π¨π°π· Full administrative access to thousands of NVR devices advertised for sale on a cybercrime forum
β
A forum seller is advertising access to network video recorder (NVR) devices from multiple vendors, with the majority of the systems described as South Korean.
β
The listing claims:
β
β’ Access to 2,980 of 3,943 tested NVR devices
β’ Claimed success rate of 75.6%
β’ Account credentials
β’ Root-level access
β’ Devices from multiple vendors
β’ Approximately 130,000 dedicated public IP addresses referenced in the listing
β
The access is being offered for $120,000, with interested buyers directed to contact the seller privately through Telegram.
β
The claims and the authenticity, availability and scope of the advertised NVR access have not been independently verified.
β
π₯ No delays. No guessing. No redactions. Get the intel threat actors see, the moment they post it. darkwebinformer.com/pricing
β
A forum seller is advertising access to network video recorder (NVR) devices from multiple vendors, with the majority of the systems described as South Korean.
β
The listing claims:
β
β’ Access to 2,980 of 3,943 tested NVR devices
β’ Claimed success rate of 75.6%
β’ Account credentials
β’ Root-level access
β’ Devices from multiple vendors
β’ Approximately 130,000 dedicated public IP addresses referenced in the listing
β
The access is being offered for $120,000, with interested buyers directed to contact the seller privately through Telegram.
β
The claims and the authenticity, availability and scope of the advertised NVR access have not been independently verified.
β
π₯ No delays. No guessing. No redactions. Get the intel threat actors see, the moment they post it. darkwebinformer.com/pricing
Alleged Grand Theft Auto 6 video has leaked.
https://x.com/DarkWebInformer/status/2089780551934693534
https://x.com/DarkWebInformer/status/2089780551934693534
X (formerly Twitter)
Dark Web Informer (@DarkWebInformer) on X
Alleged Grand Theft Auto 6 video has leaked.
1π₯4
πͺ Slice For Life - Part 2 πͺ
Alleged Grand Theft Auto 6 video has leaked. https://x.com/DarkWebInformer/status/2089780551934693534
The about page from the CyberLeek website. Hope you have good OpSec bro. Rockstar Games doesn't fuck around.π
π₯1
πͺ Slice For Life - Part 2 πͺ
The about page from the CyberLeek website. Hope you have good OpSec bro. Rockstar Games doesn't fuck around.π
The CyberLeek site leads to this IP: 49[.]13[.]45[.]141. Which provides this information when you go to the IP...
{"wallet":"34LYvMptiDvBP5sqfh1oAd6Q4qFsy4PWaZ1HTFmML7h5","programIds":{"core":"73YoECm6NKXpVRoe5f1Q9BcP5DJGPFUjnFy6AxBE5Nvh","gar":"89fNiiwgpFSPHKuqfNUkgYTYjtAJAhyqHjXmgXeppGpf","arns":"2yCUx5edFvUrkibYaUa2ZXWyx9kuJkS8CwyzsgHPWdZZ","ant":"2MWexMHfMhGJwMHv9Qm9YAVCqjUFUJwDJAysW4oCUGk5"},"ans104UnbundleFilter":{"never":true},"ans104IndexFilter":{"never":true},"supportedManifestVersions":["0.1.0","0.2.0"],"release":"83-pre","services":{"bundlers":[{"url":"https://turbo.ardrive.io/"}]},"rateLimiter":{"enabled":true,"dataEgress":{"buckets":{"resource":{"capacity":100000000,"refillRate":5000,"capacityBytes":102400000000,"refillRateBytesPerSec":5120000},"ip":{"capacity":5000000,"refillRate":512,"capacityBytes":5120000000,"refillRateBytesPerSec":524288}}}},"x402":{"enabled":true,"network":"base","walletAddress":"0xC456C09F702f74E306f5feA96863bd7A1788c63D","facilitatorUrl":"https://facilitator.x402.rs","dataEgress":{"pricing":{"perBytePrice":"0.0000000001","minPrice":"0.001000","maxPrice":"1.000000","currency":"USDC","exampleCosts":{"1KB":0.001,"1MB":0.001,"1GB":0.107374}},"rateLimiterCapacityMultiplier":10}},"httpsig":{"algorithm":"ed25519","solanaAddress":"34LYvMptiDvBP5sqfh1oAd6Q4qFsy4PWaZ1HTFmML7h5"}}
{"wallet":"34LYvMptiDvBP5sqfh1oAd6Q4qFsy4PWaZ1HTFmML7h5","programIds":{"core":"73YoECm6NKXpVRoe5f1Q9BcP5DJGPFUjnFy6AxBE5Nvh","gar":"89fNiiwgpFSPHKuqfNUkgYTYjtAJAhyqHjXmgXeppGpf","arns":"2yCUx5edFvUrkibYaUa2ZXWyx9kuJkS8CwyzsgHPWdZZ","ant":"2MWexMHfMhGJwMHv9Qm9YAVCqjUFUJwDJAysW4oCUGk5"},"ans104UnbundleFilter":{"never":true},"ans104IndexFilter":{"never":true},"supportedManifestVersions":["0.1.0","0.2.0"],"release":"83-pre","services":{"bundlers":[{"url":"https://turbo.ardrive.io/"}]},"rateLimiter":{"enabled":true,"dataEgress":{"buckets":{"resource":{"capacity":100000000,"refillRate":5000,"capacityBytes":102400000000,"refillRateBytesPerSec":5120000},"ip":{"capacity":5000000,"refillRate":512,"capacityBytes":5120000000,"refillRateBytesPerSec":524288}}}},"x402":{"enabled":true,"network":"base","walletAddress":"0xC456C09F702f74E306f5feA96863bd7A1788c63D","facilitatorUrl":"https://facilitator.x402.rs","dataEgress":{"pricing":{"perBytePrice":"0.0000000001","minPrice":"0.001000","maxPrice":"1.000000","currency":"USDC","exampleCosts":{"1KB":0.001,"1MB":0.001,"1GB":0.107374}},"rateLimiterCapacityMultiplier":10}},"httpsig":{"algorithm":"ed25519","solanaAddress":"34LYvMptiDvBP5sqfh1oAd6Q4qFsy4PWaZ1HTFmML7h5"}}
π3π2
For companies looking to purchase API access to Dark Web Informer:
I will NEVER provide my personal information, identification, home address, proof of residence, personal banking documents, or any other information that would identify me to satisfy your invoicing or accounting requirements.
There are no exceptions. NONE!
If your company cannot process a purchase without obtaining my private information, then you simply cannot purchase the service and this has always been stated on the API Details page.
My privacy is NOT negotiable.
I will NEVER provide my personal information, identification, home address, proof of residence, personal banking documents, or any other information that would identify me to satisfy your invoicing or accounting requirements.
There are no exceptions. NONE!
If your company cannot process a purchase without obtaining my private information, then you simply cannot purchase the service and this has always been stated on the API Details page.
My privacy is NOT negotiable.
β€4
π¨π²πΎπ¬π§ Access to Malaysian investment holding and UK telecommunications companies advertised for sale on a cybercrime forum
β
A forum seller is advertising two separate corporate access listings, one targeting a Malaysian investment holding company and another involving VPN access to a UK telecommunications company.
β
The Malaysian listing claims:
β
β’ Verified credentials
β’ Company revenue exceeding $10 billion
β’ Asking price of $500
β’ Escrow-only transaction
β
The UK telecommunications listing claims:
β
β’ VPN access
β’ Verified credentials
β’ Company revenue exceeding $20 billion
β’ Asking price of $1,000
β’ Escrow-only transaction
β
The claims and the authenticity, availability and scope of the advertised corporate access have not been independently verified.
β
π₯ No delays. No guessing. No redactions. Get the intel threat actors see, the moment they post it. darkwebinformer.com/pricing
β
A forum seller is advertising two separate corporate access listings, one targeting a Malaysian investment holding company and another involving VPN access to a UK telecommunications company.
β
The Malaysian listing claims:
β
β’ Verified credentials
β’ Company revenue exceeding $10 billion
β’ Asking price of $500
β’ Escrow-only transaction
β
The UK telecommunications listing claims:
β
β’ VPN access
β’ Verified credentials
β’ Company revenue exceeding $20 billion
β’ Asking price of $1,000
β’ Escrow-only transaction
β
The claims and the authenticity, availability and scope of the advertised corporate access have not been independently verified.
β
π₯ No delays. No guessing. No redactions. Get the intel threat actors see, the moment they post it. darkwebinformer.com/pricing
π¨ Never assume that "checking a box" will remove your image's metadata for you on upload.
Use something like ExifCleaner: https://github.com/szTheory/exifcleaner.
Windows, Mac, and Linux versions available.
Use something like ExifCleaner: https://github.com/szTheory/exifcleaner.
Windows, Mac, and Linux versions available.
β€3
Prolific Chinese Money Launderer Sentenced to 15 Years in Prison for Laundering Drug Trafficking Proceeds Following Homeland Security Task Force Investigation
Image via DoJ
https://www.justice.gov/opa/pr/prolific-chinese-money-launderer-sentenced-15-years-prison-laundering-drug-trafficking
Image via DoJ
https://www.justice.gov/opa/pr/prolific-chinese-money-launderer-sentenced-15-years-prison-laundering-drug-trafficking
Media is too big
VIEW IN TELEGRAM
The Hunt for Lux: The Internetβs Most Disturbed User
The Following Video Contains Content That Some Viewers May Find Disturbing or Unsettling.
In the early 2010s, law enforcement agencies around the world began a manhunt for a deeply disturbed internet user known only as "Lux."
Tracking him down would prove incredibly difficult. But the FBI and other agencies were determined to find him. Lux had rapidly become one of the most notorious and despised figures on the dark web, operating sites that hosted some of the most disturbing content imaginable.
For years, he remained hidden behind the anonymity of the internet while investigators worked to uncover the person behind the name.
This is the story of Lux, the worldwide hunt to identify him, and what happened next.
Video Credit: youtube.com/@Cryton
The Following Video Contains Content That Some Viewers May Find Disturbing or Unsettling.
In the early 2010s, law enforcement agencies around the world began a manhunt for a deeply disturbed internet user known only as "Lux."
Tracking him down would prove incredibly difficult. But the FBI and other agencies were determined to find him. Lux had rapidly become one of the most notorious and despised figures on the dark web, operating sites that hosted some of the most disturbing content imaginable.
For years, he remained hidden behind the anonymity of the internet while investigators worked to uncover the person behind the name.
This is the story of Lux, the worldwide hunt to identify him, and what happened next.
Video Credit: youtube.com/@Cryton
π1
βΌοΈ An updated Joint Cybersecurity Advisory on Medusa ransomware was provided by the FBI, CISA, and HHS.
PDF: https://www.ic3.gov/CSA/2026/260818.pdf
PDF: https://www.ic3.gov/CSA/2026/260818.pdf
π¨π¨π· Costa Rica's Supreme Electoral Tribunal allegedly breached, 3.75M records claimed leaked on a cybercrime forum
β
A forum user claims to have breached the Supreme Electoral Tribunal of Costa Rica (Tribunal Supremo de Elecciones) and obtained 3,751,244 records containing information tied to individuals across the country.
β
The exposed data shown in the sample includes:
β
β’ Full names
β’ Document and identification numbers
β’ Locality information
β’ Date-related fields
β’ Paternal surnames
β’ Maternal surnames
β’ Internal record identifiers
β
The listing also claims the leak contains a file that can associate an identification number with the location of an individual.
β
A 250,000-row proof of concept has been released, while the complete database is described as approximately 365 MB in DB format.
β
The claims and the authenticity, source and scope of the allegedly exposed data have not been independently verified.
β
π₯ No delays. No guessing. No redactions. Get the intel threat actors see, the moment they post it. darkwebinformer.com/pricing
β
A forum user claims to have breached the Supreme Electoral Tribunal of Costa Rica (Tribunal Supremo de Elecciones) and obtained 3,751,244 records containing information tied to individuals across the country.
β
The exposed data shown in the sample includes:
β
β’ Full names
β’ Document and identification numbers
β’ Locality information
β’ Date-related fields
β’ Paternal surnames
β’ Maternal surnames
β’ Internal record identifiers
β
The listing also claims the leak contains a file that can associate an identification number with the location of an individual.
β
A 250,000-row proof of concept has been released, while the complete database is described as approximately 365 MB in DB format.
β
The claims and the authenticity, source and scope of the allegedly exposed data have not been independently verified.
β
π₯ No delays. No guessing. No redactions. Get the intel threat actors see, the moment they post it. darkwebinformer.com/pricing
Some fun things I've been called since I started DWI... and all of them are completely WRONG.
- Ransomware operator
- Ransomware negotiator
- Cybercriminal
- Darknet Market admin
- Illicit vendor
- Part of The Impact Team
- Forum operator
- Twitch streamer (literally)
- Initial access broker
- Threat actor
- Fed
- Informant
- LE
- Ransomware operator
- Ransomware negotiator
- Cybercriminal
- Darknet Market admin
- Illicit vendor
- Part of The Impact Team
- Forum operator
- Twitch streamer (literally)
- Initial access broker
- Threat actor
- Fed
- Informant
- LE
β€4π2π2π1
π¨π²π½ CONALEP Morelos student database allegedly leaked on a cybercrime forum, 24K+ records claimed
β
A forum user claims to have released the complete database of CONALEP Morelos, saying the new leak contains a larger volume of information than a previously shared dataset. The listing claims more than 24,000 records containing personal and student-related data.
β
The advertised data includes:
β
β’ Full names
β’ Email addresses
β’ Phone numbers
β’ ZIP codes
β’ CURP identifiers
β’ RFC identifiers
β’ NSS numbers
β’ Student registration information
β’ Campus and program information
β’ Address-related data
β’ Date of birth and other demographic fields
β
The claims and the authenticity, source and scope of the allegedly exposed data have not been independently verified.
β
π₯ No delays. No guessing. No redactions. Get the intel threat actors see, the moment they post it. darkwebinformer.com/pricing
β
A forum user claims to have released the complete database of CONALEP Morelos, saying the new leak contains a larger volume of information than a previously shared dataset. The listing claims more than 24,000 records containing personal and student-related data.
β
The advertised data includes:
β
β’ Full names
β’ Email addresses
β’ Phone numbers
β’ ZIP codes
β’ CURP identifiers
β’ RFC identifiers
β’ NSS numbers
β’ Student registration information
β’ Campus and program information
β’ Address-related data
β’ Date of birth and other demographic fields
β
The claims and the authenticity, source and scope of the allegedly exposed data have not been independently verified.
β
π₯ No delays. No guessing. No redactions. Get the intel threat actors see, the moment they post it. darkwebinformer.com/pricing
π¨πΏπΌ Hamara allegedly breached, data tied to 11K+ users advertised on a cybercrime forum
β
A forum user claims to have breached Hamara, a Zimbabwe-based agriculture and farming platform, after allegedly obtaining exposed credentials and accessing an administrative account that lacked two-factor authentication.
β
The listing claims the compromised environment contains:
β
β’ User account data
β’ Names and usernames
β’ Email addresses
β’ Phone numbers
β’ Account roles and verification status
β’ Business information
β’ Business contracts
β’ Business PDF documents
β’ Audit logs
β’ Institution records
β’ Service data
β’ Event data
β’ Marketplace and unit information
β’ Administrator and manager data
β
The account reportedly had access to information associated with more than 11,000 users at the time of the alleged breach. Sample records containing customer names, usernames, emails, phone numbers and account roles were published in the thread.
β
The claims and the authenticity, source and scope of the allegedly exposed data have not been independently verified.
β
π₯ No delays. No guessing. No redactions. Get the intel threat actors see, the moment they post it. darkwebinformer.com/pricing
β
A forum user claims to have breached Hamara, a Zimbabwe-based agriculture and farming platform, after allegedly obtaining exposed credentials and accessing an administrative account that lacked two-factor authentication.
β
The listing claims the compromised environment contains:
β
β’ User account data
β’ Names and usernames
β’ Email addresses
β’ Phone numbers
β’ Account roles and verification status
β’ Business information
β’ Business contracts
β’ Business PDF documents
β’ Audit logs
β’ Institution records
β’ Service data
β’ Event data
β’ Marketplace and unit information
β’ Administrator and manager data
β
The account reportedly had access to information associated with more than 11,000 users at the time of the alleged breach. Sample records containing customer names, usernames, emails, phone numbers and account roles were published in the thread.
β
The claims and the authenticity, source and scope of the allegedly exposed data have not been independently verified.
β
π₯ No delays. No guessing. No redactions. Get the intel threat actors see, the moment they post it. darkwebinformer.com/pricing
πͺ Slice For Life - Part 2 πͺ
Every comment in this post is 100% wrong and fucking stupid.
I love the newer comments about the gold checkmark. X doesn't require KYC for business verification. At the time I did it over a year ago it only required domain and website verification. But but you paid with something... yup and there is ways around not using my name. Some of you really are horny.
Edit: email domain*
Edit: email domain*
π1
π¨π¨π¦ Permis Plus Sherbrooke database allegedly leaked on a cybercrime forum, 1,292 records claimed
β
A forum user claims to have released a previously unpublished dataset allegedly belonging to Γcole de conduite Permis Plus Sherbrooke, part of the Permis Plus driving-school network in Quebec. (Γcole de conduite Permis Plus inc.)
β
The alleged leak contains 1,292 records, with the exposed fields including:
β
β’ User IDs
β’ Email addresses
β’ Usernames
β’ First and last names
β’ Account status information
β’ Deleted-account indicators
β’ User roles and permission classifications
β’ School owner accounts
β’ School administrator accounts
β’ Student/customer accounts
β
The claims and the authenticity, source and scope of the allegedly exposed data have not been independently verified.
β
π₯ No delays. No guessing. No redactions. Get the intel threat actors see, the moment they post it. darkwebinformer.com/pricing
β
A forum user claims to have released a previously unpublished dataset allegedly belonging to Γcole de conduite Permis Plus Sherbrooke, part of the Permis Plus driving-school network in Quebec. (Γcole de conduite Permis Plus inc.)
β
The alleged leak contains 1,292 records, with the exposed fields including:
β
β’ User IDs
β’ Email addresses
β’ Usernames
β’ First and last names
β’ Account status information
β’ Deleted-account indicators
β’ User roles and permission classifications
β’ School owner accounts
β’ School administrator accounts
β’ Student/customer accounts
β
The claims and the authenticity, source and scope of the allegedly exposed data have not been independently verified.
β
π₯ No delays. No guessing. No redactions. Get the intel threat actors see, the moment they post it. darkwebinformer.com/pricing
π₯1