βΌοΈ New Dark Web Informer Blog Post!
Title: Waggle Database Allegedly Leaked, 106,800+ Pet Camera Customers Exposed Across Three Tables
Link: https://darkwebinformer.com/waggle-database-allegedly-leaked-106-800-pet-camera-customers-exposed-across-three-tables/
π₯ Get early visibility into underground claims, including unblurred screenshots, before they turn into headlines: https://darkwebinformer.com/pricing
Title: Waggle Database Allegedly Leaked, 106,800+ Pet Camera Customers Exposed Across Three Tables
Link: https://darkwebinformer.com/waggle-database-allegedly-leaked-106-800-pet-camera-customers-exposed-across-three-tables/
π₯ Get early visibility into underground claims, including unblurred screenshots, before they turn into headlines: https://darkwebinformer.com/pricing
Dark Web Informer
Waggle Database Allegedly Leaked, 106,800+ Pet Camera Customers Exposed Across Three Tables
A forum user posting as 2019 has published what they describe as the customer database of Waggle, a US pet technology company whose products include a smart camera offering live video, two-way audio, treat dispensing, and real-time alerts.
βΌοΈ New Dark Web Informer Blog Post!
Title: Vendor Advertises Fraudulently Verified Crypto Exchange Accounts With European Bank Rails
Link: https://darkwebinformer.com/vendor-advertises-fraudulently-verified-crypto-exchange-accounts-with-european-bank-rails/
π₯ Get early visibility into underground claims, including unblurred screenshots, before they turn into headlines: https://darkwebinformer.com/pricing
Title: Vendor Advertises Fraudulently Verified Crypto Exchange Accounts With European Bank Rails
Link: https://darkwebinformer.com/vendor-advertises-fraudulently-verified-crypto-exchange-accounts-with-european-bank-rails/
π₯ Get early visibility into underground claims, including unblurred screenshots, before they turn into headlines: https://darkwebinformer.com/pricing
Dark Web Informer
Vendor Advertises Fraudulently Verified Crypto Exchange Accounts With European Bank Rails
A seller posting as RasselKyc is advertising made-to-order cryptocurrency exchange accounts registered under names supplied by the buyer.
βΌοΈ New Dark Web Informer Blog Post!
Title: Ramp4u Cybercrime Forum Allegedly Breached, 340,000 IP Logs and Private Messages Published
Link: https://darkwebinformer.com/ramp4u-cybercrime-forum-allegedly-breached-340-000-ip-logs-and-private-messages-published/
π₯ Get early visibility into underground claims, including unblurred screenshots, before they turn into headlines: https://darkwebinformer.com/pricing
Title: Ramp4u Cybercrime Forum Allegedly Breached, 340,000 IP Logs and Private Messages Published
Link: https://darkwebinformer.com/ramp4u-cybercrime-forum-allegedly-breached-340-000-ip-logs-and-private-messages-published/
π₯ Get early visibility into underground claims, including unblurred screenshots, before they turn into headlines: https://darkwebinformer.com/pricing
Dark Web Informer
Ramp4u Cybercrime Forum Allegedly Breached, 340,000 IP Logs and Private Messages Published
A forum user posting as kitta has published what they describe as the database of Ramp4u, a Russian-language cybercrime and dark web forum.
βΌοΈ New Dark Web Informer Blog Post!
Title: Branch Furniture Customer Database Allegedly for Sale, 480,276 Records Listed at $200
Link: https://darkwebinformer.com/branch-furniture-customer-database-allegedly-for-sale-480-276-records-listed-at-200/
π₯ Get early visibility into underground claims, including unblurred screenshots, before they turn into headlines: https://darkwebinformer.com/pricing
Title: Branch Furniture Customer Database Allegedly for Sale, 480,276 Records Listed at $200
Link: https://darkwebinformer.com/branch-furniture-customer-database-allegedly-for-sale-480-276-records-listed-at-200/
π₯ Get early visibility into underground claims, including unblurred screenshots, before they turn into headlines: https://darkwebinformer.com/pricing
Dark Web Informer
Branch Furniture Customer Database Allegedly for Sale, 480,276 Records Listed at $200
A seller posting as dreamss is advertising what they describe as the customer database of Branch Furniture, a US direct-to-consumer office furniture company selling to home offices, startups, and businesses.
π¨13,323 Coldcard-linked wallets allegedly swept in mass drain operation
β
A forum actor claims to have conducted an August 2026 cryptocurrency draining operation targeting wallets described as associated with Coldcard Q1 MK4 devices.
β
The published operation log allegedly contains:
β
β’ 8,716 recovered seed phrases
β’ 13,323 Bitcoin addresses
β’ Approximately 1.5 BTC reportedly drained
β’ 1,092.91 BTC in historical incoming transactions
β’ 64,720 recorded transactions
β’ 11,432 addresses previously holding funds
β’ Mnemonic phrases and private keys for wallets now showing zero balances
β
The actor published the alleged output as a full dataset and included several samples, along with a ranking of addresses by historical Bitcoin received.
β
The seller says the tool still requires improvements to UTXO selection and fee estimation and claims additional runs are planned. The post does not explain how the seed material was obtained or establish that Coldcard hardware or firmware was compromised.
β
This claim is currently unverified.
β
π₯ No delays. No guessing. No redactions. Get the intel threat actors see, the moment they post it. darkwebinformer.com/pricing
β
A forum actor claims to have conducted an August 2026 cryptocurrency draining operation targeting wallets described as associated with Coldcard Q1 MK4 devices.
β
The published operation log allegedly contains:
β
β’ 8,716 recovered seed phrases
β’ 13,323 Bitcoin addresses
β’ Approximately 1.5 BTC reportedly drained
β’ 1,092.91 BTC in historical incoming transactions
β’ 64,720 recorded transactions
β’ 11,432 addresses previously holding funds
β’ Mnemonic phrases and private keys for wallets now showing zero balances
β
The actor published the alleged output as a full dataset and included several samples, along with a ranking of addresses by historical Bitcoin received.
β
The seller says the tool still requires improvements to UTXO selection and fee estimation and claims additional runs are planned. The post does not explain how the seed material was obtained or establish that Coldcard hardware or firmware was compromised.
β
This claim is currently unverified.
β
π₯ No delays. No guessing. No redactions. Get the intel threat actors see, the moment they post it. darkwebinformer.com/pricing
Media is too big
VIEW IN TELEGRAM
β€5π1
Server crashed, restarting. Give me a little bit. No alerts are missed and once it is backup it will catch everything.
πͺ Slice For Life - Part 2 πͺ
Server crashed, restarting. Give me a little bit. No alerts are missed and once it is backup it will catch everything.
Issue is resolved. Give it a couple cycles (couple of hours) for the claims to catch up.
βΌοΈ New Ransomware Group: Panzer
http://pnzruro7syvwvefx5mpo2fhzi4jftgquynsqf3vy5x3no57yp2iz4nyd[.]onion
Panzer ransomware operation launches affiliate recruitment program
β
The Panzer ransomware operation is recruiting penetration testers and other affiliates, offering access to a management platform, multi-platform lockers and an 80/20 revenue-sharing model.
β
Advertised affiliate features include:
β
β’ Individual dashboards with unique access links
β’ Earnings, balances, active builds, tickets and team activity tracking
β’ Cryptocurrency deposits, withdrawals and transaction histories
β’ Lockers supporting Windows, Linux, ESXi and FreeBSD
β’ More than 15 customizable commands and claimed anti-detection features
β’ Real-time monitoring and configurable panels deployed with each build
β’ Automatically generated onion-based victim negotiation chats
β’ File attachments, searchable histories and real-time messaging
β’ Bitcoin invoice generation directly inside victim chats
β’ Automatic crediting of confirmed payments to affiliate balances
β’ Team accounts with configurable permissions
β’ Support tickets, platform announcements and operational rules
β
The operation also provides a leak-site publishing system where affiliates can submit victim names, stolen-data samples, download links and descriptions for approval. Higher-profile attacks may reportedly receive additional promotion to increase pressure on victims.
β
Panzer advertises an 80% share for affiliates and 20% for the operators, automatically deducted from each payment.
β
Recruitment rules reportedly prohibit:
β
β’ Targeting organizations in CIS countries
β’ Targeting companies involved in abuse of children or minors
β’ Violating the operationβs internal rules
β’ Remaining inactive for more than one week after joining
β
Applications are handled through the operationβs Tox support channel.
β
This claim is currently unverified.
β
π₯ No delays. No guessing. No redactions. Get the intel threat actors see, the moment they post it. darkwebinformer.com/pricing
http://pnzruro7syvwvefx5mpo2fhzi4jftgquynsqf3vy5x3no57yp2iz4nyd[.]onion
Panzer ransomware operation launches affiliate recruitment program
β
The Panzer ransomware operation is recruiting penetration testers and other affiliates, offering access to a management platform, multi-platform lockers and an 80/20 revenue-sharing model.
β
Advertised affiliate features include:
β
β’ Individual dashboards with unique access links
β’ Earnings, balances, active builds, tickets and team activity tracking
β’ Cryptocurrency deposits, withdrawals and transaction histories
β’ Lockers supporting Windows, Linux, ESXi and FreeBSD
β’ More than 15 customizable commands and claimed anti-detection features
β’ Real-time monitoring and configurable panels deployed with each build
β’ Automatically generated onion-based victim negotiation chats
β’ File attachments, searchable histories and real-time messaging
β’ Bitcoin invoice generation directly inside victim chats
β’ Automatic crediting of confirmed payments to affiliate balances
β’ Team accounts with configurable permissions
β’ Support tickets, platform announcements and operational rules
β
The operation also provides a leak-site publishing system where affiliates can submit victim names, stolen-data samples, download links and descriptions for approval. Higher-profile attacks may reportedly receive additional promotion to increase pressure on victims.
β
Panzer advertises an 80% share for affiliates and 20% for the operators, automatically deducted from each payment.
β
Recruitment rules reportedly prohibit:
β
β’ Targeting organizations in CIS countries
β’ Targeting companies involved in abuse of children or minors
β’ Violating the operationβs internal rules
β’ Remaining inactive for more than one week after joining
β
Applications are handled through the operationβs Tox support channel.
β
This claim is currently unverified.
β
π₯ No delays. No guessing. No redactions. Get the intel threat actors see, the moment they post it. darkwebinformer.com/pricing
β€2
βΌοΈ New Dark Web Informer Blog Post!
Title: Qara Platform Allegedly Exposed, Actor Claims Live Write Access to App Deployment for Saint-Gobain, Lidl and SPAR
Link: https://darkwebinformer.com/qara-platform-allegedly-exposed-actor-claims-live-write-access-to-app-deployment-for-saint-gobain-lidl-and-spar/
π₯ Get early visibility into underground claims, including unblurred screenshots, before they turn into headlines: https://darkwebinformer.com/pricing
Title: Qara Platform Allegedly Exposed, Actor Claims Live Write Access to App Deployment for Saint-Gobain, Lidl and SPAR
Link: https://darkwebinformer.com/qara-platform-allegedly-exposed-actor-claims-live-write-access-to-app-deployment-for-saint-gobain-lidl-and-spar/
π₯ Get early visibility into underground claims, including unblurred screenshots, before they turn into headlines: https://darkwebinformer.com/pricing
Dark Web Informer
Qara Platform Allegedly Exposed, Actor Claims Live Write Access to App Deployment for Saint-Gobain, Lidl and SPAR
An actor posting as exfilar claims that Qara, an Egyptian supply-chain SaaS platform handling QR anti-counterfeit, feature flags, and mobile app deployment for 14+ enterprise tenants, left its backend databases publicly readable and writable with no authentication.
βΌοΈ New Dark Web Informer Blog Post!
Title: Twelve Databases Leaked in Single Dump, 14,453 Customer Records From WordPress Sites Exposed
Link: https://darkwebinformer.com/twelve-databases-leaked-in-single-dump-14-453-customer-records-from-wordpress-sites-exposed/
π₯ Get early visibility into underground claims, including unblurred screenshots, before they turn into headlines: https://darkwebinformer.com/pricing
Title: Twelve Databases Leaked in Single Dump, 14,453 Customer Records From WordPress Sites Exposed
Link: https://darkwebinformer.com/twelve-databases-leaked-in-single-dump-14-453-customer-records-from-wordpress-sites-exposed/
π₯ Get early visibility into underground claims, including unblurred screenshots, before they turn into headlines: https://darkwebinformer.com/pricing
Dark Web Informer
Twelve Databases Leaked in Single Dump, 14,453 Customer Records From WordPress Sites Exposed
A forum user posting as NightBroker has published 12 databases in a single release, claiming the sites were located through search engine reconnaissance and required minimal effort to access.
π¨π©πΏπ¬π§πͺπ¨ VPN credentials for three organizations allegedly offered for sale
β
A forum actor is advertising access to three organizations across Algeria, the United Kingdom and Ecuador. The seller claims the credentials have been verified and requires transactions to use escrow.
β
The listings include:
β
β’ π©πΏ Algeria Ministry of Commerce VPN access: $500
β’ π¬π§ UK cloud-based provider web VPN access: $200
β’ πͺπ¨ Ecuador national university access: $200
β
The UK provider is described as generating more than $8 million in revenue. No revenue figures or further access details were provided for the Algerian ministry or Ecuadorian university.
β
These claims are currently unverified.
β
π₯ Get early visibility into underground claims, including unblurred screenshots, before they turn into headlines: http://darkwebinformer.com/pricing
β
A forum actor is advertising access to three organizations across Algeria, the United Kingdom and Ecuador. The seller claims the credentials have been verified and requires transactions to use escrow.
β
The listings include:
β
β’ π©πΏ Algeria Ministry of Commerce VPN access: $500
β’ π¬π§ UK cloud-based provider web VPN access: $200
β’ πͺπ¨ Ecuador national university access: $200
β
The UK provider is described as generating more than $8 million in revenue. No revenue figures or further access details were provided for the Algerian ministry or Ecuadorian university.
β
These claims are currently unverified.
β
π₯ Get early visibility into underground claims, including unblurred screenshots, before they turn into headlines: http://darkwebinformer.com/pricing
βΌοΈ New Dark Web Informer Blog Post!
Title: BudBoard Storage Bucket Allegedly Left Public, Exposing 18 Dispensaries and a Production POS Integration Key
Link: https://darkwebinformer.com/budboard-storage-bucket-allegedly-left-public-exposing-18-dispensaries-and-a-production-pos-integration-key/
π₯ Get early visibility into underground claims, including unblurred screenshots, before they turn into headlines: https://darkwebinformer.com/pricing
Title: BudBoard Storage Bucket Allegedly Left Public, Exposing 18 Dispensaries and a Production POS Integration Key
Link: https://darkwebinformer.com/budboard-storage-bucket-allegedly-left-public-exposing-18-dispensaries-and-a-production-pos-integration-key/
π₯ Get early visibility into underground claims, including unblurred screenshots, before they turn into headlines: https://darkwebinformer.com/pricing
Dark Web Informer
BudBoard Storage Bucket Allegedly Left Public, Exposing 18 Dispensaries and a Production POS Integration Key
An actor posting as exfilar claims that BudBoard, a US cannabis digital signage platform providing dispensary screen management and point-of-sale integration, left its cloud storage bucket publicly readable with no authentication.