Daily Dose of Dark Web Informer - 16th of September 2025
This daily article is intended to make it easier for those who want to stay updated with my regular Dark Web Informer and X/Twitter posts.
Dark Web Informer - Cyber Threat Intelligence
Threat Attack Daily - 16th of September 2025
Threat Attack Daily - 16th of September 2025
Ransomware Attack Update for the 16th of September 2025
Ransomware Attack Update for the 16th of September 2025
IOC Alert: Lumma Stealer Command-and-Control Infrastructure
IOC Alert: Lumma Stealer Command-and-Control Infrastructure
Ekonomipoolen i Mark AB Falls Victim to Kairos Ransomware
Ekonomipoolen i Mark AB Falls Victim to Kairos Ransomware
Alleged Sale of Corporate VPN & Domain Admin Access to a Singapore Company
Alleged Sale of Corporate VPN & Domain Admin Access to a Singapore Company
Alleged Sale of Unauthorized Access to an Unidentified Fashion Store in India
Alleged Sale of Unauthorized Access to an Unidentified Fashion Store in India
Alleged Sale of U.S. Driver’s Licenses, Selfies, and Taxpayer Documents
Alleged Sale of U.S. Driver’s Licenses, Selfies, and Taxpayer Documents
CAS Exhibition Partners Falls Victim to LYNX Ransomware
CAS Exhibition Partners Falls Victim to LYNX Ransomware
Alleged Data Leak of Avatel Telecom
Alleged Data Leak of Avatel Telecom
TRC Healthcare Falls Victim to Qilin Ransomware
TRC Healthcare Falls Victim to Qilin Ransomware
IOC Alert: Supershell Command-and-Control Infrastructure
IOC Alert: Supershell Command-and-Control Infrastructure
Orleans Parish Sheriff’s Office Falls Victim to Qilin Ransomware
Orleans Parish Sheriff’s Office Falls Victim to Qilin Ransomware
Threat Intelligence Analytics
Threat Intelligence Analytics
Early Access Program (Elite Subscribers)
Heffner Toyota & Lexus Falls Victim to Nitrogen Ransomware
Heffner Toyota & Lexus Falls Victim to Nitrogen Ransomware
Meskan Foundry Falls Victim to BEAST Ransomware
Meskan Foundry Falls Victim to BEAST Ransomware
Alleged Sale of Madrileña Red de Gas Customer Database
Alleged Sale of Madrileña Red de Gas Customer Database
IOC Alert: AuraStealer Command-and-Control Infrastructure
📖 Overview
A domain-based indicator has been identified hosting a fraudulent “WhatsApp AI” investment platform, which is associated with AuraStealer operations. The site promotes fake promises of high financial returns as a lure, while functioning as part of a botnet C2 and credential harvesting infrastructure. Confidence is assessed
Alleged Sale of Unauthorized Access to an Unidentified Shop in Poland
Alleged Sale of Unauthorized Access to an Unidentified Shop in Poland
Providing Cyber Threat Intelligence from the Dark Web & Clearnet: Breaches, Ransomware, Darknet Markets, Threat Alerts & more.