CTI Updates
ctiupdates@infosec.exchange
<p>Updates about all things threat intelligence & updates about stuffs going on in the cybersec, ransomware, OSINT, SOCMINT, and hacking communities <a href="https://infosec.exchange/tags/threatintel" class="mention hashtag" rel="tag">#<span>threatintel</span></a></p><p>Telegram: <a href="https://t.me/CTIUpdates" target="_blank" rel="nofollow noopener" translate="no"><span class="invisible">https://</span><span class="">t.me/CTIUpdates</span><span class="invisible"></span></a></p><p>Project: <a href="https://threatactorusernames.com" target="_blank" rel="nofollow noopener" translate="no"><span class="invisible">https://</span><span class="">threatactorusernames.com</span><span class="invisible"></span></a> - Search through 3M+ threat actor usernames and find where they operate</p><p>Pr
Posts
-
View post
the INC ransomware group has listed Game Changer Wealth, a full-service financial services firm with three offices located in the heart of Baton Rouge, Lafayette, and Metairie in Louisiana
-
View post
SOLD 💰 threat actor 888 has marked as SOLD a listing for initial access to a US software development company (~$230M revenue), including administrative portals and source code access (claim unverified)
-
View post
the BYOD ransomware group has listed Toyota and Providence
-
View post
Telegram Archive backs up one or more Telegram accounts to a machine you host. It runs in Docker or from pip, and saves messages, media, edits and deletions to SQLite or PostgreSQL on your own disk. A web viewer, which never talks to Telegram, lets you read and search what it saved. https://github.com/GeiserX/Telegram-Archive
-
View post
the Booba ransomware group lists 6 new victims on their DLS »-(¯`· Acclaim Health »-(¯` ·Day One RI »-(¯`· El Portal Imaging Center »-(¯`· Collier Sports Medicine and Orthopedic Center »-(¯`· Georgetown Sleep Center »-(¯`· COMPUTER TASK GROUP
-
View post
Every single time...
-
View post
a threat actor named far7tw is advertising access to a PandaDoc Enterprise dashboard belonging to Neighbors Insurance Agency (Miami, FL), claiming exposure of 8,000+ documents including medical/auto insurance applications, driver’s licenses, SSNs, VIN records, and medical history files. (claim unverified)
-
View post
the Rhysida ransomware group has listed Treuhand &amp; Immobilien Abt AG(Switzerland) on their DLS and is asking a ransom of 5 BTC
-
View post
Online malware analysis sandbox. Detonates a submitted file or URL and publishes the report, and lets you search past public scans by indicator: IP, domain, URL, mutex, registry key, hash or JA3/JA4 fingerprint. Reports are readable without an account; a free tier adds submissions, an API and a command line client. https://malwagon.com
-
View post
hrmmm 🍆
-
View post
the Qilin ransomware group has listed Roxfarma, a Peruvian pharmaceutical laboratory that has manufactured medicines since 1986
-
View post
story of my life
-
View post
To anyone from the security services who might be reading: listen up, here&#39;s how you can catch hackers in large numbers! (from Tor Zireael) Если кто из спец. служба читает, слушайте тему, как можно ловить хакеров пачками! 1) Создаем тему на Exploit, где специально для пользователей форума будет халява в виде токенов на ИИ без цензуры, всего лишь нужно отписать в личку и взять инвайт, как раз по можно будет четко понимать какие конкретно запросы делает конкретный юзер. 1/4
-
View post
Initial access broker krekti is advertising access to AI infrastructure belonging to a crypto wallet company (web + mobile), claiming 45M+ users. Asking price: $100K (Monero XMR only). (claim unverified)
-
View post
threat actor &quot;Sophia&quot; claims to have leaked a French pharmacy and healthcare business database of Pharmatomic (pharmatomic[.]fr), offered in CSV/SQL format (claim unverified)
-
View post
Someone made an onion with info doxing Qilin operators that looks like its from The Gentlemen ransomware group but then thegroup has claimed they have nothing to do with it ??? what is going on lol WE GOT RANSOMWARE GROUP DRAMA 🍿🍿🍿 hxxp://qilinjzaot34gv3ugxaqhiwomeuwqfkf7nblpyp4dr7igpn22ib6kkid[.]onion
-
View post
That Chinese espionage spy pussy will get ya... https://apnews.com/article/nvidia-jensen-huang-investigation-chinese-spy-68839e7ca6ba2b121529f7e475e501d6
-
View post
the Panzer ransomware group has listed Grupa ABS with claims of 30 gb of data taken. Grupa ABS is a company that operates in the Environmental Services industry. It employs 6-10 people and has $1M-$5M of revenue. The company is headquartered in Czestochowa, Silesian Voivodeship, Poland.
-
View post
the &quot;post random shit to get credits in order to download ULP and leaks&quot; grind on hacking forums is all too real
-
View post
I feel like we are going to see some ransomware groups named and theme&#39;d after after GTA 6 once it launches. We used to have a ransomware group named Vice Society and they were pretty slick in 2022. They really liked to attack schools and edu.
-
View post
A free, open-source command line tool for reading Bitcoin on-chain data. For OSINT, the useful part is that it decodes the messages people write into transactions (OP_RETURN), so you can read on-chain conversations between victims and hackers, and inspect the addresses and transactions involved. https://github.com/devdavidejesus/btc-toolkit
-
View post
an initial access broker named Horsefucker is selling webmail access to a Canadian infrastructure company that has $10M+ in revenue