Another Victim of Ransomware BLACKNET-00

The Tel-Aviv-Yaffo Municipality in Israel is our latest victim, our team has successfully infiltrated the municipality's systems and stolen official and sensitive documents belonging to citizens and properties in the city, among the stolen documents are property tax invoices for a property at 20 Perlock Moshe st. Tel-Aviv-Yaffo with property number 2000347919 and tax account number 11223366, the invoice shows detailed information about the property with an area of 106 square meters and an additional 6 square meters with a discount for a disabled child, and the amount due is 1,317.10 Israeli Shekels, in addition we have official documents certified by the Supreme Court of Mauritius with the signature of Judge D.C.N.D. Mootoo and translation and certification documents from Notary Seagull Cohen in Tel Aviv including translation of documents from Hebrew to English and certification of copies of original documents, we also obtained an Israeli passport belonging to a person named HAREL ADAM SEKLER with passport number 35448644 and date of birth 23/10/1984 and date of issue 28/11/2021 and date of expiry 28/11/2031 issued in Jerusalem, in addition to completion certificates from SALI 1:1 COMPLETE SPECIALIZED SCHOOL AND INSTITUTE.

These documents enable us to carry out multiple fraudulent operations including identity theft of citizens and using stolen passports to open bank accounts and obtain loans and rental contracts, forging property tax invoices to redirect payments to our accounts, and using official documents certified by courts to create fake companies and obtain travel visas, we can also exploit personal data for blackmail and pressure on victims, we are BLACKNET-00 and we demand a ransom payment in exchange for not publishing this data or using it against you, the decision is yours and the deadline is limited

🔴Another Victim of BLACKNET-00 Ransomware

The Companies and Intellectual Property Commission (CIPC) of South Africa is our latest victim. Our team successfully breached the systems of the authority responsible for company registration and intellectual property protection in South Africa. We obtained sensitive documents relating to thousands of registered companies. These documents include company incorporation records, the names of directors and shareholders, their addresses, contact details, and tax registration numbers, as well as franchise agreements, partnership agreements, intellectual property records, registered trademarks, and patents

🔴Another Victim of BLACKNET-00 Ransomware

Breach Notice Companies and Intellectual Property Commission CIPC

The Companies and Intellectual Property Commission CIPC of South Africa is our latest victim Our team successfully breached the systems of the authority responsible for company registration and intellectual property protection in South Africa

We gained access to the primary databases and obtained sensitive documents relating to thousands of registered companies These documents include company incorporation records the names of directors and shareholders along with their identification details postal and residential addresses tax registration numbers franchise agreements partnership agreements intellectual property records registered trademarks and patents

We also compromised the systems of affiliated organizations connected to the Commission obtaining sensitive documents belonging to companies such as IPUTHA TRADING EADMIN CENTRE JACOBS AANVULLINGS PTY LTD DATAEQ PTY LTD and many others

These documents enable us to carry out numerous fraudulent activities including opening bank accounts and shell companies in the names of registered directors applying for loans in the names of targeted companies using their financial and tax records selling the personal data of directors and shareholders on black markets impersonating directors to sign forged contracts and agreements transferring ownership of registered trademarks and patents to other parties using tax registration numbers to facilitate tax evasion and money laundering applying for visas and travel documents using stolen identities and creating shell companies using the same official records to conduct fraud and other scams

You have one choice either pay the ransom or face the destruction of your reputation while fraudulent operations are carried out in your name

TARGET: 85.236.254.121
RISK LEVEL: LOW (Score: 25/100)
SYSTEM TYPE: VNC Remote Desktop

OPEN SERVICES:
- VNC: 5900
- HTTP: 443

VULNERABILITIES FOUND:
- VNC may have no authentication or weak password

EXPLOITATION METHODS:
- VNC remote access
- Screen capture
- Keyboard control
- Remote desktop takeover
- Web interface attack
- Default credentials

[!] VNC ACCESS GRANTED!
Password:
Port: 5900

Quick Connect: vncviewer 85.236.254.121:5900

Hello to anyone looking to purchase the TRK25 ADVANCED SCADA tool for hacking remote communication systems on industrial servers as well as Linux and Windows servers. The tool generates a complete report about the discovered device and its vulnerabilities and can guess passwords and hack the VNC protocol and remotely control screens and capture instant screenshots and deface HMI interfaces and control SCADA and PLC devices. The tool performs full network scans using CIDR ranges and targets industrial ports such as MODBUS S7 DNP3 OPC VNC RDP and SSH. It conducts professional risk analysis and classifies discovered devices based on risk level CRITICAL HIGH MEDIUM LOW and generates a comprehensive report including discovered vulnerabilities and exploitation methods. The tool supports proxy connections through SOCKS5 SOCKS4 and HTTP to hide identity and bypass restrictions with automatic proxy rotation during scanning.

Tool Features: Full industrial network scanning and VNC hacking using industrial passwords and instant screenshot capture from compromised devices and detection of all open industrial ports. Advanced network tools and vulnerability scanning and multi-protocol proxy support and comprehensive reports in TXT and JSON formats. User-friendly interface and CIDR support and industrial system type identification and development recommendations and data export and progress bar and real-time logging. Fast and deep port scanning and service and banner detection and custom password list support and SCADA and PLC device control and complete statistics and cross-platform support for Windows Linux and macOS.

New Features: Advanced MODBUS attacks on industrial devices and S7 PLC exploitation for full control and PROFIBUS protocol support and OPC protocol support. Simultaneous multi-target scanning and automatic proxy rotation and comprehensive executive reporting and advanced vulnerability analysis and zero-day vulnerability detection. Advanced RDP hacking and SSH brute force attacks and custom HMI defacement with custom images and remote control of compromised devices and precise system version detection and weak password discovery and banner and service analysis.

Price $200 with full source code included. For purchase and contact @blacknetransom

TARGET: 161.97.125.247
RISK LEVEL: MEDIUM (Score: 45/100)
SYSTEM TYPE: VNC Remote Desktop

OPEN SERVICES:
- VNC: 5901
- RDP: 3389
- SSH: 22

VULNERABILITIES FOUND:
- VNC may have no authentication or weak password
- RDP Bluekeep vulnerability (CVE-2019-0708)
- SSH brute force attack possible

EXPLOITATION METHODS:
- VNC remote access
- Screen capture
- Keyboard control
- Remote desktop takeover
- Bluekeep exploit (CVE-2019-0708)
- Remote desktop takeover

[!] VNC ACCESS GRANTED!
Password:
Port: 5901

Quick Connect: vncviewer 161.97.125.247:5901