Threat actor claims exposure of 662 databases, 1,033 API keys, and 33GB of data linked to Stripe.

OGUsers forum threads and posts are now searchable directly through FireIntel XTI.

We’re opening access to FISearch for everyone.

FISearch is authorized using a FireIntel key and provides access to multiple intelligence sources through a single search interface.

• Multi-source intelligence search
• Keyword search
• Advanced metadata filtering
• All search results are limited

Access is currently provided manually. If you’d like access, contact me directly.

https://engine.fireintel.net/

Contact: @meow_hunt

LockBit 5.0 Claims U.S. Bank Compromise

CryptBB forum threads and posts are now searchable through FireIntel XTI.

A threat actor claims to have exfiltrated data from SEGIP Bolivia (Servicio General de Identificación Personal).

Threat actor claims 7.2M Assurance America records were compromised.

Threat actor claims a 49 GB Solidgate-related breach exposing 170 merchant API keys.

Upcoming - XTI Threat Time Machine

Investigate the internet as it existed at any point in time.

Select a target and a date — XTI reconstructs its historical threat state across exposed credentials, underground activity, infrastructure, breaches, identities, malware, and threat-actor relationships.

FISearch Max Tier access

KodexGlobal Database Breach Claim - Threat actor Iucy claims to be selling a KodexGlobal database containing 251K+ user accounts and 1.28M+ request logs.

Status: Unverified — no public confirmation from KodexGlobal at this time.

Multiple credentials linked to commercial and AWS GovCloud Bedrock environments were observed in a private Discord channel.

A threat actor claims to be selling an active Agent-level Kodex account with request intake, notifications, company directory, and reporting access

FireIntel now provides access to 23.7B+ infostealer records.

raidforums.com forum threads and posts are now searchable through XTI.

You can now integrate FireIntel’s white-labeled IntelX endpoint directly into your service or workspace:

https://new.fireintel.net/api-playground

Threat actor claims to be selling access to a U.S. software company, allegedly including GitHub, CI/CD, Snyk keys, and Databricks tokens.

Threat actor claims to have leaked 7.2 GB of internal tagada.io data, allegedly including customer records, transaction metadata, API structures, webhooks, and application logs.

Threat actor claims to be selling an alleged Transfast/Mastercard database containing 11M+ records, including phone numbers, transaction confirmations, and money-transfer details.