๐Ÿ”ช Slice For Life - Part 2 ๐Ÿ”ช
3.41K subscribers
903 photos
22 videos
723 links
Download Telegram
โ€ผ๏ธ๐Ÿ‡ณ๐Ÿ‡ฑ LAPSUS$ Group has announced INGKA Group, the largest IKEA franchisee holding company, in a new listing.

The actor claims to be auctioning 180GB of internal data, with bidding starting at $100,000 USD.
________________________________________

Main Channel: https://t.me/SliceForLifeee
Backup Channel: https://t.me/SliceForLifeeee
Website: darkwebinformer.com
Pricing (Includes Crypto): darkwebinformer.com/pricing
API Access: darkwebinformer.com/api-details
Socials: darkwebinformer.com/socials
Donations: darkwebinformer.com/donations
๐Ÿšจ Keybe.ai allegedly targeted in customer database leak

A threat actor on an underground forum is claiming that Keybe.ai, an AI platform, suffered a data breach in May 2026 resulting in the full compromise of its customer database.

The actor claims the leak contains roughly 1.9M CSV records (~156M in size), partially released.

๐—ช๐—ต๐—ฎ๐˜'๐˜€ ๐—ฎ๐—น๐—น๐—ฒ๐—ด๐—ฒ๐—ฑ๐—น๐˜† ๐—ฒ๐˜…๐—ฝ๐—ผ๐˜€๐—ฒ๐—ฑ:

โ€ข Names and surnames
โ€ข Cities
โ€ข Email addresses
โ€ข Phone numbers
โ€ข Account status and creation dates
โ€ข Service, campaign, and lead source data
โ€ข Commercial agent and WhatsApp update fields
โ€ข Comments and contact history
โ€ข Various marketing and CRM metadata

๐——๐—ฒ๐˜๐—ฎ๐—ถ๐—น๐˜€:

๐—ง๐—ฎ๐—ฟ๐—ด๐—ฒ๐˜: Keybe.ai
๐—ฆ๐—ฒ๐—ฐ๐˜๐—ผ๐—ฟ: Technology / AI Platform
๐—”๐—ฐ๐˜๐—ผ๐—ฟ: zSenior
๐—–๐—น๐—ฎ๐—ถ๐—บ: Full customer database compromise
๐—˜๐˜…๐—ฝ๐—ผ๐˜€๐˜‚๐—ฟ๐—ฒ: ~1,919,063 records (~156M)
๐—ข๐—ฏ๐˜€๐—ฒ๐—ฟ๐˜ƒ๐—ฒ๐—ฑ: May 29, 2026

๐Ÿ’ฅ Stop guessing what's redacted. Paid subscribers see everything: darkwebinformer.com/pricing
________________________________________

Main Channel: https://t.me/SliceForLifeee
Backup Channel: https://t.me/SliceForLifeeee
Website: darkwebinformer.com
Pricing (Includes Crypto): darkwebinformer.com/pricing
API Access: darkwebinformer.com/api-details
Socials: darkwebinformer.com/socials
Donations: darkwebinformer.com/donations
โ€ผ๏ธ๐Ÿ‡บ๐Ÿ‡ธ DentaQuest has had 234GB+ leaked on to ShinyHunters Pay or Leak Dark Web portal
________________________________________

Main Channel: https://t.me/SliceForLifeee
Backup Channel: https://t.me/SliceForLifeeee
Website: darkwebinformer.com
Pricing (Includes Crypto): darkwebinformer.com/pricing
API Access: darkwebinformer.com/api-details
Socials: darkwebinformer.com/socials
Donations: darkwebinformer.com/donations
๐Ÿšจ๐Ÿ‡ช๐Ÿ‡ธ Spain allegedly targeted in massive 19 million biometric photos and ID cards leak

A threat actor group on an underground forum, identifying as EsqueleSquad, is claiming to expose more than 19 million Spanish citizens and politicians in a consolidated 13 GB database. The actors claim the credentials were taken from the General Directorate of the Police system.

The actors claim the dataset contains biometric photos, ID cards, residence information, and emails.

๐—ช๐—ต๐—ฎ๐˜'๐˜€ ๐—ฎ๐—น๐—น๐—ฒ๐—ด๐—ฒ๐—ฑ๐—น๐˜† ๐—ฒ๐˜…๐—ฝ๐—ผ๐˜€๐—ฒ๐—ฑ:

โ€ข Biometric photos of citizens
โ€ข National ID cards (DNI)
โ€ข Residence information
โ€ข Email addresses
โ€ข Full names and personal details

๐——๐—ฒ๐˜๐—ฎ๐—ถ๐—น๐˜€:

๐—ง๐—ฎ๐—ฟ๐—ด๐—ฒ๐˜: General Directorate of the Police (Spain)
๐—–๐—ผ๐˜‚๐—ป๐˜๐—ฟ๐˜†: Spain ๐Ÿ‡ช๐Ÿ‡ธ
๐—ฆ๐—ฒ๐—ฐ๐˜๐—ผ๐—ฟ: Government / Law Enforcement
๐—”๐—ฐ๐˜๐—ผ๐—ฟ: Skull1172 (EsqueleSquad)
๐—–๐—น๐—ฎ๐—ถ๐—บ: Leaked biometric photos and ID cards
๐—˜๐˜…๐—ฝ๐—ผ๐˜€๐˜‚๐—ฟ๐—ฒ: 19M+ records (~13 GB)

๐Ÿ’ฅ Stop guessing what's redacted. Paid subscribers see everything: darkwebinformer.com/pricing
________________________________________

Main Channel: https://t.me/SliceForLifeee
Backup Channel: https://t.me/SliceForLifeeee
Website: darkwebinformer.com
Pricing (Includes Crypto): darkwebinformer.com/pricing
API Access: darkwebinformer.com/api-details
Socials: darkwebinformer.com/socials
Donations: darkwebinformer.com/donations
โค3
๐Ÿšจ๐Ÿ‡ช๐Ÿ‡ธ Podoservice allegedly targeted in 100K database sale

A threat actor on an underground forum is claiming to sell a database allegedly originating from Podoservice, a Spanish podiatry services platform.

The actor claims the database contains roughly 100K records across customer and contact data.

๐—ช๐—ต๐—ฎ๐˜'๐˜€ ๐—ฎ๐—น๐—น๐—ฒ๐—ด๐—ฒ๐—ฑ๐—น๐˜† ๐—ฒ๐˜…๐—ฝ๐—ผ๐˜€๐—ฒ๐—ฑ:

โ€ข First and last names
โ€ข Company and alias fields
โ€ข Addresses, postal codes, and cities
โ€ข Phone and mobile numbers
โ€ข VAT numbers and DNI (national ID)
โ€ข Email addresses
โ€ข Passwords (hashed)
โ€ข Dates of birth
โ€ข Newsletter, registration IP, and account metadata

๐——๐—ฒ๐˜๐—ฎ๐—ถ๐—น๐˜€:

๐—ง๐—ฎ๐—ฟ๐—ด๐—ฒ๐˜: Podoservice
๐—–๐—ผ๐˜‚๐—ป๐˜๐—ฟ๐˜†: Spain ๐Ÿ‡ช๐Ÿ‡ธ
๐—ฆ๐—ฒ๐—ฐ๐˜๐—ผ๐—ฟ: Healthcare / Podiatry Services
๐—”๐—ฐ๐˜๐—ผ๐—ฟ: Sophia
๐—–๐—น๐—ฎ๐—ถ๐—บ: Database sale
๐—˜๐˜…๐—ฝ๐—ผ๐˜€๐˜‚๐—ฟ๐—ฒ: ~100K records
๐—ฃ๐—ฟ๐—ถ๐—ฐ๐—ฒ: Not disclosed (contact to purchase)
๐—ข๐—ฏ๐˜€๐—ฒ๐—ฟ๐˜ƒ๐—ฒ๐—ฑ: May 30, 2026

๐Ÿ’ฅ Stop guessing what's redacted. Paid subscribers see everything: darkwebinformer.com/pricing
________________________________________

Main Channel: https://t.me/SliceForLifeee
Backup Channel: https://t.me/SliceForLifeeee
Website: darkwebinformer.com
Pricing (Includes Crypto): darkwebinformer.com/pricing
API Access: darkwebinformer.com/api-details
Socials: darkwebinformer.com/socials
Donations: darkwebinformer.com/donations
๐Ÿšจ๐Ÿ‡ช๐Ÿ‡ธ Bambuy allegedly targeted in free database leak

A threat actor on an underground forum is claiming to have published a database allegedly originating from Bambuy, a Spanish e-commerce platform. The actor is releasing the data for free.

The actor claims the leaked SQL database contains customer and address records.

๐—ช๐—ต๐—ฎ๐˜'๐˜€ ๐—ฎ๐—น๐—น๐—ฒ๐—ด๐—ฒ๐—ฑ๐—น๐˜† ๐—ฒ๐˜…๐—ฝ๐—ผ๐˜€๐—ฒ๐—ฑ:

โ€ข First and last names
โ€ข Company and alias fields
โ€ข Addresses, postal codes, and cities
โ€ข Phone and mobile numbers
โ€ข VAT numbers and DNI (national ID)
โ€ข Country and state data
โ€ข Account creation and update timestamps

๐——๐—ฒ๐˜๐—ฎ๐—ถ๐—น๐˜€:

๐—ง๐—ฎ๐—ฟ๐—ด๐—ฒ๐˜: Bambuy
๐—–๐—ผ๐˜‚๐—ป๐˜๐—ฟ๐˜†: Spain ๐Ÿ‡ช๐Ÿ‡ธ
๐—ฆ๐—ฒ๐—ฐ๐˜๐—ผ๐—ฟ: Retail / E-commerce
๐—”๐—ฐ๐˜๐—ผ๐—ฟ: Bambi
๐—–๐—น๐—ฎ๐—ถ๐—บ: Free database leak
๐—˜๐˜…๐—ฝ๐—ผ๐˜€๐˜‚๐—ฟ๐—ฒ: Customer and address records (SQL database)
๐—ฃ๐—ฟ๐—ถ๐—ฐ๐—ฒ: Free
๐—ข๐—ฏ๐˜€๐—ฒ๐—ฟ๐˜ƒ๐—ฒ๐—ฑ: May 30, 2026

๐Ÿ’ฅ Stop guessing what's redacted. Paid subscribers see everything: darkwebinformer.com/pricing
________________________________________

Main Channel: https://t.me/SliceForLifeee
Backup Channel: https://t.me/SliceForLifeeee
Website: darkwebinformer.com
Pricing (Includes Crypto): darkwebinformer.com/pricing
API Access: darkwebinformer.com/api-details
Socials: darkwebinformer.com/socials
Donations: darkwebinformer.com/donations
๐Ÿ˜ญ1
๐Ÿšจ๐Ÿ‡ฒ๐Ÿ‡ฝ INCODIS allegedly targeted in leak exposing 20,000+ users with disabilities

A threat actor on an underground forum, attributing the leak to a group called Olympus_Group, is claiming to have leaked data allegedly originating from INCODIS, the State of Colima's institute for the inclusion and protection of people with disabilities in Mexico. The actor is releasing the data for free.

The actor claims the leak contains over 20,000 users and 6,000 documents and photos.

๐—ช๐—ต๐—ฎ๐˜'๐˜€ ๐—ฎ๐—น๐—น๐—ฒ๐—ด๐—ฒ๐—ฑ๐—น๐˜† ๐—ฒ๐˜…๐—ฝ๐—ผ๐˜€๐—ฒ๐—ฑ:

โ€ข Full names
โ€ข Photos
โ€ข Personal documents
โ€ข 6,000 documents and photos in total

๐——๐—ฒ๐˜๐—ฎ๐—ถ๐—น๐˜€:

๐—ง๐—ฎ๐—ฟ๐—ด๐—ฒ๐˜: INCODIS (State of Colima)
๐—–๐—ผ๐˜‚๐—ป๐˜๐—ฟ๐˜†: Mexico ๐Ÿ‡ฒ๐Ÿ‡ฝ
๐—ฆ๐—ฒ๐—ฐ๐˜๐—ผ๐—ฟ: Government / Social Services
๐—”๐—ฐ๐˜๐—ผ๐—ฟ: Hermes_Olymp (Olympus_Group)
๐—–๐—น๐—ฎ๐—ถ๐—บ: Leaked user records, documents, and photos
๐—˜๐˜…๐—ฝ๐—ผ๐˜€๐˜‚๐—ฟ๐—ฒ: 20,000+ users, 6,000 documents and photos
๐—ฃ๐—ฟ๐—ถ๐—ฐ๐—ฒ: Free
๐—ข๐—ฏ๐˜€๐—ฒ๐—ฟ๐˜ƒ๐—ฒ๐—ฑ: May 30, 2026

๐Ÿ’ฅ Stop guessing what's redacted. Paid subscribers see everything: darkwebinformer.com/pricing
________________________________________

Main Channel: https://t.me/SliceForLifeee
Backup Channel: https://t.me/SliceForLifeeee
Website: darkwebinformer.com
Pricing (Includes Crypto): darkwebinformer.com/pricing
API Access: darkwebinformer.com/api-details
Socials: darkwebinformer.com/socials
Donations: darkwebinformer.com/donations
โค1
๐Ÿšจ๐Ÿ‡ญ๐Ÿ‡ฐ Hong Kong school and food sector orgs allegedly targeted in 120K database leak

A threat actor group on an underground forum, identifying as Anka Red Team (TurkHackTeam), is claiming to have dumped a database allegedly originating from Hong Kong based school and food sector entities.

The actors claim the leak contains roughly 120,000 records, with targets listed as a Hong Kong education institution and a food sector company.

๐—ช๐—ต๐—ฎ๐˜'๐˜€ ๐—ฎ๐—น๐—น๐—ฒ๐—ด๐—ฒ๐—ฑ๐—น๐˜† ๐—ฒ๐˜…๐—ฝ๐—ผ๐˜€๐—ฒ๐—ฑ:

โ€ข Member and company names
โ€ข Member language and address fields
โ€ข Usernames and login names
โ€ข Passwords (hashed)
โ€ข User emails
โ€ข Account creation IPs and timestamps
โ€ข User roles (including Administrator accounts)

๐——๐—ฒ๐˜๐—ฎ๐—ถ๐—น๐˜€:

๐—ง๐—ฎ๐—ฟ๐—ด๐—ฒ๐˜: Hong Kong school and food sector entities
๐—–๐—ผ๐˜‚๐—ป๐˜๐—ฟ๐˜†: Hong Kong ๐Ÿ‡ญ๐Ÿ‡ฐ
๐—ฆ๐—ฒ๐—ฐ๐˜๐—ผ๐—ฟ: Education / Food
๐—”๐—ฐ๐˜๐—ผ๐—ฟ: 'SALDIRGAN (Anka Red Team / TurkHackTeam)
๐—–๐—น๐—ฎ๐—ถ๐—บ: Database dump
๐—˜๐˜…๐—ฝ๐—ผ๐˜€๐˜‚๐—ฟ๐—ฒ: ~120,000 records
๐—ฃ๐—ฟ๐—ถ๐—ฐ๐—ฒ: 3 Credits
๐—ข๐—ฏ๐˜€๐—ฒ๐—ฟ๐˜ƒ๐—ฒ๐—ฑ: May 30, 2026

๐Ÿ’ฅ Stop guessing what's redacted. Paid subscribers see everything: darkwebinformer.com/pricing
________________________________________

Main Channel: https://t.me/SliceForLifeee
Backup Channel: https://t.me/SliceForLifeeee
Website: darkwebinformer.com
Pricing (Includes Crypto): darkwebinformer.com/pricing
API Access: darkwebinformer.com/api-details
Socials: darkwebinformer.com/socials
Donations: darkwebinformer.com/donations
๐Ÿšจ๐Ÿ‡จ๐Ÿ‡ด Colombian government systems allegedly compromised by EsqueleSquad (150 GB)

A threat actor group on an underground forum, identifying as EsqueleSquad, is claiming to have compromised 15 official Colombian government databases, extracted directly from internal servers. The actors are threatening to release the full package after election day.

The actors claim to hold roughly 150 GB of data and around 75 million rows across critical national systems.

๐—ช๐—ต๐—ฎ๐˜'๐˜€ ๐—ฎ๐—น๐—น๐—ฒ๐—ด๐—ฒ๐—ฑ๐—น๐˜† ๐—ฒ๐˜…๐—ฝ๐—ผ๐˜€๐—ฒ๐—ฑ:

โ€ข DIAN - taxes, RUT, income tax returns, companies (48.5 GB)
โ€ข Registradurรญa - IDs, biometrics, civil registry, electoral data (28.3 GB)
โ€ข ICETEX - educational debts of millions (19.7 GB)
โ€ข Colpensiones - pensions and financial data of retirees (16.8 GB)
โ€ข ICFES - student exam results and educational data (24.7 GB combined)
โ€ข Migraciรณn Colombia - passports, visas, migration records (9.1 GB)
โ€ข Seguridad Social - EPS health affiliations and social security (7.4 GB)
โ€ข Policรญa - internal National Police data (3.2 GB)
โ€ข Fiscalรญa - criminal investigations and legal cases (2.8 GB)
โ€ข DANE, CNSC, Gobierno Bogotรก, Medellรญn, Datos.gov (national statistics, public competitions, city government, open data)
โ€ข Intelligence reports, SISBEN + Prosperidad Social (15M+ records), and 2026 campaign financing data

๐——๐—ฒ๐˜๐—ฎ๐—ถ๐—น๐˜€:

๐—ง๐—ฎ๐—ฟ๐—ด๐—ฒ๐˜: Multiple Colombian government agencies
๐—–๐—ผ๐˜‚๐—ป๐˜๐—ฟ๐˜†: Colombia ๐Ÿ‡จ๐Ÿ‡ด
๐—ฆ๐—ฒ๐—ฐ๐˜๐—ผ๐—ฟ: Government
๐—”๐—ฐ๐˜๐—ผ๐—ฟ: Skull1172 (EsqueleSquad)
๐—–๐—น๐—ฎ๐—ถ๐—บ: 15 official government databases compromised
๐—˜๐˜…๐—ฝ๐—ผ๐˜€๐˜‚๐—ฟ๐—ฒ: ~75 million rows (~155 GB total)
๐—ฃ๐—ฟ๐—ถ๐—ฐ๐—ฒ: Free (samples now, full release threatened after election day)
๐—ข๐—ฏ๐˜€๐—ฒ๐—ฟ๐˜ƒ๐—ฒ๐—ฑ: May 30, 2026

๐Ÿ’ฅ Stop guessing what's redacted. Paid subscribers see everything: darkwebinformer.com/pricing
________________________________________

Main Channel: https://t.me/SliceForLifeee
Backup Channel: https://t.me/SliceForLifeeee
Website: darkwebinformer.com
Pricing (Includes Crypto): darkwebinformer.com/pricing
API Access: darkwebinformer.com/api-details
Socials: darkwebinformer.com/socials
Donations: darkwebinformer.com/donations
Here are SOME features coming to the new Threat Feed in June.

- OCR Text Scanning. Click a button to scan the screenshot, wait a couple seconds and it will pull any links, session IDs, tox, telegrams from the screenshot back to you with easy to copy buttons

- Threat report generation. You can run it per Threat Alert or via bookmarks, the first 100 alerts, etc.

- Ability to search different APIs. I don't want to name openly for now.

- Search WhiteIntels stealer log database for any domain (no longer limited by alert). It will currently return only stats for that domain. But surely your company is safe, right? RIGHT?

- Search filters that are also now bound to the filtered export button. Multiple exports daily, not limited to 1.

Many new features coming. Just wanted to provide a simple update. Don't worry I'm cooking.
โค1
๐Ÿšจ GoldenBullet cracking tool advertised on underground forum

A threat actor on an underground forum marketplace is advertising GoldenBullet, an automation and web testing framework being promoted as a credential-stuffing and account-checking tool. The post markets version 2.1 with a refreshed UI and updated libraries.

The actor is promoting the tool's account-cracking, proxy, and config management capabilities to other forum users.

๐—ช๐—ต๐—ฎ๐˜'๐˜€ ๐—ฏ๐—ฒ๐—ถ๐—ป๐—ด ๐—ฎ๐—ฑ๐˜ƒ๐—ฒ๐—ฟ๐˜๐—ถ๐˜€๐—ฒ๐—ฑ:

โ€ข Multi-run job engine with bot/proxy stats and hit outputs to database
โ€ข Netflix cookie checker with auto-add to hits
โ€ข ULP to Combo extraction and Logs to ULP conversion
โ€ข Keyword remover for trimming ULP files
โ€ข Proxy checker with auto type/country detection
โ€ข Config manager supporting .tic, .opk, .loli, .svb formats
โ€ข Captcha-solving blocks (ReCaptcha, Slide, PoW)
โ€ข Hashing and utility blocks (MD5, SHA256, GenerateGUID, Unix time)
โ€ข Multipart HTTP request builder and TLS bypass options

๐——๐—ฒ๐˜๐—ฎ๐—ถ๐—น๐˜€:

๐—ง๐—ฎ๐—ฟ๐—ด๐—ฒ๐˜: N/A (offensive tooling)
๐—ฆ๐—ฒ๐—ฐ๐˜๐—ผ๐—ฟ: Cybercrime Tooling
๐—”๐—ฐ๐˜๐—ผ๐—ฟ: ticnico
๐—–๐—น๐—ฎ๐—ถ๐—บ: Selling/advertising GoldenBullet cracking tool (v2.1)
๐—˜๐˜…๐—ฝ๐—ผ๐˜€๐˜‚๐—ฟ๐—ฒ: Credential-stuffing and account-checking framework
๐—ฃ๐—ฟ๐—ถ๐—ฐ๐—ฒ: Listed in forum marketplace (sellers section)
๐—ข๐—ฏ๐˜€๐—ฒ๐—ฟ๐˜ƒ๐—ฒ๐—ฑ: May 30, 2026

๐Ÿ’ฅ Stop guessing what's redacted. Paid subscribers see everything: darkwebinformer.com/pricing
________________________________________

Main Channel: https://t.me/SliceForLifeee
Backup Channel: https://t.me/SliceForLifeeee
Website: darkwebinformer.com
Pricing (Includes Crypto): darkwebinformer.com/pricing
API Access: darkwebinformer.com/api-details
Socials: darkwebinformer.com/socials
Donations: darkwebinformer.com/donations
โค1