🔪 Slice For Life - Part 2 🔪
https://x.com/WordPress/status/2078191359307943981
Another PoC: https://github.com/sergiointel/wp2shell-poc
GitHub
GitHub - sergiointel/wp2shell-poc: Stock vulnerable wordpress RCE poc for wp2shell.
Stock vulnerable wordpress RCE poc for wp2shell. Contribute to sergiointel/wp2shell-poc development by creating an account on GitHub.
🚨🇧🇷 Receita Federal dataset containing 279 million CPF records allegedly listed for sale
A forum actor claims to have extracted a current dataset from systems tied to Brazil’s Receita Federal containing 279,008,638 records. The actor also claims to possess an older backup created in 2019 containing approximately 248 million CPF entries.
The newly advertised dataset is described as a 69.6GB file, with two samples containing 10,000 records each published as proof. The actor is asking $10,000 for the alleged 2026 dataset and $1,300 for the 2019 backup, payable in Bitcoin or Monero.
The allegedly exposed information includes CPF numbers, full names, dates of birth, email addresses, phone numbers, residential addresses, postal codes, municipalities, occupations, nationalities, parents’ names, sex, tax-registration dates, cadastral status, foreign residency indicators, and death-related records.
This claim is currently unverified.
💥 Get early visibility into underground claims, including unblurred screenshots, before they turn into headlines: http://darkwebinformer.com/pricing
A forum actor claims to have extracted a current dataset from systems tied to Brazil’s Receita Federal containing 279,008,638 records. The actor also claims to possess an older backup created in 2019 containing approximately 248 million CPF entries.
The newly advertised dataset is described as a 69.6GB file, with two samples containing 10,000 records each published as proof. The actor is asking $10,000 for the alleged 2026 dataset and $1,300 for the 2019 backup, payable in Bitcoin or Monero.
The allegedly exposed information includes CPF numbers, full names, dates of birth, email addresses, phone numbers, residential addresses, postal codes, municipalities, occupations, nationalities, parents’ names, sex, tax-registration dates, cadastral status, foreign residency indicators, and death-related records.
This claim is currently unverified.
💥 Get early visibility into underground claims, including unblurred screenshots, before they turn into headlines: http://darkwebinformer.com/pricing
🚨🇷🇴 Romanian government and commercial datasets allegedly bundled for sale
A forum actor claims to be selling a bundle described as six Romanian datasets containing property, aviation, education, court, and courier records.
The listing advertises 27,796,642 national property registration records, 437,809 court cases, more than 1.55 million courier delivery records, teacher salary data covering all 42 counties, and 94 files allegedly taken from the Bucharest Airports backend. The complete bundle is priced at $5,000.
The allegedly exposed information includes names, CNP identifiers, home and delivery addresses, property details, teacher positions and salaries, court parties, IBANs, phone numbers, email addresses, hearing dates, flight information, administrator accounts, password hashes, contact submissions, subscriber details, and login logs.
This claim is currently unverified.
💥 Get early visibility into underground claims, including unblurred screenshots, before they turn into headlines: http://darkwebinformer.com/pricing
A forum actor claims to be selling a bundle described as six Romanian datasets containing property, aviation, education, court, and courier records.
The listing advertises 27,796,642 national property registration records, 437,809 court cases, more than 1.55 million courier delivery records, teacher salary data covering all 42 counties, and 94 files allegedly taken from the Bucharest Airports backend. The complete bundle is priced at $5,000.
The allegedly exposed information includes names, CNP identifiers, home and delivery addresses, property details, teacher positions and salaries, court parties, IBANs, phone numbers, email addresses, hearing dates, flight information, administrator accounts, password hashes, contact submissions, subscriber details, and login logs.
This claim is currently unverified.
💥 Get early visibility into underground claims, including unblurred screenshots, before they turn into headlines: http://darkwebinformer.com/pricing
🚨🇦🇷 Instituto Ferrero de Neurología y Sueño data allegedly being ransomed for $150,000
A forum actor claims to have breached Instituto Ferrero de Neurología y Sueño, an Argentine medical center specializing in neurological and sleep disorders.
The listing advertises 636GB of data containing approximately 474,826 files tied to 103,315 users. The actor is demanding $150,000 and threatens to sell the material if payment is not made by August 5, 2026.
The allegedly compromised material may include patient, clinical, administrative, and other internal records, although the post does not provide a detailed breakdown of the exposed fields. Samples were shared through the actor’s Telegram channel.
This claim is currently unverified.
💥 Get early visibility into underground claims, including unblurred screenshots, before they turn into headlines: http://darkwebinformer.com/pricing
A forum actor claims to have breached Instituto Ferrero de Neurología y Sueño, an Argentine medical center specializing in neurological and sleep disorders.
The listing advertises 636GB of data containing approximately 474,826 files tied to 103,315 users. The actor is demanding $150,000 and threatens to sell the material if payment is not made by August 5, 2026.
The allegedly compromised material may include patient, clinical, administrative, and other internal records, although the post does not provide a detailed breakdown of the exposed fields. Samples were shared through the actor’s Telegram channel.
This claim is currently unverified.
💥 Get early visibility into underground claims, including unblurred screenshots, before they turn into headlines: http://darkwebinformer.com/pricing
🚨🇦🇷 Aceitera General Deheza dataset allegedly listed for sale
A forum actor claims to be selling a dataset allegedly obtained from Aceitera General Deheza, an Argentine agribusiness company involved in agricultural production, processing, logistics, and exports.
The listing advertises approximately 8 million records totaling around 124GB for $300. The seller says individual datasets can also be requested separately and published a proof-of-concept containing sample records from multiple tables.
The allegedly exposed information includes names, addresses, phone numbers, email addresses, usernames, roles and permissions, authentication and device tokens, vendor records, business locations, machinery and IoT identifiers, SIM details, GPS coordinates, vehicle registration numbers, transaction histories, product and crop data, weights, humidity readings, timestamps, and synchronization metadata.
This claim is currently unverified.
💥 Get early visibility into underground claims, including unblurred screenshots, before they turn into headlines: http://darkwebinformer.com/pricing
A forum actor claims to be selling a dataset allegedly obtained from Aceitera General Deheza, an Argentine agribusiness company involved in agricultural production, processing, logistics, and exports.
The listing advertises approximately 8 million records totaling around 124GB for $300. The seller says individual datasets can also be requested separately and published a proof-of-concept containing sample records from multiple tables.
The allegedly exposed information includes names, addresses, phone numbers, email addresses, usernames, roles and permissions, authentication and device tokens, vendor records, business locations, machinery and IoT identifiers, SIM details, GPS coordinates, vehicle registration numbers, transaction histories, product and crop data, weights, humidity readings, timestamps, and synchronization metadata.
This claim is currently unverified.
💥 Get early visibility into underground claims, including unblurred screenshots, before they turn into headlines: http://darkwebinformer.com/pricing
🚨🇵🇪 Instituto Sabio Nacional Antúnez de Mayolo student data allegedly leaked
A forum actor claims to have leaked personal and academic information belonging to students of the Instituto Sabio Nacional Antúnez de Mayolo, known as ISAM, a higher education institution in Peru.
The listing says the material contains the institution’s complete student dataset and includes samples.
The allegedly exposed information includes DNI numbers, full names, dates of birth, phone numbers, email addresses, home addresses, genders, ages, enrollment dates, academic status, study programs, campuses, class schedules, admission types, and academic periods.
This claim is currently unverified.
💥 Get early visibility into underground claims, including unblurred screenshots, before they turn into headlines: http://darkwebinformer.com/pricing
A forum actor claims to have leaked personal and academic information belonging to students of the Instituto Sabio Nacional Antúnez de Mayolo, known as ISAM, a higher education institution in Peru.
The listing says the material contains the institution’s complete student dataset and includes samples.
The allegedly exposed information includes DNI numbers, full names, dates of birth, phone numbers, email addresses, home addresses, genders, ages, enrollment dates, academic status, study programs, campuses, class schedules, admission types, and academic periods.
This claim is currently unverified.
💥 Get early visibility into underground claims, including unblurred screenshots, before they turn into headlines: http://darkwebinformer.com/pricing
🚨🇰🇷 Robot Global Team source code allegedly leaked
A forum actor claims to have breached Robot Global Team, known as RGT, a South Korean company that develops and manufactures autonomous service robots, including its SIRBOT product line.
The listing says the incident occurred in July 2026 and resulted in a collection of the company’s source code being stolen. A file-tree sample was posted as proof.
This claim is currently unverified.
💥 Get early visibility into underground claims, including unblurred screenshots, before they turn into headlines: http://darkwebinformer.com/pricing
A forum actor claims to have breached Robot Global Team, known as RGT, a South Korean company that develops and manufactures autonomous service robots, including its SIRBOT product line.
The listing says the incident occurred in July 2026 and resulted in a collection of the company’s source code being stolen. A file-tree sample was posted as proof.
This claim is currently unverified.
💥 Get early visibility into underground claims, including unblurred screenshots, before they turn into headlines: http://darkwebinformer.com/pricing
🚨🇮🇳 PappyJoe patient data allegedly stolen for a $250,000 ransom
A forum actor claims to have breached PappyJoe, an India-based healthcare technology company that provides cloud-based clinic and practice management software for appointments, electronic medical records, billing, prescriptions, patient communications, and administrative tasks.
The listing advertises 413GB of data allegedly containing personally identifiable information tied to 6,873,180 patients and 531,673 files. The actor is demanding $250,000 and threatens to sell the material if payment is not made by August 5, 2026.
The post does not provide a detailed breakdown of the allegedly compromised fields, but describes the material as patient PII and links to samples published.
This claim is currently unverified.
💥 Get early visibility into underground claims, including unblurred screenshots, before they turn into headlines: http://darkwebinformer.com/pricing
A forum actor claims to have breached PappyJoe, an India-based healthcare technology company that provides cloud-based clinic and practice management software for appointments, electronic medical records, billing, prescriptions, patient communications, and administrative tasks.
The listing advertises 413GB of data allegedly containing personally identifiable information tied to 6,873,180 patients and 531,673 files. The actor is demanding $250,000 and threatens to sell the material if payment is not made by August 5, 2026.
The post does not provide a detailed breakdown of the allegedly compromised fields, but describes the material as patient PII and links to samples published.
This claim is currently unverified.
💥 Get early visibility into underground claims, including unblurred screenshots, before they turn into headlines: http://darkwebinformer.com/pricing
‼️🇺🇸 A known initial access broker is offering for sale alleged access to an unnamed large US casino and resort for $500.
This claim is currently unverified.
💥 Get early visibility into underground claims, including unblurred screenshots, before they turn into headlines: http://darkwebinformer.com/pricing
This claim is currently unverified.
💥 Get early visibility into underground claims, including unblurred screenshots, before they turn into headlines: http://darkwebinformer.com/pricing
🚨🇵🇱 Wydawnictwo WAM customer dataset allegedly leaked
A forum actor claims to have breached Wydawnictwo WAM, a Polish publisher and online bookstore offering religious and spiritual books, audiobooks, and educational materials.
The listing says the incident exposed data tied to approximately 71,600 unique users.
The allegedly exposed information includes customer names, email addresses, phone numbers, billing and shipping addresses, postal codes, account details, order identifiers, product information, payment and delivery statuses, transaction records, timestamps, and other e-commerce data.
This claim is currently unverified.
💥 Get early visibility into underground claims, including unblurred screenshots, before they turn into headlines: http://darkwebinformer.com/pricing
A forum actor claims to have breached Wydawnictwo WAM, a Polish publisher and online bookstore offering religious and spiritual books, audiobooks, and educational materials.
The listing says the incident exposed data tied to approximately 71,600 unique users.
The allegedly exposed information includes customer names, email addresses, phone numbers, billing and shipping addresses, postal codes, account details, order identifiers, product information, payment and delivery statuses, transaction records, timestamps, and other e-commerce data.
This claim is currently unverified.
💥 Get early visibility into underground claims, including unblurred screenshots, before they turn into headlines: http://darkwebinformer.com/pricing
‼️ Qilin ransomware claims 8 victims
🇺🇸 The Nueva School - A private pre-K through 12 school for gifted students in the San Francisco Bay Area.
🇺🇸 St. Martha Catholic Church - A Roman Catholic parish providing worship, religious education, and community services.
🇺🇸 Salina Supply Company - A Kansas-based wholesale distributor of plumbing, HVAC, waterworks, and pumping equipment.
🇺🇸 Heartland Catfish Company - A Mississippi-based producer and processor of U.S. farm-raised catfish products.
🇫🇷 Armara - A French seafood wholesaler supplying fish, shellfish, crustaceans, and other seafood products.
🇺🇸 KLD Labs - A manufacturer of machine-vision inspection and measurement systems for the railway industry.
🇮🇹 SICC - An Italian company specializing in building materials and construction products.
🇺🇸 AK Preparedness - A provider of emergency planning, safety training, and preparedness services.
🇺🇸 The Nueva School - A private pre-K through 12 school for gifted students in the San Francisco Bay Area.
🇺🇸 St. Martha Catholic Church - A Roman Catholic parish providing worship, religious education, and community services.
🇺🇸 Salina Supply Company - A Kansas-based wholesale distributor of plumbing, HVAC, waterworks, and pumping equipment.
🇺🇸 Heartland Catfish Company - A Mississippi-based producer and processor of U.S. farm-raised catfish products.
🇫🇷 Armara - A French seafood wholesaler supplying fish, shellfish, crustaceans, and other seafood products.
🇺🇸 KLD Labs - A manufacturer of machine-vision inspection and measurement systems for the railway industry.
🇮🇹 SICC - An Italian company specializing in building materials and construction products.
🇺🇸 AK Preparedness - A provider of emergency planning, safety training, and preparedness services.
🚨🇵🇭 Mines and Geosciences Bureau data allegedly leaked
A forum actor claims to have leaked data belonging to the Philippines’ Mines and Geosciences Bureau, an agency operating under the Department of Environment and Natural Resources.
The post advertises more than 2,900 documents totaling 21GB compressed and approximately 25GB when extracted.
The exposed material allegedly includes survey data, geolocation and logistics information, permits, names, signatures, addresses, contact details, PDF documents, images, and SQL database files.
This claim is currently unverified.
💥 Get early visibility into underground claims, including unblurred screenshots, before they turn into headlines: http://darkwebinformer.com/pricing
A forum actor claims to have leaked data belonging to the Philippines’ Mines and Geosciences Bureau, an agency operating under the Department of Environment and Natural Resources.
The post advertises more than 2,900 documents totaling 21GB compressed and approximately 25GB when extracted.
The exposed material allegedly includes survey data, geolocation and logistics information, permits, names, signatures, addresses, contact details, PDF documents, images, and SQL database files.
This claim is currently unverified.
💥 Get early visibility into underground claims, including unblurred screenshots, before they turn into headlines: http://darkwebinformer.com/pricing
💥 DocuSeal: An open source platform that provides secure and efficient digital document signing and processing.
GitHub: https://github.com/docusealco/docuseal
Demo: https://demo.docuseal.tech
GitHub: https://github.com/docusealco/docuseal
Demo: https://demo.docuseal.tech
❤2
💥 simsup: Offers prepaid digital eSIMs for mobile data and phone numbers, with payment available in Bitcoin and Monero. No account registration or KYC required.
Clearnet: https://simsup.com
Dark Web: http://simsupnetmndawo6ufx2olgkovjo56ktha6on6roakggewht3sglk6id[.]onion
Clearnet: https://simsup.com
Dark Web: http://simsupnetmndawo6ufx2olgkovjo56ktha6on6roakggewht3sglk6id[.]onion
❤4
This media is not supported in your browser
VIEW IN TELEGRAM
‼️ CVE-2026-63030: wp2shell, a critical remote code execution vulnerability in WordPress core
Credit: @hash_kitten // @assetnote
PoC: https://x.com/DarkWebInformer/status/2078251636623851682
Credit: @hash_kitten // @assetnote
PoC: https://x.com/DarkWebInformer/status/2078251636623851682
🔥1