[GUEST ACCESS MODE: Data is scrambled or limited to provide examples. Make requests using your API key to unlock full data. Check https://lunarcrush.ai/auth for authentication information.]

@DarkWebInformer Avatar @DarkWebInformer Dark Web Informer

Several major cybersecurity incidents have been reported recently. A significant data breach allegedly involving XXX billion Discord messages from XX million users has been claimed, and various companies, including Comcast, Boyd Gaming Corporation, and Stellantis, have confirmed data breaches or cybersecurity incidents. Additionally, law enforcement has seized several dark web marketplaces, including Archetyp and Tradeogre.

Engagements: XXXXXX #

Engagements Line Chart

Mentions: XX #

Mentions Line Chart

Followers: XXXXXXX #

Followers Line Chart

CreatorRank: XXXXXXX #

CreatorRank Line Chart

Social Influence #

Social category influence technology brands XXXX% social networks XXXX% countries XXXX% finance XXXX% cryptocurrencies XXXX% stocks XXXX% automotive brands #5856 currencies #1676 gaming XXX% exchanges XXX%

Social topic influence has been 0.89%, discord 0.89%, france #908, telegram 0.59%, oracle #574, shiny #213, law enforcement #401, xmr 0.3%, bitcoin 0.3%, shell XXX%

Top accounts mentioned or mentioned by @grok @shotgunner101 @brutsecurity @doingfedtime @jeromeleom9 @cryptogodnyc @teddybear97681 @skull @exploitssimplified @zachxbt @opswatinc @ghostsec @t0mbston3 @dafr0g_ @foilmanhacks @shekeldrainer @sk_kohale @gh0stytongue @crunchyfries3 @thegreymouser__

Top assets mentioned Bitcoin (BTC) Cloudflare, Inc. (NET) Dell Technologies, Inc. (DELL) Gap Inc (GAP) Alphabet Inc Class A (GOOGL) DoorDash, Inc. (DASH) PolySwarm (NCT)

Top Social Posts #

Top posts by engagements in the last XX hours

"🚨 Alleged Sale of Prestashop Admin Access in Spain France and Lithuania with Credit Card Redirect"
X Link @DarkWebInformer 2025-10-12T17:26Z 134.1K followers, 5456 engagements

""Arguing that you don't care about privacy because you have nothing to hide is no different than saying you don't care about free speech because you have nothing to say." - Edward Snowden"
X Link @DarkWebInformer 2025-10-03T20:53Z 134.1K followers, 34.7K engagements

"🚨CVE-2025-23166: The C++ method SignTraits::DeriveBits() may incorrectly call ThrowException() based on user-supplied inputs when executing in a background thread crashing the Node.js process. CVSS: XXX FOFA Link: FOFA Query: app="Node.js" Results: 18136044 Advisory:"
X Link @DarkWebInformer 2025-10-14T20:38Z 134.1K followers, 3524 engagements

"🚨Breachforums.hn has been seized by law enforcement"
X Link @DarkWebInformer 2025-10-09T22:42Z 134.1K followers, 56.3K engagements

"⚠Dread: The complete guide for DNM users. How to: TailsOS OpSec PGP and XMR Post: https://dreadytofatroptsdj6io7l3xptbet6onoyno2yv7jicoxknyazubrad.onion/post/2404824a5af583496809"
X Link @DarkWebInformer 2025-10-06T23:30Z 134.1K followers, 7942 engagements

"🚨Crimson Collective has a message on the Discord Zendesk breach and Salesforce's public refusal to pay a ransom"
X Link @DarkWebInformer 2025-10-08T23:02Z 134.1K followers, 9070 engagements

"Wikileaks Vault 7: What's in the CIA Hacking Toolbox Video Credit: The Wall Street Journal"
X Link @DarkWebInformer 2025-10-06T20:24Z 134K followers, 24.3K engagements

"CVE-2025-32463: Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the --chroot option. PoC: CVSS: XXX Affected Versions: Vulnerable: sudo 1.9.14 1.9.17 Nonvulnerable: Legacy versions (1.9.14 no chroot support)"
X Link @DarkWebInformer 2025-10-05T00:24Z 134.1K followers, 62.7K engagements

"🚨Roger Ver Known as Bitcoin Jesus to Pay $XX Million in Settlement of U.S. Tax Fraud Case according to NYT #DWICrypto"
X Link @DarkWebInformer 2025-10-09T20:47Z 134K followers, 6587 engagements

"Darkus: An Onion website searcher that uses deep/dark web searcher engines to search a specific word and give you back the link results. GitHub:"
X Link @DarkWebInformer 2025-07-18T23:35Z 134.1K followers, 58K engagements

"Hackers Reach Out to Harrods Following Cyber Attack Affecting 430000 Customers"
X Link @DarkWebInformer 2025-09-29T16:04Z 134K followers, 3886 engagements

"Scattered Lapsus$ ShinyHunters (SLSH) announced the following victim samples in their Telegram channel: - Dell - Kuwait Airways - Telstra Group Limited - True Corporation and Dtac) - Verizon - Lyca Mobile"
X Link @DarkWebInformer 2025-10-08T14:26Z 134K followers, 9959 engagements

"🚨According to SLSH Qantas Airways will be the first company to be leaked on their DLS"
X Link @DarkWebInformer 2025-10-10T14:33Z 134.1K followers, 7332 engagements

"🚨 Alleged Sale of Prestashop Admin Panel with iframe Access 📌 France Industry: E commerce / Online Retail Threat Actor: kqu Network: Clearnet Dark Web Details: Threat actor kqu is auctioning access to a Prestashop shop with Shell Admin and iframe payment modules. Reported traffic is 28K. Data shows activity across several countries in the last four months including France 7331 Netherlands 1263 Spain 1227 Belgium XXX Italy XXX and Denmark XXX. Auction terms include starting bid $3600 step $XXX blitz $8000 with a XX hour close"
X Link @DarkWebInformer 2025-10-10T14:14Z 134K followers, 2770 engagements

"Knoxville Woman Sentenced To Over Eight Years In Murder For Hire Plot"
X Link @DarkWebInformer 2025-10-13T17:01Z 134.1K followers, 2765 engagements

"GhostTrack: Useful tool to track IP Phone and Username GitHub:"
X Link @DarkWebInformer 2025-08-17T16:32Z 134.1K followers, 131.8K engagements

"I've seen the Tyler Robinson Discord leak image. Why does the Last seen date say September 20th 2025 He was arrested on September 12th 2025"
X Link @DarkWebInformer 2025-10-09T01:09Z 134K followers, 20.5K engagements

"⚠Looks like all Proton services are completely down"
X Link @DarkWebInformer 2025-01-09T16:14Z 134K followers, 33.2K engagements

"Shimao Group appears to be the company claimed by Devman with a ransom of $91M"
X Link @DarkWebInformer 2025-09-07T19:16Z 134.1K followers, 7305 engagements

"🚨 American Home Furniture and Mattress has Fallen Victim to LYNX Ransomware"
X Link @DarkWebInformer 2025-10-10T16:36Z 134K followers, 2957 engagements

"🚨New Oracle Security Alert Advisory - CVE-2025-61884 CVSS: XXX This security alert covers CVE-2025-61884 affecting Oracle E-Business Suite. The flaw is remotely exploitable without authentication allowing network-based attacks that do not require a username or password. Successful exploitation may grant access to sensitive resources"
X Link @DarkWebInformer 2025-10-12T17:31Z 134.1K followers, 13.6K engagements

"🚨Scattered Lapsus$ Shiny Hunters (SLSH) has added CIC Vietnam to their list of victims"
X Link @DarkWebInformer 2025-10-05T19:03Z 134.1K followers, 6852 engagements

"hodl #Monero"
X Link @DarkWebInformer 2025-10-10T21:31Z 134.1K followers, 4269 engagements

"🚨Renault UK Customer Data Exposed in Third-Party Breach Exposed Data includes: First name and surname Gender Phone number Email address Postal address Vehicle Identification Number Vehicle registration number"
X Link @DarkWebInformer 2025-10-03T00:00Z 134K followers, 4570 engagements

"🚨 Scattered Lapsus$ Shiny Hunters (SLSH) signed the following PGP message about an hour ago. You can also view it below. shinypogk4jjniry5qi7247tznop6mxdrdte2k6pdu5cyo43vdzmrwid.onion/end.txt.asc"
X Link @DarkWebInformer 2025-10-10T02:48Z 134.1K followers, 31.4K engagements

"mydocs has posted the following claims in just X days. Best Western Hotel Hotel Ercolini e Savi Hotel Sanpi Milano Mediolanum Hotel Leonardo Hotels Savoia resort Astoria Suite Hotel Hotel Continentale Hotel Ca dei Conti Casa Dorita Hotel Regina Isabella Portals Hills Boutique Hotel"
X Link @DarkWebInformer 2025-08-13T23:49Z 134.1K followers, 3240 engagements

"🚨CVE-2025-23061: Remote Code Execution in Mongoose via Nested $where Filters Video Credit:"
X Link @DarkWebInformer 2025-10-09T19:46Z 134.1K followers, 3833 engagements

"🚨CVE-2025-61882: Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: BI Publisher Integration) GitHub Detection Yaml: CVSS: XXX Advisory: Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Concurrent Processing. Successful attacks of this vulnerability can result in takeover of Oracle Concurrent Processing"
X Link @DarkWebInformer 2025-10-06T16:57Z 134.1K followers, 8836 engagements

"🚨 IOC Alert: Kongtuke JavaScript Payload Masquerading as Restaurant Website"
X Link @DarkWebInformer 2025-10-14T19:57Z 134.1K followers, 3038 engagements

"⚠Dread: "Rate my OpSec" 2/10 Dread: https://dreadytofatroptsdj6io7l3xptbet6onoyno2yv7jicoxknyazubrad.onion/post/b98bccc9a8e765b02e56"
X Link @DarkWebInformer 2025-09-29T23:37Z 134K followers, 5586 engagements

"Darknetlive Archive Woman Pleads Guilty to Hiring a Hitman"
X Link @DarkWebInformer 2025-10-13T16:56Z 134.1K followers, 3917 engagements

"🚨CVE-2025-42944: Maximum-Severity OS Command Execution Vulnerability in SAP NetWeaver CVSS: XX FOFA Query: app="SAP-NetWeaver" app="SAP-NetWeaver-Application-Server-Java" FOFA: Results: 515194"
X Link @DarkWebInformer 2025-10-09T20:15Z 134.1K followers, 17.9K engagements

"🚨 Alleged Sale of Camgirl Company Data for S*xtortion 📌 European Union Industry: Adult Entertainment Threat Actor: sleep_mask Network: Clearnet Dark Web Revenue: 8M annually 1.5M net profit per year Details: The listing claims to offer exclusive access to data from a European camgirl webcamming business. Exfiltrated data allegedly includes national IDs of camgirls with personal details (ID pictures names addresses emails payment info balances and sales history) user data such as emails purchase histories and real names tied to credit card transactions a production database spanning 10+"
X Link @DarkWebInformer 2025-08-19T19:00Z 134.1K followers, 4710 engagements

"🚨AIP Asset Management has Fallen Victim to Qilin Ransomware"
X Link @DarkWebInformer 2025-10-04T19:54Z 134K followers, 23.1K engagements

"watchTowr just released their own Detection Artifact Generator for Oracle E-Business Suite CVE-2025-61882"
X Link @DarkWebInformer 2025-10-06T21:10Z 134.1K followers, 5651 engagements

"Original author write-up:"
X Link @DarkWebInformer 2025-10-15T02:04Z 134.1K followers, 2810 engagements

"🚨 Alleged Data Scrape of XXX Billion Discord Messages from 39M+ users including voice logs profiles and server data"
X Link @DarkWebInformer 2025-09-16T23:32Z 134.1K followers, 48.1K engagements

"GoSearch: Search anyone's digital footprint across 300+ websites GitHub:"
X Link @DarkWebInformer 2025-08-23T23:25Z 134.1K followers, 123.8K engagements

"Telstra has been added as victim to the SLSH data leak site onion portal"
X Link @DarkWebInformer 2025-10-08T14:35Z 134.1K followers, 3159 engagements

"I am going through about 2000+ websites for known seizures and came across this one. Ugly AF. tether-defi.org"
X Link @DarkWebInformer 2025-10-11T21:10Z 134.1K followers, 17.9K engagements

"CVE-2025-49844 (Lab Environment): A practical lab environment for testing and understanding the critical RediShell vulnerability in Redis. GitHub:"
X Link @DarkWebInformer 2025-10-08T18:20Z 134.1K followers, 4694 engagements

"Global Monero: P2P XMR Trading Platform - Open Registration Onion: http://globalxmrdr4zospiujlhkanhkpl5zouwynfmduaq5qhfcxnshi4ksyd.onion Dread announcement: https://dreadytofatroptsdj6io7l3xptbet6onoyno2yv7jicoxknyazubrad.onion/post/1355724096b97b01e8bb"
X Link @DarkWebInformer 2025-10-04T01:20Z 134K followers, 19K engagements

"🚨CVE-2024-40766: Critical Improper Access Control Vulnerability Affecting SonicWall Devices CVSS: XXX FOFA: Results: 473950 FOFA Query: app="SONICWALL-SSL-VPN" Advisory:"
X Link @DarkWebInformer 2025-10-10T17:08Z 134.1K followers, 8085 engagements

"🚨CVE-2025-53967: figma-developer-mcp vulnerable to command injection in get_figma_data tool Advisory: CVSS: XXX Write-up: Write-up 2: Video Credit: Imperva"
X Link @DarkWebInformer 2025-10-08T18:36Z 134.1K followers, 6144 engagements

"🚨CVE-2025-11002 and CVE-2025-11001: 7-Zip ZIP File Parsing Directory Traversal Remote Code Execution Vulnerability CVSS: XXX / XXX Advisory: and Fixed in 7-Zip 25.00"
X Link @DarkWebInformer 2025-10-10T18:53Z 134.1K followers, 7236 engagements

"Telstra Denies Hack Allegations in Extortion Attempt"
X Link @DarkWebInformer 2025-10-10T21:56Z 134.1K followers, 4110 engagements

"Yikes Yunex Traffic"
X Link @DarkWebInformer 2025-10-10T19:35Z 134.1K followers, 6085 engagements

"🚨Salesforce your data is still safe with SLSH. 💪"
X Link @DarkWebInformer 2025-10-09T22:50Z 134K followers, 28.3K engagements

"I am parking my Bluesky account at the end of the day Friday. The main reason is the character limit of XXX. I cannot post any detailed posts on that platform which means growth is extremely limiting when no posts are being made. If you want to follow elsewhere you can currently find me on X LinkedIn Mastadon Telegram Discord. for the links"
X Link @DarkWebInformer 2025-10-02T23:26Z 134.1K followers, 10.7K engagements

"🚨Alleged Data Leak of LPL Financial ("Money Matters") Industry: Financial Services Threat Actor: Cephalus Network: Clearnet Dark Web Details: Threat actor claims to have compromised LPL Financial also known as "Money Matters" exfiltrating all intranet data including CVVs drivers licenses healthcare insurance records confidential contracts account credentials and client lists. Actor shared a public MEGA download link and mocked the victims security claiming the breach exposed significant sensitive information"
X Link @DarkWebInformer 2025-08-13T18:03Z 134K followers, 4043 engagements

"🚨 Alleged Sale of 2900+ Credit Cards from Turkey 📌 Location: Turkey Threat Actor: Gualtieri Network: Clearnet Dark Web Details: Threat actor Gualtieri is auctioning a dump of 2938 Turkey-issued credit cards. Format includes full details (CC CVV name country region address phone email). Validity is claimed at 6070%. Starting bid is $3000 step $XXX blitz $4600"
X Link @DarkWebInformer 2025-10-08T22:22Z 134.1K followers, 4843 engagements

"🚨 Alleged Sale of Backend Access with Read/Write Vulnerability in Chinese Gaming Giant NetEase"
X Link @DarkWebInformer 2025-10-04T14:54Z 134.1K followers, 14.4K engagements

"⚠ Dread: Rate my OpSec 1/10 Dread: https://dreadytofatroptsdj6io7l3xptbet6onoyno2yv7jicoxknyazubrad.onion/post/8141fab934dd9311f553"
X Link @DarkWebInformer 2025-09-30T19:59Z 134.1K followers, 3680 engagements

"Mischievous idea: logging into someone's Cloudflare account and changing DNS records from proxied to DNS only"
X Link @DarkWebInformer 2025-10-13T22:15Z 134.1K followers, 38.8K engagements

"Qilin Ransomware names another X Victims in addition to the XX and XX victims earlier today. 🌍 Landmark Management New Jersey Property-Liability Insurance Guaranty Association SFG Technology Sdn Bhd WebCut Converting Kecy Metal Technologies Volkswagen Group France Pro-Fab"
X Link @DarkWebInformer 2025-10-14T22:52Z 134.1K followers, 4895 engagements

"InstagramPrivSniffer: Views Instagram private account's media without login GitHub:"
X Link @DarkWebInformer 2025-09-25T17:32Z 134.1K followers, 153.8K engagements

"🚨Alleged Leak of Telegram Bases 2019-2023"
X Link @DarkWebInformer 2025-09-25T16:10Z 134K followers, 36.4K engagements

"🚨shinyhunte.rs is the new clearnet version of the SLSH dark web onion"
X Link @DarkWebInformer 2025-10-11T20:34Z 134.1K followers, 25.3K engagements

"🚨 Cameron Hodges Coleman LaPointe & Wright P.A. Falls Victim to Qilin Ransomware"
X Link @DarkWebInformer 2025-10-08T17:54Z 134.1K followers, 2906 engagements

"🚨Alleged Data Sale of Huawei Technologies"
X Link @DarkWebInformer 2025-10-03T15:23Z 134K followers, 3635 engagements

"🚨A threat actor is claiming to sell the N-day Oracle E-Businesses exploit (CVE-2025-61882)"
X Link @DarkWebInformer 2025-10-06T21:46Z 134.1K followers, 4655 engagements

"🚨 Asahi Group has been Claimed a Victim by Qilin Ransomware"
X Link @DarkWebInformer 2025-10-07T15:24Z 134.1K followers, 5401 engagements

"🚨🚨Archetyp Darknet Market the world's largest Darknet Market has been seized by law enforcement"
X Link @DarkWebInformer 2025-06-16T09:25Z 134.1K followers, 124.2K engagements

"🚨Scattered Lapsus$ Shiny Hunters have leaked X companies Qantas Airways Limited - XXX GB Vietnam Airlines - XXXXX GB Albertsons Companies Inc. - X GB GAP INC. - X GB Fujifilm - 155MB Engie Resources - X GB"
X Link @DarkWebInformer 2025-10-11T04:20Z 134.1K followers, 35.8K engagements

"CVE-2025-10035: Maximum-Severity Command Injection Vulnerability in Fortra GoAnywhere MFT Writeup: Checker: CVSS: XX KEV: 2025-09-29"
X Link @DarkWebInformer 2025-10-05T16:26Z 134.1K followers, 15.6K engagements

"There appears to be a massive outage going on. Twitch Discord Google Cloud Google Google Meet Google Nest CharacterAI Etsy Khan Academy Google Drive Google Maps Pokemon TCG Dialpad Mailchimp HighLevel Amazon Web Services OpenAI Cloudflare Anthropic Breezeline Dragon Ball State Farm Embark Studios Gmail Rocket League DoorDash Wells Fargo Marvel MLB TV Google Gemini Fortnite Spotify Shopify Snapchat Tekken Box Equifax Roll20 Cursor Looker Studio FuboTV IKEA reCAPTCHA GitLab Steam Clover POS Systems AMC Theatres NPM"
X Link @DarkWebInformer 2025-06-12T18:21Z 134.1K followers, 751K engagements

"🚨Alleged Sale of Ourbit Crypto Exchange User Data"
X Link @DarkWebInformer 2025-10-08T13:04Z 134.1K followers, 2836 engagements

"Malwoverview is a first response tool used for threat hunting and offers intel information from Virus Total Hybrid Analysis URLHaus Polyswarm Malshare Alien Vault Malpedia Malware Bazaar ThreatFox Triage InQuest VxExchange and IPInfo. GitHub:"
X Link @DarkWebInformer 2025-08-23T21:14Z 134.1K followers, 33.5K engagements

"🚨Scattered Lapsus$ Shiny Hunters (SLSH) have claimed the Discord breach. They provided the following images in their Telegram channel"
X Link @DarkWebInformer 2025-10-04T14:03Z 134.1K followers, 14.7K engagements

"🚨Scattered Lapsus$ Shiny Hunters (SLSH) no longer operate a clearnet domain. according to them"
X Link @DarkWebInformer 2025-10-07T20:46Z 134.1K followers, 18.1K engagements

"🚨 Discloses Third-Party Data Breach 📌 Impact: A breach at service provider Fast Track exposed user data (emails names addresses transactions bet data). 💡 Important: Shuffle accounts & funds are safe No passwords/credentials stored with Fast Track Breach has been contained ⚠ Users advised to stay cautious of phishing & ensure 2FA is enabled. This according to the company"
X Link @DarkWebInformer 2025-10-10T14:56Z 134.1K followers, 12.3K engagements

"Provides services tools and privacy guides to counter global mass surveillance. Established in 2015 after Edward Snowden's revelations. Link:"
X Link @DarkWebInformer 2025-10-04T19:38Z 134.1K followers, 50.2K engagements

"🚨Bitcoin has tanked below $104000 #DWICrypto"
X Link @DarkWebInformer 2025-10-10T21:22Z 134.1K followers, 4970 engagements

"🚨 IOC Alert: ClearFake JavaScript Payload Delivered via Compromised Domain"
X Link @DarkWebInformer 2025-10-13T17:56Z 134.1K followers, 4023 engagements

"Lenovo CVE-2025-8061: PoC for popping a system shell against the LnvMSRIO.sys driver GitHub:"
X Link @DarkWebInformer 2025-10-15T01:51Z 134.1K followers, 7414 engagements

"🚨 Furuno Electric has Fallen Victim to Rhysida Ransomware Ransom: XX BTC or $1736934.00 USD at time of post"
X Link @DarkWebInformer 2025-10-13T20:20Z 134.1K followers, 5659 engagements

"🚨 Alleged Data Sale of KFC Venezuela Customer & Order Database"
X Link @DarkWebInformer 2025-10-09T18:00Z 134K followers, 3148 engagements

"SMS4Sats: A web service that issues one-time disposable phone numbers for receiving SMS activation codes. Clearnet: Onion: http://sms4sat6y7lkq4vscloomatwyj33cfeddukkvujo2hkdqtmyi465spid.onion"
X Link @DarkWebInformer 2025-10-03T19:14Z 134.1K followers, 36.9K engagements

"🚨Alleged Sale of AscendEX (BitMax) User Data"
X Link @DarkWebInformer 2025-10-08T13:10Z 134.1K followers, 3459 engagements

"🚨 Alleged Auction of MERGE CC Shop Data (20222025) Containing XXX Million Cards 📌 Global (80% USA) Industry: Financial / Carding Threat Actor: cashmoneycard Network: Clearnet Dark Web Details: Threat actor cashmoneycard is auctioning a large payment card data allegedly sourced from the former MERGE CC Shop. The listing claims over XXX million card entries (20222025) and XXX million cards from 2026 onward divided into XXX separate bases. Approximately XX% of the data is said to originate from U.S. sources. Starting bid $5000 step $1000 blitz $25000. Bases are reportedly private and not"
X Link @DarkWebInformer 2025-10-13T17:19Z 134.1K followers, 4811 engagements

"⚠Dread: Rate my OpSec 3/10 Thread: https://dreadytofatroptsdj6io7l3xptbet6onoyno2yv7jicoxknyazubrad.onion/post/9348dda96ad2effe33d4"
X Link @DarkWebInformer 2025-10-12T21:21Z 134.1K followers, 23.9K engagements

"CVE-2025-49844: Redis Lua Use-After-Free may lead to remote code execution CVSS: XX Advisory: Versions 8.2.1 and below allow an authenticated user to use a specially crafted Lua script to manipulate the garbage collector trigger a use-after-free and potentially lead to remote code execution. The problem exists in all versions of Redis with Lua scripting. This issue is fixed in version 8.2.2. To workaround this issue without patching the redis-server executable is to prevent users from executing Lua scripts. This can be done using ACL to restrict EVAL and EVALSHA commands"
X Link @DarkWebInformer 2025-10-06T16:33Z 134.1K followers, 3134 engagements

"🚨 Alleged Rental of Powershell Command & Private Turnkey Package 📌 N/A Industry: Malware / Exploit Tools Threat Actor: LuciferXFiles Network: Clearnet Dark Web Details: Threat actor LuciferXFiles is advertising a Powershell-based private turnkey package for $1000 per month. Features include payload support (.exe .dll .msi) multi-file packaging SmartScreen/MotW bypass invisibility from major antivirus delayed activation custom error/success messages and a Telegram bot for generating commands. The actor also offers a full turnkey package for as low as $XXX which includes HTML phishing pages"
X Link @DarkWebInformer 2025-10-10T16:04Z 134.1K followers, 7932 engagements

"🚨37000000 Roblox User:Passwords for sale"
X Link @DarkWebInformer 2025-10-12T18:15Z 134.1K followers, 52.4K engagements

"🚨 Volkswagen Group France has Fallen Victim to Qilin Ransomware"
X Link @DarkWebInformer 2025-10-14T22:06Z 134.1K followers, 3617 engagements

"🚨Alleged Data Breach of Hotel Regina Isabella 30K+ Guest Passport & ID Scans Industry: Hospitality / Luxury Resorts Threat Actor: mydocs Forum: DarkForums Network: Clearnet Dark Web Details: A threat actor is selling over 30000 high-resolution scans and photos of guest identity documents allegedly obtained from a private source linked to Hotel Regina Isabella a high-end resort located in Ischia Italy. The dataset includes a wide variety of global ID types and document formats. Leaked data includes: 30K+ guest identity document scans Document types: Passports (EU US Middle East) Italian ID"
X Link @DarkWebInformer 2025-08-05T15:26Z 134.1K followers, 3330 engagements