🚨 Windows password and PIN sniffer tool shared on a forum
⠀
An actor using the handle "Apollinaris" is distributing a tool advertised as capturing local Windows user and administrator passwords or PINs.
⠀
The screenshots show a Windows Update impersonation prompt asking the victim to enter credentials to approve a supposed Wi-Fi driver update.
⠀
The actor provides separate password and PIN versions and claims compatibility with remote access tools. The screenshots demonstrate the credential prompts, but do not establish successful credential capture.
⠀
This claim is currently unverified.
⠀
💥 No delays. No guessing. No redactions. Get the intel threat actors see, the moment they post it. darkwebinformer.com/pricing

🚨 The U.S. Postal Inspection Service (USPIS) seized a major domain used to generate millions of fraudulent shipping labels, causing an estimated $126 million in losses for the U.S. Postal Service.

USPIS did not identify the domain or provide further information, and the link in its X post returns a 404 error.

‼️🇺🇸 An actor claims to be offering full GitHub organization access for Pfizer, including internal repositories, source code, and developer infrastructure.

Running a Mastodon server is becoming increasingly problematic due to GenAI.

There’s multiple different things happening, including but not limited to:

- very aggressive scraping of user content and block evasion, with the resource costs that come with it

- AI agents aggressively trying to register accounts and evade restrictions

- rising cost of RAM - Mastodon is memory hungry, RAM is really expensive now

It’s odd to experience first hand, it’s like being consumed by.. a void.

Lever de lune ce soir, derrière Belledonne.

👀 DarkMatter’s admin has finally released a statement after starting an exit scam over a week ago.

The admin says they are retiring and openly admits to keeping customers’ escrow funds, stating: “I think I deserve escrow money for my retirement.”

The statement blames burnout, prolonged DDoS attacks, and growing law enforcement attention. It also claims more than $80 million passed through the market over its lifetime.

The admin promises to delete all data and purge the servers within days, claiming everyone is “totally safe.” Those assurances are unverified.

Dread: https://dreadytofatroptsdj6io7l3xptbet6onoyno2yv7jicoxknyazubrad[.]onion/post/418fc98e7d27bc15cac3

🚨 🇫🇷 Nearly 1.1 million business records linked to 118 712 offered for sale
⠀
118 712 is a French directory service listing businesses and individuals.
⠀
Forum actor "NodeScraper" claims to be selling a dataset containing 1,098,583 business records.
⠀
The advertised data includes:
⠀
• Company names and registration numbers
• Email addresses and phone numbers
• Addresses and geographic coordinates
• Business profiles, social links, and more
⠀
The seller offers one exclusive copy at a negotiable price.
⠀
This claim is currently unverified.
⠀
💥 No delays. No guessing. No redactions. Get the intel threat actors see, the moment they post it. darkwebinformer.com/pricing

🚨[POC] CVE-2026-87902: WordPress Core versions up to and including 7.1.1 are affected by a Local File Inclusion vulnerability in the locate_template() function.

GitHub: https://github.com/abraxas/CVE-2026-87902

Credit: @abraxas_null (X)

My daughter was reading the latest Ed Zitron piece (link below) and as an accounting student she just HAD to make a few memes.

I am SO PROUD OF HER.

https://www.wheresyoured.at/wherere-all-the-ai-chips/

The Degraded Search Engine

Bonus speedpaint: https://www.peppercarrot.com/en/miniFantasyTheater/071.html#bonus

#webcomic #krita #miniFantasyTheater