🚨🇹🇷 FortiGate access to an unnamed Turkish organization allegedly listed for sale
A forum actor claims to be selling privileged access to a Turkish organization reportedly generating approximately 500 million in revenue.
The listing advertises FortiGate SSH and web-panel access with super-administrator privileges across more than 100 hosts. The environment allegedly includes Windows, Linux, and virtual machines.
The seller is asking 3,000 and says transactions through an escrow service are accepted. No company name, industry, sample data, or technical proof was publicly provided.
This claim is currently unverified.
💥 No delays. No guessing. No redactions. Get the intel threat actors see, the moment they post it. darkwebinformer.com/pricing
A forum actor claims to be selling privileged access to a Turkish organization reportedly generating approximately 500 million in revenue.
The listing advertises FortiGate SSH and web-panel access with super-administrator privileges across more than 100 hosts. The environment allegedly includes Windows, Linux, and virtual machines.
The seller is asking 3,000 and says transactions through an escrow service are accepted. No company name, industry, sample data, or technical proof was publicly provided.
This claim is currently unverified.
💥 No delays. No guessing. No redactions. Get the intel threat actors see, the moment they post it. darkwebinformer.com/pricing
🚨🇸🇦 Blackbox BBVAS Saudi mobile subscriber data allegedly leaked
A forum actor claims to have breached Blackbox LTD, a value-added services provider operating across Beirut, Dubai, and Riyadh that handles mobile subscription billing for services including Mobily and STC.
The post advertises 59,903 unique Saudi phone numbers and 88,501 transaction events. The exposed data allegedly includes transaction histories, timestamps, device and carrier details, IP addresses, locations, billing response codes, internal API endpoints, hardcoded credentials, affiliate tags, server details, fraud indicators, PIN codes, billing types, and service identifiers.
This claim is currently unverified.
💥 No delays. No guessing. No redactions. Get the intel threat actors see, the moment they post it. darkwebinformer.com/pricing
A forum actor claims to have breached Blackbox LTD, a value-added services provider operating across Beirut, Dubai, and Riyadh that handles mobile subscription billing for services including Mobily and STC.
The post advertises 59,903 unique Saudi phone numbers and 88,501 transaction events. The exposed data allegedly includes transaction histories, timestamps, device and carrier details, IP addresses, locations, billing response codes, internal API endpoints, hardcoded credentials, affiliate tags, server details, fraud indicators, PIN codes, billing types, and service identifiers.
This claim is currently unverified.
💥 No delays. No guessing. No redactions. Get the intel threat actors see, the moment they post it. darkwebinformer.com/pricing
🚨🇧🇷 NúcleoGov database and server access allegedly compromised
A forum actor claims to have breached NúcleoGov, a Brazilian hosting provider reportedly responsible for infrastructure supporting multiple government websites, including domains under .leg.br and .gov.br.
The post advertises full access to the company’s servers and a 15GB database dump, which was published across several download links. The actor also claims the access remains persistent and could be used to return to the affected systems.
This claim is currently unverified.
💥 Get early visibility into underground claims, including unblurred screenshots, before they turn into headlines: http://darkwebinformer.com/pricing
A forum actor claims to have breached NúcleoGov, a Brazilian hosting provider reportedly responsible for infrastructure supporting multiple government websites, including domains under .leg.br and .gov.br.
The post advertises full access to the company’s servers and a 15GB database dump, which was published across several download links. The actor also claims the access remains persistent and could be used to return to the affected systems.
This claim is currently unverified.
💥 Get early visibility into underground claims, including unblurred screenshots, before they turn into headlines: http://darkwebinformer.com/pricing
There is an issue with XMR transactions on my server fully confirming despite the transaction being fully confirmed on the blockchain. Looking into it. Will update once resolved.
🔪 Slice For Life - Part 2 🔪
There is an issue with XMR transactions on my server fully confirming despite the transaction being fully confirmed on the blockchain. Looking into it. Will update once resolved.
Issue is resolved. All stuck transactions have settled automatically and accounts were created as usual. Plugin that was upgraded yesterday was the issue.
🚨🇫🇷 Resaclick user database allegedly leaked
A forum actor claims to have leaked a database belonging to Resaclick, a French online appointment scheduling platform that allows users to book appointments with professionals and receive automated reminders.
The post advertises 10,315 records tied to approximately 10,263 individuals. Published samples contain names, email addresses, phone numbers, dates of birth, street addresses, postal codes, cities, countries, and internal user identifiers.
This claim is currently unverified.
💥 No delays. No guessing. No redactions. Get the intel threat actors see, the moment they post it. darkwebinformer.com/pricing
A forum actor claims to have leaked a database belonging to Resaclick, a French online appointment scheduling platform that allows users to book appointments with professionals and receive automated reminders.
The post advertises 10,315 records tied to approximately 10,263 individuals. Published samples contain names, email addresses, phone numbers, dates of birth, street addresses, postal codes, cities, countries, and internal user identifiers.
This claim is currently unverified.
💥 No delays. No guessing. No redactions. Get the intel threat actors see, the moment they post it. darkwebinformer.com/pricing
🚨‼️ CVE-2026-61511: A vulnerability in vBulletin has been identified, the vulnerability allows an unauthenticated user to cause the vBulletin to execute arbitrary code (PHP) on the remote server.
CVSS: 9.8
Exploit: https://ssd-disclosure.com/vbulletin-runtime-template-runmaths-preauth-rce/
CVSS: 9.8
Exploit: https://ssd-disclosure.com/vbulletin-runtime-template-runmaths-preauth-rce/
❤1
🔪 Slice For Life - Part 2 🔪
🚨‼️ CVE-2026-61511: A vulnerability in vBulletin has been identified, the vulnerability allows an unauthenticated user to cause the vBulletin to execute arbitrary code (PHP) on the remote server. CVSS: 9.8 Exploit: https://ssd-disclosure.com/vbulletin-runtime…
I will take this even though I would appreciate a MyBB exploit :D
😁1
🚨🇺🇸 SSH access to US healthcare or insurance organization allegedly offered for sale
A forum actor is advertising SSH access to an unidentified organization in the United States operating within the healthcare or insurance sector.
The listing prices the access at $800 but provides no additional details about the affected organization, compromised systems, account privileges, or scope of access.
This claim is currently unverified.
💥 Get early visibility into underground claims, including unblurred screenshots, before they turn into headlines: http://darkwebinformer.com/pricing
A forum actor is advertising SSH access to an unidentified organization in the United States operating within the healthcare or insurance sector.
The listing prices the access at $800 but provides no additional details about the affected organization, compromised systems, account privileges, or scope of access.
This claim is currently unverified.
💥 Get early visibility into underground claims, including unblurred screenshots, before they turn into headlines: http://darkwebinformer.com/pricing
🚨🇹🇷 FortiGate access to more than 120 Turkish hosts allegedly offered for sale
A forum actor is advertising access to an unidentified organization in Turkey, claiming the compromised environment includes more than 120 hosts and approximately $500 million in revenue.
The listing advertises FortiGate SSH access with SUPER_ADMIN privileges across Windows, Linux, and virtual machine systems. The access is priced at $3,000.
This claim is currently unverified.
💥 No delays. No guessing. No redactions. Get the intel threat actors see, the moment they post it. darkwebinformer.com/pricing
A forum actor is advertising access to an unidentified organization in Turkey, claiming the compromised environment includes more than 120 hosts and approximately $500 million in revenue.
The listing advertises FortiGate SSH access with SUPER_ADMIN privileges across Windows, Linux, and virtual machine systems. The access is priced at $3,000.
This claim is currently unverified.
💥 No delays. No guessing. No redactions. Get the intel threat actors see, the moment they post it. darkwebinformer.com/pricing
🚨 NightSpire ransomware claims 12 victims
🇺🇸 Kates Nussman Ellis Earle & Landolfi LLP - A law firm providing business, real estate, estate planning, landlord-tenant, and municipal law services.
🇬🇧 The Mountain - A global art and lifestyle brand best known for graphic apparel and merchandise.
🇺🇸 TFG Benefits, Inc. - An insurance brokerage specializing in employee benefits and HR consulting.
🇫🇷 Diffusion de Produits Inoxydables - A French supplier of stainless-steel screws, bolts, fasteners, and assembly products.
🇺🇸 KSL Dirtworks LLC - A construction company providing excavation, earthwork, utility, and infrastructure services.
🇮🇳 Wings Argo Private Limited - An Indian company involved in agricultural commodity processing and food-product manufacturing.
🇮🇳 K. Venkatesh & Co. - An Indian chartered accountancy firm providing auditing, taxation, accounting, and financial advisory services.
🇲🇾 Furama Bukit Bintang - A hotel in Kuala Lumpur offering accommodation, dining, and hospitality services.
🇨🇭 OPTIDEA GmbH - A Swiss supplier of optical equipment, eyewear, magnification products, and low-vision aids.
🇹🇷 MKS Transformator - A Turkish manufacturer of cores and components for power and distribution transformers.
🇹🇭 Thai Seng International Co. Ltd - A Thai distributor of power tools, cordless equipment, and electric garden tools.
🇮🇹 Auto Royal Company - An Italian automotive dealership group selling and servicing vehicles.
💥 No delays. No guessing. No redactions. Get the intel threat actors see, the moment they post it. darkwebinformer.com/pricing
🇺🇸 Kates Nussman Ellis Earle & Landolfi LLP - A law firm providing business, real estate, estate planning, landlord-tenant, and municipal law services.
🇬🇧 The Mountain - A global art and lifestyle brand best known for graphic apparel and merchandise.
🇺🇸 TFG Benefits, Inc. - An insurance brokerage specializing in employee benefits and HR consulting.
🇫🇷 Diffusion de Produits Inoxydables - A French supplier of stainless-steel screws, bolts, fasteners, and assembly products.
🇺🇸 KSL Dirtworks LLC - A construction company providing excavation, earthwork, utility, and infrastructure services.
🇮🇳 Wings Argo Private Limited - An Indian company involved in agricultural commodity processing and food-product manufacturing.
🇮🇳 K. Venkatesh & Co. - An Indian chartered accountancy firm providing auditing, taxation, accounting, and financial advisory services.
🇲🇾 Furama Bukit Bintang - A hotel in Kuala Lumpur offering accommodation, dining, and hospitality services.
🇨🇭 OPTIDEA GmbH - A Swiss supplier of optical equipment, eyewear, magnification products, and low-vision aids.
🇹🇷 MKS Transformator - A Turkish manufacturer of cores and components for power and distribution transformers.
🇹🇭 Thai Seng International Co. Ltd - A Thai distributor of power tools, cordless equipment, and electric garden tools.
🇮🇹 Auto Royal Company - An Italian automotive dealership group selling and servicing vehicles.
💥 No delays. No guessing. No redactions. Get the intel threat actors see, the moment they post it. darkwebinformer.com/pricing
‼️ New Dark Web Informer Blog Post!
Title: Allo.Solar Database Allegedly Leaked, 101,349 French Customers and 208,000 Solar Equipment Orders Exposed
Link: https://darkwebinformer.com/allo-solar-database-allegedly-leaked-101-349-french-customers-and-208-000-solar-equipment-orders-exposed/
💥 Get early visibility into underground claims, including unblurred screenshots, before they turn into headlines: https://darkwebinformer.com/pricing
Title: Allo.Solar Database Allegedly Leaked, 101,349 French Customers and 208,000 Solar Equipment Orders Exposed
Link: https://darkwebinformer.com/allo-solar-database-allegedly-leaked-101-349-french-customers-and-208-000-solar-equipment-orders-exposed/
💥 Get early visibility into underground claims, including unblurred screenshots, before they turn into headlines: https://darkwebinformer.com/pricing
Dark Web Informer
Allo.Solar Database Allegedly Leaked, 101,349 French Customers and 208,000 Solar Equipment Orders Exposed
A forum user posting as ChimeraZ has published what they describe as the database of Allo.Solar, a French e-commerce platform selling photovoltaic and renewable energy equipment.
WHOIS for raidforums.as
Domain: raidforums.as
Registered On: 2026-07-26 20:15:40 UTC
Expires On: 2027-07-26 20:15:40 UTC
Updated On: Unknown
Status:
clientTransferProhibited
Name Servers:
ns2.ddos-guard.net
ns1.ddos-guard.net
Registrar: Not Available
IANA ID: 201-gdns
URL: Not Available
Abuse Email: abuse@inwx.com
Abuse Phone: Not Available
Domain: raidforums.as
Registered On: 2026-07-26 20:15:40 UTC
Expires On: 2027-07-26 20:15:40 UTC
Updated On: Unknown
Status:
clientTransferProhibited
Name Servers:
ns2.ddos-guard.net
ns1.ddos-guard.net
Registrar: Not Available
IANA ID: 201-gdns
URL: Not Available
Abuse Email: abuse@inwx.com
Abuse Phone: Not Available
IP Information for 95.216.247.178
ASN: 24940
ISP / Org: HETZNER-AS - Hetzner Online GmbH, DE
Country: FI
Network Range: 95.216.0.0/15
ASN: 24940
ISP / Org: HETZNER-AS - Hetzner Online GmbH, DE
Country: FI
Network Range: 95.216.0.0/15
🔪 Slice For Life - Part 2 🔪
WHOIS for raidforums.as Domain: raidforums.as Registered On: 2026-07-26 20:15:40 UTC Expires On: 2027-07-26 20:15:40 UTC Updated On: Unknown Status: clientTransferProhibited Name Servers: ns2.ddos-guard.net ns1.ddos-guard.net Registrar: Not Available…
95[.]216[.]247[.]178
😭1
🚨🇲🇾 RDP access to Malaysian retail or e-commerce company allegedly offered for sale
A forum actor is advertising access to an unidentified retail or e-commerce company in Malaysia, claiming the organization generates between $25 million and $50 million in revenue and operates a network of approximately 2,500 hosts.
The listing advertises RDP access with domain user privileges and states that Symantec Endpoint is deployed within the environment. The access is priced at 0.01834560 BTC.
This claim is currently unverified.
💥 Get early visibility into underground claims, including unblurred screenshots, before they turn into headlines: http://darkwebinformer.com/pricing
A forum actor is advertising access to an unidentified retail or e-commerce company in Malaysia, claiming the organization generates between $25 million and $50 million in revenue and operates a network of approximately 2,500 hosts.
The listing advertises RDP access with domain user privileges and states that Symantec Endpoint is deployed within the environment. The access is priced at 0.01834560 BTC.
This claim is currently unverified.
💥 Get early visibility into underground claims, including unblurred screenshots, before they turn into headlines: http://darkwebinformer.com/pricing
‼️ SafePay ransomware claims 9 victims
🇺🇸 BNP Distributing - A New York-based distributor supplying wine and specialty beverages to restaurants, hotels, retailers, and wine merchants.
🇩🇪 WEIER - A manufacturers’ representative specializing in plumbing, heating, water treatment, pumping, drainage, and building-services equipment.
🇬🇧 Braywood Church of England First School - A historic primary school founded in 1858 that provides education for children from the early years onward.
🇩🇪 HST Maschinenbau - A mechanical engineering company based in Kressbronn am Bodensee with expertise in specialized industrial and tea-processing machinery.
🇩🇪 Landesmuseum Württemberg - A cultural history museum presenting more than 50,000 years of regional heritage, from prehistoric artifacts to modern collections.
🇩🇪 Haug Bürsten - A family-owned German manufacturer of professional brushes and cleaning equipment with roots dating back to 1836.
🇩🇪 Der Paritätische NRW - A welfare association representing thousands of independent social-service organizations across North Rhine-Westphalia.
🇩🇪 Möbel Mayer - A family-owned furniture retailer based in Ahrensburg that has served customers since 1952.
🇩🇪 ZINORM - A German provider of technical standards, industry regulations, and standards-management information for businesses.
💥 Get early visibility into underground claims, including unblurred screenshots, before they turn into headlines: http://darkwebinformer.com/pricing
🇺🇸 BNP Distributing - A New York-based distributor supplying wine and specialty beverages to restaurants, hotels, retailers, and wine merchants.
🇩🇪 WEIER - A manufacturers’ representative specializing in plumbing, heating, water treatment, pumping, drainage, and building-services equipment.
🇬🇧 Braywood Church of England First School - A historic primary school founded in 1858 that provides education for children from the early years onward.
🇩🇪 HST Maschinenbau - A mechanical engineering company based in Kressbronn am Bodensee with expertise in specialized industrial and tea-processing machinery.
🇩🇪 Landesmuseum Württemberg - A cultural history museum presenting more than 50,000 years of regional heritage, from prehistoric artifacts to modern collections.
🇩🇪 Haug Bürsten - A family-owned German manufacturer of professional brushes and cleaning equipment with roots dating back to 1836.
🇩🇪 Der Paritätische NRW - A welfare association representing thousands of independent social-service organizations across North Rhine-Westphalia.
🇩🇪 Möbel Mayer - A family-owned furniture retailer based in Ahrensburg that has served customers since 1952.
🇩🇪 ZINORM - A German provider of technical standards, industry regulations, and standards-management information for businesses.
💥 Get early visibility into underground claims, including unblurred screenshots, before they turn into headlines: http://darkwebinformer.com/pricing