๐Ÿ”ช Slice For Life - Part 2 ๐Ÿ”ช
3.27K subscribers
769 photos
19 videos
580 links
Download Telegram
๐ŸšจNULLTRACE allegedly advertising bulletproof fast-flux and VPS hosting services

A threat actor on an underground forum is advertising NULLTRACE, an anonymous infrastructure service claiming to provide fast-flux, VPS, DNS, domain, and proxy-related hosting features.

The listing claims the service accepts crypto-only payments and is marketed toward users seeking resilient hosting and abuse-report resistance.

๐—ช๐—ต๐—ฎ๐˜โ€™๐˜€ ๐—ฎ๐—น๐—น๐—ฒ๐—ด๐—ฒ๐—ฑ๐—น๐˜† ๐—ผ๐—ณ๐—ณ๐—ฒ๐—ฟ๐—ฒ๐—ฑ:

โ€ข Fast-flux hosting services
โ€ข VPS hosting across multiple regions
โ€ข Bulletproof DNS and domain services
โ€ข Proxy and relay configuration options
โ€ข Cloudflare fast-flux setup claims
โ€ข Multiple server configuration tiers
โ€ข Crypto-only payment support
โ€ข Domain blacklist monitoring claims

๐——๐—ฒ๐˜๐—ฎ๐—ถ๐—น๐˜€:

๐—ง๐—ฎ๐—ฟ๐—ด๐—ฒ๐˜: NULLTRACE
๐—–๐—ผ๐˜‚๐—ป๐˜๐—ฟ๐˜†: Unknown / Global
๐—ฆ๐—ฒ๐—ฐ๐˜๐—ผ๐—ฟ: Cybercrime Infrastructure / Bulletproof Hosting
๐—”๐—ฐ๐˜๐—ผ๐—ฟ: NULLTRACE
๐—–๐—น๐—ฎ๐—ถ๐—บ: Bulletproof fast-flux and VPS service advertisement
๐—˜๐˜…๐—ฝ๐—ผ๐˜€๐˜‚๐—ฟ๐—ฒ: Not applicable
๐—ฃ๐—ฟ๐—ถ๐—ฐ๐—ฒ: Redacted
๐—ข๐—ฏ๐˜€๐—ฒ๐—ฟ๐˜ƒ๐—ฒ๐—ฑ: May 22, 2026

Stop guessing what's redacted. Subscribers see everything: darkwebinformer.com/pricing
________________________________________

Main Channel: https://t.me/SliceForLifeee
Backup Channel: https://t.me/SliceForLifeeee
Website: darkwebinformer.com
Pricing (Includes Crypto): darkwebinformer.com/pricing
API Access: darkwebinformer.com/api-details
Socials: darkwebinformer.com/socials
Donations: darkwebinformer.com/donations
๐Ÿšจ๐Ÿ‡ซ๐Ÿ‡ท Atol allegedly targeted in customer database sale

A threat actor on an underground forum is claiming to sell a customer database allegedly belonging to Atol, a French cooperative of opticians operating hundreds of retail locations across France.

The actor, Angel_Batista, claims the database contains 5,924,215 customer records and is selling it for โ‚ฌ8,000.

๐—ช๐—ต๐—ฎ๐˜โ€™๐˜€ ๐—ฎ๐—น๐—น๐—ฒ๐—ด๐—ฒ๐—ฑ๐—น๐˜† ๐—ฒ๐˜…๐—ฝ๐—ผ๐˜€๐—ฒ๐—ฑ:

โ€ข Customer names
โ€ข Gender fields
โ€ข Birth date fields
โ€ข Phone number fields
โ€ข Secondary phone number fields
โ€ข Email address fields
โ€ข Postal address fields
โ€ข City and postal code records
โ€ข 1,684,900 unique email addresses

๐——๐—ฒ๐˜๐—ฎ๐—ถ๐—น๐˜€:

๐—ง๐—ฎ๐—ฟ๐—ด๐—ฒ๐˜: Atol
๐—–๐—ผ๐˜‚๐—ป๐˜๐—ฟ๐˜†: France
๐—ฆ๐—ฒ๐—ฐ๐˜๐—ผ๐—ฟ: Retail / Eyewear / Optician
๐—”๐—ฐ๐˜๐—ผ๐—ฟ: Angel_Batista
๐—–๐—น๐—ฎ๐—ถ๐—บ: Customer database sale
๐—˜๐˜…๐—ฝ๐—ผ๐˜€๐˜‚๐—ฟ๐—ฒ: 5,924,215 customer records
๐—ฃ๐—ฟ๐—ถ๐—ฐ๐—ฒ: โ‚ฌ8,000
๐—ข๐—ฏ๐˜€๐—ฒ๐—ฟ๐˜ƒ๐—ฒ๐—ฑ: May 22, 2026

Stop guessing what's redacted. Subscribers see everything: darkwebinformer.com/pricing
________________________________________

Main Channel: https://t.me/SliceForLifeee
Backup Channel: https://t.me/SliceForLifeeee
Website: darkwebinformer.com
Pricing (Includes Crypto): darkwebinformer.com/pricing
API Access: darkwebinformer.com/api-details
Socials: darkwebinformer.com/socials
Donations: darkwebinformer.com/donations
๐Ÿšจ๐Ÿ‡ซ๐Ÿ‡ท Optique by Auchan allegedly targeted in customer database sale

A threat actor on an underground forum is claiming to sell a customer database allegedly belonging to Optique by Auchan, the optical retail service operated under Auchan.

The actor, Angel_Batista, claims the database contains 218,824 customer records and is selling it for โ‚ฌ600.

๐—ช๐—ต๐—ฎ๐˜โ€™๐˜€ ๐—ฎ๐—น๐—น๐—ฒ๐—ด๐—ฒ๐—ฑ๐—น๐˜† ๐—ฒ๐˜…๐—ฝ๐—ผ๐˜€๐—ฒ๐—ฑ:

โ€ข Customer IDs
โ€ข Names and civil titles
โ€ข Phone number fields
โ€ข Email address fields
โ€ข Postal address fields
โ€ข City and postal code records
โ€ข Date of birth fields
โ€ข Country fields
โ€ข Customer status and communication metadata

๐——๐—ฒ๐˜๐—ฎ๐—ถ๐—น๐˜€:

๐—ง๐—ฎ๐—ฟ๐—ด๐—ฒ๐˜: Optique by Auchan
๐—–๐—ผ๐˜‚๐—ป๐˜๐—ฟ๐˜†: France
๐—ฆ๐—ฒ๐—ฐ๐˜๐—ผ๐—ฟ: Retail / Eyewear / Optician
๐—”๐—ฐ๐˜๐—ผ๐—ฟ: Angel_Batista
๐—–๐—น๐—ฎ๐—ถ๐—บ: Customer database sale
๐—˜๐˜…๐—ฝ๐—ผ๐˜€๐˜‚๐—ฟ๐—ฒ: 218,824 customer records
๐—ฃ๐—ฟ๐—ถ๐—ฐ๐—ฒ: โ‚ฌ600
๐—ข๐—ฏ๐˜€๐—ฒ๐—ฟ๐˜ƒ๐—ฒ๐—ฑ: May 22, 2026

Stop guessing what's redacted. Subscribers see everything: darkwebinformer.com/pricing
________________________________________

Main Channel: https://t.me/SliceForLifeee
Backup Channel: https://t.me/SliceForLifeeee
Website: darkwebinformer.com
Pricing (Includes Crypto): darkwebinformer.com/pricing
API Access: darkwebinformer.com/api-details
Socials: darkwebinformer.com/socials
Donations: darkwebinformer.com/donations
A couple of updates, because I really haven't done one in a while.

STIX 2.1 support will be added for API customers only, sometime on May 29th.

A new feature update will be pushed to the threat feed sometime the week after the STIX update.

The GitHub Advisories feed that is currently for Elite users only will be for Plus, Pro and Elite subscribers in June.

Threat Surface Sources that has the different catalog of Clearnet and Onion sites is currently being updated individually by section. Any dead links will still be monitored but in their own section. I will update when each section is updated.

Some other changes are happening, but don't want to share those details yet.

Happy FriYay!
________________________________________

Main Channel: https://t.me/SliceForLifeee
Backup Channel: https://t.me/SliceForLifeeee
Website: darkwebinformer.com
Pricing (Includes Crypto): darkwebinformer.com/pricing
API Access: darkwebinformer.com/api-details
Socials: darkwebinformer.com/socials
Donations: darkwebinformer.com/donations
โค2
Pushed a couple of fixes to the threat feed just now. I pulled the updated Notification system earlier this week because exclusions were not working properly. That is issue is fixed and the new notification system is available again.

Also some new posts were being pushed properly to the database, but were never showing on the first page unless you actually refreshed. This was a rare occurrence and was only happening with a specific forum.
________________________________________

Main Channel: https://t.me/SliceForLifeee
Backup Channel: https://t.me/SliceForLifeeee
Website: darkwebinformer.com
Pricing (Includes Crypto): darkwebinformer.com/pricing
API Access: darkwebinformer.com/api-details
Socials: darkwebinformer.com/socials
Donations: darkwebinformer.com/donations
โค1
๐Ÿšจ๐Ÿ‡ฎ๐Ÿ‡ฑ Multiple Israeli websites allegedly targeted in database leak

A threat actor on an underground forum is claiming to have leaked databases tied to multiple Israeli websites.

The actor claims the post includes a list of 214 Israeli sites, with an average of 561K records per site allegedly exposed.

๐—ช๐—ต๐—ฎ๐˜โ€™๐˜€ ๐—ฎ๐—น๐—น๐—ฒ๐—ด๐—ฒ๐—ฑ๐—น๐˜† ๐—ฒ๐˜…๐—ฝ๐—ผ๐˜€๐—ฒ๐—ฑ:

โ€ข Database records from Israeli websites
โ€ข Site/domain lists
โ€ข Customer or user database references
โ€ข Multiple .co.il domain records
โ€ข Downloadable leak archives
โ€ข Database samples from listed sites

๐——๐—ฒ๐˜๐—ฎ๐—ถ๐—น๐˜€:

๐—ง๐—ฎ๐—ฟ๐—ด๐—ฒ๐˜: Multiple Israeli websites
๐—–๐—ผ๐˜‚๐—ป๐˜๐—ฟ๐˜†: Israel
๐—ฆ๐—ฒ๐—ฐ๐˜๐—ผ๐—ฟ: Mixed / Multiple Industries
๐—”๐—ฐ๐˜๐—ผ๐—ฟ: tbabi / Anka Red Team
๐—–๐—น๐—ฎ๐—ถ๐—บ: Multi-site database leak
๐—˜๐˜…๐—ฝ๐—ผ๐˜€๐˜‚๐—ฟ๐—ฒ: 214 websites / 561K average records per site
๐—ฃ๐—ฟ๐—ถ๐—ฐ๐—ฒ: Not stated
๐—ข๐—ฏ๐˜€๐—ฒ๐—ฟ๐˜ƒ๐—ฒ๐—ฑ: May 22, 2026

Stop guessing what's redacted. Subscribers see everything: darkwebinformer.com/pricing
________________________________________

Main Channel: https://t.me/SliceForLifeee
Backup Channel: https://t.me/SliceForLifeeee
Website: darkwebinformer.com
Pricing (Includes Crypto): darkwebinformer.com/pricing
API Access: darkwebinformer.com/api-details
Socials: darkwebinformer.com/socials
Donations: darkwebinformer.com/donations
Hasan is teasing another "BreachForums" ๐Ÿคทโ€โ™€๏ธ
________________________________________

Main Channel: https://t.me/SliceForLifeee
Backup Channel: https://t.me/SliceForLifeeee
Website: darkwebinformer.com
Pricing (Includes Crypto): darkwebinformer.com/pricing
API Access: darkwebinformer.com/api-details
Socials: darkwebinformer.com/socials
Donations: darkwebinformer.com/donations
๐Ÿ˜2
๐Ÿšจ๐Ÿ‡ฌ๐Ÿ‡ช SmartSoft Gaming allegedly targeted in source code leak

A threat actor on an underground forum is claiming to have released source code allegedly belonging to SmartSoft Gaming, a gaming software provider associated with smartsoft[.ge and smartsoftgaming[.com.

The actor claims the leak includes source code, payment provider source code, and database initialization scripts.

๐—ช๐—ต๐—ฎ๐˜โ€™๐˜€ ๐—ฎ๐—น๐—น๐—ฒ๐—ด๐—ฒ๐—ฑ๐—น๐˜† ๐—ฒ๐˜…๐—ฝ๐—ผ๐˜€๐—ฒ๐—ฑ:

โ€ข SmartSoft Gaming source code
โ€ข Payment provider source code
โ€ข FastPay.ge-related code references
โ€ข Database initialization scripts
โ€ข Application build and dependency files
โ€ข Source files requiring dependency fixes
โ€ข Development and deployment-related materials

๐——๐—ฒ๐˜๐—ฎ๐—ถ๐—น๐˜€:

๐—ง๐—ฎ๐—ฟ๐—ด๐—ฒ๐˜: SmartSoft Gaming
๐—–๐—ผ๐˜‚๐—ป๐˜๐—ฟ๐˜†: Georgia
๐—ฆ๐—ฒ๐—ฐ๐˜๐—ผ๐—ฟ: Gaming / Software Development / Payments
๐—”๐—ฐ๐˜๐—ผ๐—ฟ: aggregateinc
๐—–๐—น๐—ฎ๐—ถ๐—บ: Source code leak
๐—˜๐˜…๐—ฝ๐—ผ๐˜€๐˜‚๐—ฟ๐—ฒ: Source code and payment provider code
๐—ฃ๐—ฟ๐—ถ๐—ฐ๐—ฒ: Free
๐—ข๐—ฏ๐˜€๐—ฒ๐—ฟ๐˜ƒ๐—ฒ๐—ฑ: May 22, 2026

Stop guessing what's redacted. Subscribers see everything: darkwebinformer.com/pricing
________________________________________

Main Channel: https://t.me/SliceForLifeee
Backup Channel: https://t.me/SliceForLifeeee
Website: darkwebinformer.com
Pricing (Includes Crypto): darkwebinformer.com/pricing
API Access: darkwebinformer.com/api-details
Socials: darkwebinformer.com/socials
Donations: darkwebinformer.com/donations
๐Ÿšจ๐Ÿ‡ฏ๐Ÿ‡ต FamilyMart allegedly targeted in 21.5M record database leak

A threat actor on an underground forum is claiming to have leaked data allegedly belonging to FamilyMart, a major convenience store chain and retail brand.

The actor claims the dataset contains 21,581,576 records, including company planning data, payment records, agreements, employee information, and trade-related records.

๐—ช๐—ต๐—ฎ๐˜โ€™๐˜€ ๐—ฎ๐—น๐—น๐—ฒ๐—ด๐—ฒ๐—ฑ๐—น๐˜† ๐—ฒ๐˜…๐—ฝ๐—ผ๐˜€๐—ฒ๐—ฑ:

โ€ข Company planning records
โ€ข Payment-related data
โ€ข Agreement and contract records
โ€ข Employee information
โ€ข Trade-related records
โ€ข Advertiser and agency records
โ€ข Activity and schedule tables
โ€ข CSV database files

๐——๐—ฒ๐˜๐—ฎ๐—ถ๐—น๐˜€:

๐—ง๐—ฎ๐—ฟ๐—ด๐—ฒ๐˜: FamilyMart
๐—–๐—ผ๐˜‚๐—ป๐˜๐—ฟ๐˜†: Japan
๐—ฆ๐—ฒ๐—ฐ๐˜๐—ผ๐—ฟ: Retail / Convenience Stores
๐—”๐—ฐ๐˜๐—ผ๐—ฟ: tbabi / Anka Red Team
๐—–๐—น๐—ฎ๐—ถ๐—บ: Database leak
๐—˜๐˜…๐—ฝ๐—ผ๐˜€๐˜‚๐—ฟ๐—ฒ: 21,581,576 records
๐—ฃ๐—ฟ๐—ถ๐—ฐ๐—ฒ: Not stated
๐—ข๐—ฏ๐˜€๐—ฒ๐—ฟ๐˜ƒ๐—ฒ๐—ฑ: May 22, 2026

Stop guessing what's redacted. Subscribers see everything: darkwebinformer.com/pricing
________________________________________

Main Channel: https://t.me/SliceForLifeee
Backup Channel: https://t.me/SliceForLifeeee
Website: darkwebinformer.com
Pricing (Includes Crypto): darkwebinformer.com/pricing
API Access: darkwebinformer.com/api-details
Socials: darkwebinformer.com/socials
Donations: darkwebinformer.com/donations
๐Ÿ˜ญ1
Cybersecurity Incident Disclosure

Fri, 22 May 2026 16:30:17 EDT
A cybersecurity incident has been disclosed by Oncology Institute, Inc., Inc CIK: 0001799191, Ticker: $TOI.

View SEC Filing
โ€ผ๏ธT1erOne forum now has an Onion address:

http://tieronemkfevyizxcnt355agysp2iemvhon6iyclwrc7yuc7oszgzrid[.]onion
________________________________________

Main Channel: https://t.me/SliceForLifeee
Backup Channel: https://t.me/SliceForLifeeee
Website: darkwebinformer.com
Pricing (Includes Crypto): darkwebinformer.com/pricing
API Access: darkwebinformer.com/api-details
Socials: darkwebinformer.com/socials
Donations: darkwebinformer.com/donations
๐ŸšจKeeta Telecom allegedly targeted in telecom system compromise

A threat actor on an underground forum is claiming to have compromised systems allegedly tied to Keeta Telecom.

The actor claims the access includes billing panel activity, call record data, live control functions, SIP routing information, and call surveillance-related records.

๐—ช๐—ต๐—ฎ๐˜โ€™๐˜€ ๐—ฎ๐—น๐—น๐—ฒ๐—ด๐—ฒ๐—ฑ๐—น๐˜† ๐—ฒ๐˜…๐—ฝ๐—ผ๐˜€๐—ฒ๐—ฑ:

โ€ข Call record database
โ€ข Caller and receiver number fields
โ€ข Call timing and duration data
โ€ข Call status records
โ€ข SIP technical route data
โ€ข Billing panel access claims
โ€ข Live control panel access claims
โ€ข Incoming and outgoing call monitoring references

๐——๐—ฒ๐˜๐—ฎ๐—ถ๐—น๐˜€:

๐—ง๐—ฎ๐—ฟ๐—ด๐—ฒ๐˜: Keeta Telecom
๐—–๐—ผ๐˜‚๐—ป๐˜๐—ฟ๐˜†: Unknown
๐—ฆ๐—ฒ๐—ฐ๐˜๐—ผ๐—ฟ: Telecommunications
๐—”๐—ฐ๐˜๐—ผ๐—ฟ: erresira
๐—–๐—น๐—ฎ๐—ถ๐—บ: Telecom system compromise
๐—˜๐˜…๐—ฝ๐—ผ๐˜€๐˜‚๐—ฟ๐—ฒ: 8GB call record database and control panel access claims
๐—ฃ๐—ฟ๐—ถ๐—ฐ๐—ฒ: Not stated
๐—ข๐—ฏ๐˜€๐—ฒ๐—ฟ๐˜ƒ๐—ฒ๐—ฑ: May 22, 2026

Stop guessing what's redacted. Subscribers see everything: darkwebinformer.com/pricing
________________________________________

Main Channel: https://t.me/SliceForLifeee
Backup Channel: https://t.me/SliceForLifeeee
Website: darkwebinformer.com
Pricing (Includes Crypto): darkwebinformer.com/pricing
API Access: darkwebinformer.com/api-details
Socials: darkwebinformer.com/socials
Donations: darkwebinformer.com/donations
โค1๐Ÿ˜1
John Daghita aka "lick" appeared yesterday morning before the indictment chamber of the Court of Appeal in Basse-Terre, where judges wereset to review an extradition request.

The magistrates have reserved their decision until May 28.

John Daghitaโ€™s lawyer plans to file a bail request as early as next week for her client, who is currently being held at Basse-Terre prison.

He is accused of stealing $46 million in cryptocurrency from the U.S. federal government.

via Eric Stimpfling (@StimpflingEric)
๐Ÿšจ๐Ÿ‡บ๐Ÿ‡ธ ShinyHunters Claims 3 New Victims

๐Ÿ‡บ๐Ÿ‡ธ DentaQuest.com: U.S.-based dental benefits administrator and oral health company.

๐Ÿ‡บ๐Ÿ‡ธ Charter Communications, Inc.: U.S. telecommunications and cable company best known for Spectrum internet, TV, mobile, and phone services.

๐Ÿ‡บ๐Ÿ‡ธ Baker Distributing Company: U.S.-based distributor of HVAC, refrigeration, and foodservice equipment, parts, and supplies.
________________________________________

Main Channel: https://t.me/SliceForLifeee
Backup Channel: https://t.me/SliceForLifeeee
Website: darkwebinformer.com
Pricing (Includes Crypto): darkwebinformer.com/pricing
API Access: darkwebinformer.com/api-details
Socials: darkwebinformer.com/socials
Donations: darkwebinformer.com/donations
๐Ÿ˜ญ3
Cyberattack News Alert
โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”

Victim: Contagem
Domain: contagem.mg.gov.br

Country: ๐Ÿ‡ง๐Ÿ‡ท BR
Date: May 22nd, 2026

Summary:
A cyberattack hit the systems of the Mairie de Contagem (Metropolitan Region of Belo Horizonte) on Friday the 22nd. Although the administration stated that data has been preserved and that no breach occurred, sources indicate that the institutional email accounts of first-tier employees, including Mayor Ricardo Faria, may have been compromised. The municipality temporarily restricted access to ensure system integrity.

Source: https://ofator.com.br/informacao/prefeitura-de-contagem-sofre-ataque-cibernetico/
Cyberattack News Alert
โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”

Victim: Eyguiรจres
Domain: eyguieres.org

Country: ๐Ÿ‡ซ๐Ÿ‡ท FR
Date: May 22nd, 2026

Summary:
The town hall of Eyguiรจres, a small municipality in the Alpilles region, has been the victim of a cyberattack since Friday, May 22. The attack, carried out by the ransomware group known as Qilin, aims to paralyze the electronic system and threatens both municipal data and the personal data of residents. Law enforcement is leading the investigation, however identifying the perpetrators is complicated due to the use of anonymization software.

Source: https://www.ledauphine.com/faits-divers-justice/2026/05/22/la-mairie-du-village-cible-d-une-cyberattaque