🚨🇧🇷 Claro Brasil allegedly breached, 46M+ phone numbers linked to CPF claimed
⠀
Claro Brasil, one of Brazil’s largest telecommunications providers, is named in a cybercrime forum post where a threat actor claims to have compromised an exposed API and extracted 46,033,380 telephone numbers linked to Brazilian CPF identifiers.
⠀
Claimed exposure
⠀
• 46,033,380 phone numbers
• CPF identifiers linked to telephone numbers
• Historical records reportedly dating from 2004 to early 2026
• Approximately 2 million records released as proof of concept
• 6.1 GB dataset
• Database provided in .DB format
⠀
The actor claims Claro has approximately 90.8 million existing phone numbers in Brazil, but says only slightly more than half could be extracted before the activity was detected.
⠀
The actor also claims the 2 million-record proof of concept contains phone numbers linked to CPF data, with some records dating through 2019.
⠀
The breach claim, exposed data and scope have not been independently verified.
⠀
💥 No delays. No guessing. No redactions. Get the intel threat actors see, the moment they post it. darkwebinformer.com/pricing

🚨🇦🇷 Hospital Alemán and OSDEPYM allegedly breached, sensitive medical and customer data leaked
⠀
Hospital Alemán and OSDEPYM, two Argentine healthcare organizations, are named in a cybercrime forum post where a threat actor claims negotiations failed and data belonging to both organizations is now being released.
⠀
Hospital Alemán claimed exposure
⠀
• Approximately 84,000 prescription records
• Patient names and dates of birth
• DNI identification numbers
• Medical coverage information
• Diagnoses and treatment details
• Prescription and medication information
• Physician and electronic prescription data
⠀
The actor published a sample containing highly sensitive medical information and claims the prescription data was converted into CSV format for release.
⠀
OSDEPYM claimed exposure
⠀
• Approximately 7,000 customer records
• Names and dates of birth
• DNI and affiliate identifiers
• Email addresses and phone numbers
• Residential addresses
• Health plan and coverage information
• Account and registration-related data
⠀
Samples of the allegedly exposed OSDEPYM customer data were also published in the forum post.
⠀
The breach claims, exposed data and scope have not been independently verified.
⠀
💥 No delays. No guessing. No redactions. Get the intel threat actors see, the moment they post it. darkwebinformer.com/pricing

🚨🇧🇷 Municipality of Rincão allegedly compromised, administrative access claimed
⠀
Prefeitura Municipal de Rincão, the municipal government of Rincão in São Paulo, Brazil, is named in a cybercrime forum post where a threat actor claims to have compromised multiple administrative accounts and gained access to internal government systems.
⠀
Claimed access
⠀
• Government administrative accounts
• Full administrator access
• Municipal CRM access
• User management capabilities
• Government email accounts
• Confidential documents
• Access to a Strapi administrative dashboard
⠀
The actor claims they were able to identify and disable website categories and render portions of the municipal website inoperable.
⠀
Screenshots published in the forum post appear to show access to a Strapi administration panel containing municipal user accounts, email addresses, roles and account status information.
⠀
The access claim, exposed data and scope have not been independently verified.
⠀
💥 No delays. No guessing. No redactions. Get the intel threat actors see, the moment they post it. darkwebinformer.com/pricing

⚠️ Dark Matter has provided an update to it's downtime. Stay vigilant.

Thread: https://dreadytofatroptsdj6io7l3xptbet6onoyno2yv7jicoxknyazubrad[.]onion/post/3a4526d61445e3539680

There is also now a mega thread to keep everything in one place.

Thread: https://dreadytofatroptsdj6io7l3xptbet6onoyno2yv7jicoxknyazubrad[.]onion/post/62c85b0b9ee1a3030427

🚨 ExEngine AV/EDR killer advertised on a cybercrime forum, Ring-3 rootkit and UAC bypass claimed
⠀
ExEngine, a malware tool advertised as an AV/EDR killer for Windows systems, is being promoted on a cybercrime forum with claims that it can disable mainstream consumer antivirus products and allow additional payloads to execute with reduced interference.
⠀
Advertised capabilities
⠀
• AV/EDR termination
• UAC bypass for privilege escalation
• Ring-3 rootkit functionality
• Process, file and registry hiding
• Network connection concealment
• Discord webhook logging
• Persistence across reboots and logouts
• Anti-VM and anti-debug features
• Support for Windows 10 and 11
• Secondary decoy payload support
⠀
The seller specifically claims compatibility against products including Windows Defender, Malwarebytes, Bitdefender and Avast, while stating support for additional antivirus software.
⠀
ExEngine is advertised at $750 per month or $2,500 per year.
⠀
The functionality, effectiveness and compatibility claims have not been independently verified.
⠀
💥 No delays. No guessing. No redactions. Get the intel threat actors see, the moment they post it. darkwebinformer.com/pricing
________________________________________
Main Channel: https://t.me/SliceForLifeee
Backup Channel: https://t.me/SliceForLifeeee
Telegram CVE Feed: https://t.me/DWI_CVE_Alerts
FBI Watchdog Alerts: https://t.me/FBI_Watchdog
Website: https://darkwebinformer.com
Pricing (Includes Crypto): https://darkwebinformer.com/pricing
API: https://darkwebinformer.com/api-details
Donations: https://darkwebinformer.com/donations
Socials: https://darkwebinformer.com/socials