https://t.me/SliceForLifeeee
Website: darkwebinformer.com
Pricing (Includes Crypto): darkwebinformer.com/pricing
API Access: darkwebinformer.com/api-details
Socials: darkwebinformer.com/socials
Donations: darkwebinformer.com/donations
GitHub Advisories feed was updated with the following and is currently for Elite subscribers only:
▪️Removed the Unreviewed feed toggle and related JS logic. I didn't find it useful. When the CVE feed is available it will have everything.
▪️Added Priority / Newest sort, with Newestt as the default.
▪️Collapsed CVSS/CWE/Ecosystem into Advanced filters by default.
▪️Improved advisory cards with package/ecosystem/affected/fixed-version display.
▪️Added priority badges: Priority, Watch, Routine.
▪️Added a better error state with a Retry button.
▪️Performance improvements
▪️Bug fixes.
https://darkwebinformer.com/github-advisories-feed/
________________________________________
Main Channel: https://t.me/SliceForLifeee
Backup Channel: https://t.me/SliceForLifeeee
Website: darkwebinformer.com
Pricing (Includes Crypto): darkwebinformer.com/pricing
API Access: darkwebinformer.com/api-details
Socials: darkwebinformer.com/socials
Donations: darkwebinformer.com/donations
▪️Removed the Unreviewed feed toggle and related JS logic. I didn't find it useful. When the CVE feed is available it will have everything.
▪️Added Priority / Newest sort, with Newestt as the default.
▪️Collapsed CVSS/CWE/Ecosystem into Advanced filters by default.
▪️Improved advisory cards with package/ecosystem/affected/fixed-version display.
▪️Added priority badges: Priority, Watch, Routine.
▪️Added a better error state with a Retry button.
▪️Performance improvements
▪️Bug fixes.
https://darkwebinformer.com/github-advisories-feed/
________________________________________
Main Channel: https://t.me/SliceForLifeee
Backup Channel: https://t.me/SliceForLifeeee
Website: darkwebinformer.com
Pricing (Includes Crypto): darkwebinformer.com/pricing
API Access: darkwebinformer.com/api-details
Socials: darkwebinformer.com/socials
Donations: darkwebinformer.com/donations
Dark Web Informer
GitHub Advisories Feed
❤1
Is there any interest in a phishing/scam intelligence feed?
Anonymous Poll
73%
Yes
15%
No
12%
Show Results
Pentest Agent Suite for Claude Code: Autonomous bug-bounty framework for Claude Code and 6 other AI coding tools - 50 agents, 26 commands, 19 CLI tools, 11 skills, 2 MCP servers.
GitHub: https://github.com/H-mmer/pentest-agents
________________________________________
Main Channel: https://t.me/SliceForLifeee
Backup Channel: https://t.me/SliceForLifeeee
Website: darkwebinformer.com
Pricing (Includes Crypto): darkwebinformer.com/pricing
API Access: darkwebinformer.com/api-details
Socials: darkwebinformer.com/socials
Donations: darkwebinformer.com/donations
GitHub: https://github.com/H-mmer/pentest-agents
________________________________________
Main Channel: https://t.me/SliceForLifeee
Backup Channel: https://t.me/SliceForLifeeee
Website: darkwebinformer.com
Pricing (Includes Crypto): darkwebinformer.com/pricing
API Access: darkwebinformer.com/api-details
Socials: darkwebinformer.com/socials
Donations: darkwebinformer.com/donations
PF onion is having some issues right now.
________________________________________
Main Channel: https://t.me/SliceForLifeee
Backup Channel: https://t.me/SliceForLifeeee
Website: darkwebinformer.com
Pricing (Includes Crypto): darkwebinformer.com/pricing
API Access: darkwebinformer.com/api-details
Socials: darkwebinformer.com/socials
Donations: darkwebinformer.com/donations
________________________________________
Main Channel: https://t.me/SliceForLifeee
Backup Channel: https://t.me/SliceForLifeeee
Website: darkwebinformer.com
Pricing (Includes Crypto): darkwebinformer.com/pricing
API Access: darkwebinformer.com/api-details
Socials: darkwebinformer.com/socials
Donations: darkwebinformer.com/donations
😁1
Lul...
CISA Admin Leaked AWS GovCloud Keys on GitHub
https://krebsonsecurity.com/2026/05/cisa-admin-leaked-aws-govcloud-keys-on-github/
CISA Admin Leaked AWS GovCloud Keys on GitHub
https://krebsonsecurity.com/2026/05/cisa-admin-leaked-aws-govcloud-keys-on-github/
Krebs on Security
CISA Admin Leaked AWS GovCloud Keys on Github
Until this past weekend, a contractor for the Cybersecurity & Infrastructure Security Agency (CISA) maintained a public GitHub repository that exposed credentials to several highly privileged AWS GovCloud accounts and a large number of internal CISA systems.…
😭2
Media is too big
VIEW IN TELEGRAM
YellowKey PoC Demo to Bypass Bitlocker
GitHub: https://github.com/Nightmare-Eclipse/YellowKey
Video Credit: youtube.com/@encrypt0r
________________________________________
Main Channel: https://t.me/SliceForLifeee
Backup Channel: https://t.me/SliceForLifeeee
Website: darkwebinformer.com
Pricing (Includes Crypto): darkwebinformer.com/pricing
API Access: darkwebinformer.com/api-details
Socials: darkwebinformer.com/socials
Donations: darkwebinformer.com/donations
GitHub: https://github.com/Nightmare-Eclipse/YellowKey
Video Credit: youtube.com/@encrypt0r
________________________________________
Main Channel: https://t.me/SliceForLifeee
Backup Channel: https://t.me/SliceForLifeeee
Website: darkwebinformer.com
Pricing (Includes Crypto): darkwebinformer.com/pricing
API Access: darkwebinformer.com/api-details
Socials: darkwebinformer.com/socials
Donations: darkwebinformer.com/donations
‼️ New Dark Web Informer Blog Post!
Title: Daily Dose of Dark Web Informer - May 18th, 2026
Link: https://darkwebinformer.com/daily-dose-of-dark-web-informer-may-18th-2026/
Title: Daily Dose of Dark Web Informer - May 18th, 2026
Link: https://darkwebinformer.com/daily-dose-of-dark-web-informer-may-18th-2026/
Dark Web Informer
Daily Dose of Dark Web Informer - May 18th, 2026
This daily article is intended to make it easier for those who want to stay updated with my regular Dark Web Informer and X/Twitter posts.
🚨🇳🇬 General Directorate of Public Accounting and Treasury of Nigeria allegedly breached: 70GB of government financial and employee data leaked
A threat actor claims to have leaked data tied to the General Directorate of Public Accounting and Treasury of Nigeria (DGCPT) following an alleged ransomware-related cyberattack.
━━━━━━━━━━━━━━━━━━━━
Target: General Directorate of Public Accounting and Treasury of Nigeria
Sector: Government / Public Finance / Treasury
Incident: Data Breach / Ransomware Leak
Exposure: 70GB+
Actor: 0xSec
Country: Nigeria
Date: 18/05/2026
━━━━━━━━━━━━━━━━━━━━
What’s allegedly included:
▪️ Government employee records allegedly linked to DGCPT systems
▪️ Employee ID, first name, and last name fields
▪️ Phone number and contact-related data
▪️ Bank, branch, and account-related fields
▪️ Additional financial identifiers referenced in SQL files
▪️ Multiple SQL database files containing employee and treasury-related records
Potential impact:
The exposed data could be used for identity theft, payroll fraud, banking fraud, phishing, impersonation, and targeted social engineering against government employees and financial administration contacts.
Status:
Unverified underground forum claim. The actor states the archive contains more than 70GB of exfiltrated data and references multiple SQL files.
Stop guessing what's redacted. Subscribers see everything → darkwebinformer.com/pricing
________________________________________
Main Channel: https://t.me/SliceForLifeee
Backup Channel: https://t.me/SliceForLifeeee
Website: darkwebinformer.com
Pricing (Includes Crypto): darkwebinformer.com/pricing
API Access: darkwebinformer.com/api-details
Socials: darkwebinformer.com/socials
Donations: darkwebinformer.com/donations
A threat actor claims to have leaked data tied to the General Directorate of Public Accounting and Treasury of Nigeria (DGCPT) following an alleged ransomware-related cyberattack.
━━━━━━━━━━━━━━━━━━━━
Target: General Directorate of Public Accounting and Treasury of Nigeria
Sector: Government / Public Finance / Treasury
Incident: Data Breach / Ransomware Leak
Exposure: 70GB+
Actor: 0xSec
Country: Nigeria
Date: 18/05/2026
━━━━━━━━━━━━━━━━━━━━
What’s allegedly included:
▪️ Government employee records allegedly linked to DGCPT systems
▪️ Employee ID, first name, and last name fields
▪️ Phone number and contact-related data
▪️ Bank, branch, and account-related fields
▪️ Additional financial identifiers referenced in SQL files
▪️ Multiple SQL database files containing employee and treasury-related records
Potential impact:
The exposed data could be used for identity theft, payroll fraud, banking fraud, phishing, impersonation, and targeted social engineering against government employees and financial administration contacts.
Status:
Unverified underground forum claim. The actor states the archive contains more than 70GB of exfiltrated data and references multiple SQL files.
Stop guessing what's redacted. Subscribers see everything → darkwebinformer.com/pricing
________________________________________
Main Channel: https://t.me/SliceForLifeee
Backup Channel: https://t.me/SliceForLifeeee
Website: darkwebinformer.com
Pricing (Includes Crypto): darkwebinformer.com/pricing
API Access: darkwebinformer.com/api-details
Socials: darkwebinformer.com/socials
Donations: darkwebinformer.com/donations
🚨🇧🇷 Econet Editora allegedly breached: 163GB full database advertised for sale from Brazilian education publishing platform
A threat actor claims to be selling a full database tied to Econet Editora, a Brazilian publishing platform focused on educational content, books, digital resources, and learning materials for students and educators.
━━━━━━━━━━━━━━━━━━━━
Target: Econet Editora
Sector: Education / Publishing / Digital Learning
Incident: Database Leak / Data Sale
Exposure: 163GB
Actor: [Citizen] joaoestrella
Country: Brazil
Date: 18/05/2026
━━━━━━━━━━━━━━━━━━━━
What’s allegedly included:
▪️ Full database allegedly linked to Econet Editora
▪️ Email address fields
▪️ Plaintext password claims
▪️ User/account-related database records
▪️ Platform and publishing service data
▪️ Database and table listings shared as proof
▪️ Additional unspecified internal records referenced by the actor
Potential impact:
The exposed data could be used for credential stuffing, account takeover, phishing, identity theft, and targeted scams against students, educators, and platform users.
Status:
Unverified underground forum sale listing. The actor claims the database totals 163GB and includes emails, plaintext passwords, and additional database content.
Stop guessing what's redacted. Subscribers see everything → darkwebinformer.com/pricing
________________________________________
Main Channel: https://t.me/SliceForLifeee
Backup Channel: https://t.me/SliceForLifeeee
Website: darkwebinformer.com
Pricing (Includes Crypto): darkwebinformer.com/pricing
API Access: darkwebinformer.com/api-details
Socials: darkwebinformer.com/socials
Donations: darkwebinformer.com/donations
A threat actor claims to be selling a full database tied to Econet Editora, a Brazilian publishing platform focused on educational content, books, digital resources, and learning materials for students and educators.
━━━━━━━━━━━━━━━━━━━━
Target: Econet Editora
Sector: Education / Publishing / Digital Learning
Incident: Database Leak / Data Sale
Exposure: 163GB
Actor: [Citizen] joaoestrella
Country: Brazil
Date: 18/05/2026
━━━━━━━━━━━━━━━━━━━━
What’s allegedly included:
▪️ Full database allegedly linked to Econet Editora
▪️ Email address fields
▪️ Plaintext password claims
▪️ User/account-related database records
▪️ Platform and publishing service data
▪️ Database and table listings shared as proof
▪️ Additional unspecified internal records referenced by the actor
Potential impact:
The exposed data could be used for credential stuffing, account takeover, phishing, identity theft, and targeted scams against students, educators, and platform users.
Status:
Unverified underground forum sale listing. The actor claims the database totals 163GB and includes emails, plaintext passwords, and additional database content.
Stop guessing what's redacted. Subscribers see everything → darkwebinformer.com/pricing
________________________________________
Main Channel: https://t.me/SliceForLifeee
Backup Channel: https://t.me/SliceForLifeeee
Website: darkwebinformer.com
Pricing (Includes Crypto): darkwebinformer.com/pricing
API Access: darkwebinformer.com/api-details
Socials: darkwebinformer.com/socials
Donations: darkwebinformer.com/donations
Forwarded from FBI Watchdog Alerts by Dark Web Informer
⚠️ FBI Watchdog - WHOIS Change ⚠️
🔗 DarkWebInformer.com - Cyber Threat Intelligence
Domain: breached.st
Record Type: WHOIS Change
Time Detected: 2026-05-19 01:23:42 UTC
Previous Records:
New Records:
🔗 DarkWebInformer.com - Cyber Threat Intelligence
Domain: breached.st
Record Type: WHOIS Change
Time Detected: 2026-05-19 01:23:42 UTC
Previous Records:
status: ['ok']
New Records:
status: ['ok'] → ['clienttransferprohibited']
😁2
Hackers laying it on thick...
________________________________________
Main Channel: https://t.me/SliceForLifeee
Backup Channel: https://t.me/SliceForLifeeee
Website: darkwebinformer.com
Pricing (Includes Crypto): darkwebinformer.com/pricing
API Access: darkwebinformer.com/api-details
Socials: darkwebinformer.com/socials
Donations: darkwebinformer.com/donations
________________________________________
Main Channel: https://t.me/SliceForLifeee
Backup Channel: https://t.me/SliceForLifeeee
Website: darkwebinformer.com
Pricing (Includes Crypto): darkwebinformer.com/pricing
API Access: darkwebinformer.com/api-details
Socials: darkwebinformer.com/socials
Donations: darkwebinformer.com/donations
🚨🇺🇸 Peet’s Coffee allegedly breached: 115K customer records exposed from U.S. coffee retail database
A threat actor claims to have leaked part of a customer database tied to Peet’s Coffee, a U.S. coffee retailer and café chain known for its specialty coffee products and retail locations.
━━━━━━━━━━━━━━━━━━━━
Target: Peet’s Coffee
Sector: Retail / Food & Beverage / Customer Data
Incident: Database Leak
Exposure: 115,000 records / 120MB
Actor: zSenior
Country: United States
Date: 18/05/2026
━━━━━━━━━━━━━━━━━━━━
What’s allegedly included:
▪️ Customer records allegedly linked to Peet’s Coffee
▪️ First name and last name fields
▪️ Primary email address fields
▪️ Primary phone number fields
▪️ Full address and street address fields
▪️ City, state, and ZIP code records
▪️ Customer profile and contact metadata
▪️ Partial sample data shared through the forum thread
Potential impact:
The exposed data could be used for phishing, customer impersonation, loyalty fraud, account targeting, and retail scam campaigns against Peet’s Coffee customers.
Status:
Unverified underground forum claim. The actor posted sample customer records and claims a 5K-record partial leak is available through hidden forum content.
Stop guessing what's redacted. Subscribers see everything → darkwebinformer.com/pricing
________________________________________
Main Channel: https://t.me/SliceForLifeee
Backup Channel: https://t.me/SliceForLifeeee
Website: darkwebinformer.com
Pricing (Includes Crypto): darkwebinformer.com/pricing
API Access: darkwebinformer.com/api-details
Socials: darkwebinformer.com/socials
Donations: darkwebinformer.com/donations
A threat actor claims to have leaked part of a customer database tied to Peet’s Coffee, a U.S. coffee retailer and café chain known for its specialty coffee products and retail locations.
━━━━━━━━━━━━━━━━━━━━
Target: Peet’s Coffee
Sector: Retail / Food & Beverage / Customer Data
Incident: Database Leak
Exposure: 115,000 records / 120MB
Actor: zSenior
Country: United States
Date: 18/05/2026
━━━━━━━━━━━━━━━━━━━━
What’s allegedly included:
▪️ Customer records allegedly linked to Peet’s Coffee
▪️ First name and last name fields
▪️ Primary email address fields
▪️ Primary phone number fields
▪️ Full address and street address fields
▪️ City, state, and ZIP code records
▪️ Customer profile and contact metadata
▪️ Partial sample data shared through the forum thread
Potential impact:
The exposed data could be used for phishing, customer impersonation, loyalty fraud, account targeting, and retail scam campaigns against Peet’s Coffee customers.
Status:
Unverified underground forum claim. The actor posted sample customer records and claims a 5K-record partial leak is available through hidden forum content.
Stop guessing what's redacted. Subscribers see everything → darkwebinformer.com/pricing
________________________________________
Main Channel: https://t.me/SliceForLifeee
Backup Channel: https://t.me/SliceForLifeeee
Website: darkwebinformer.com
Pricing (Includes Crypto): darkwebinformer.com/pricing
API Access: darkwebinformer.com/api-details
Socials: darkwebinformer.com/socials
Donations: darkwebinformer.com/donations