Dark Web Informer's banner

Dark Web Informer

@DarkWebInformer • 229,451 subscribers

One guy. Global cybercrime. Tracked so you don't have to. Ransomware, data breaches, dark web activity, darknet markets, IOCs & emerging threats. Stay informed!

Shorts

‼️Copy Fail (CVE-2026-31431) is a Linux privilege escalation bug that lets any local user get root using a 732-byte Python script, and itworks on basically every major Linux distro shipped since 2017. Website: Write-up: GitHub: It's a logic flaw in the kernel's crypto code (authencesn via AF_ALG and splice()) that allows a small write into the page cache, which can be used to tamper with a setuid binary like /usr/bin/su. Think how bad this is going to be for shared environments like Kubernetes, CI runners, and cloud sandboxes, where it enables container escape and tenant-to-host compromise. Found by Theori's Xint Code scanner, patched in the mainline kernel, and publicly disclosed on April 29, 2026; if you can't patch right away, the recommended workaround is to disable the algif_aead module.

‼️Copy Fail (CVE-2026-31431) is a Linux privilege escalation bug that lets any local user get root using a 732-byte Python script, and itworks on basically every major Linux distro shipped since 2017. Website: Write-up: GitHub: It's a logic flaw in the kernel's crypto code (authencesn via AF_ALG and splice()) that allows a small write into the page cache, which can be used to tamper with a setuid binary like /usr/bin/su. Think how bad this is going to be for shared environments like Kubernetes, CI runners, and cloud sandboxes, where it enables container escape and tenant-to-host compromise. Found by Theori's Xint Code scanner, patched in the mainline kernel, and publicly disclosed on April 29, 2026; if you can't patch right away, the recommended workaround is to disable the algif_aead module.

445,351 views

Get outta my way bitch. 🤣

Get outta my way bitch. 🤣

31,154 views

💥OpenOSINT turns OSINT into a terminal-based AI agent. Give it an email, username, domain, IP, or target, and it can chain real tools, pivot on findings, and save a structured report. GitHub: Live Demo:

💥OpenOSINT turns OSINT into a terminal-based AI agent. Give it an email, username, domain, IP, or target, and it can chain real tools, pivot on findings, and save a structured report. GitHub: Live Demo:

30,425 views

💥 arsenal-ng: A Go-based pentest command launcher with 200+ cybersecurity cheat sheets built in. Search commands, fill in arguments, and send them straight to your terminal instead of digging through notes every time. GitHub:

💥 arsenal-ng: A Go-based pentest command launcher with 200+ cybersecurity cheat sheets built in. Search commands, fill in arguments, and send them straight to your terminal instead of digging through notes every time. GitHub:

29,797 views

‼️ A threat actor is selling a NFCRipper tool which allegedly enables NFC relay, card capture, session cloning, and POS/ATM CVM bypass functionalities. They claim it can capture, replay, and manage card data through a centralized web panel for research and testing purposes. nfcripper[.]su

‼️ A threat actor is selling a NFCRipper tool which allegedly enables NFC relay, card capture, session cloning, and POS/ATM CVM bypass functionalities. They claim it can capture, replay, and manage card data through a centralized web panel for research and testing purposes. nfcripper[.]su

44,543 views

A XSS vulnerability took control of BreachForums about an hour and a half ago. It has since been fixed. Credit: Nicotine

A XSS vulnerability took control of BreachForums about an hour and a half ago. It has since been fixed. Credit: Nicotine

48,922 views

DDoS attack... wait for it.

DDoS attack... wait for it.

100,465 views

Shannon: Fully autonomous AI hacker to find actual exploits in your web apps. Shannon has achieved a 96.15% success rate on the hint-free, source-aware XBOW Benchmark. GitHub: Features: ▪️Fully Autonomous Operation ▪️Pentester-Grade Reports with Reproducible Exploits ▪️Critical OWASP Vulnerability Coverage ▪️Code-Aware Dynamic Testing ▪️Powered by Integrated Security Tools ▪️Parallel Processing for Faster Results

Shannon: Fully autonomous AI hacker to find actual exploits in your web apps. Shannon has achieved a 96.15% success rate on the hint-free, source-aware XBOW Benchmark. GitHub: Features: ▪️Fully Autonomous Operation ▪️Pentester-Grade Reports with Reproducible Exploits ▪️Critical OWASP Vulnerability Coverage ▪️Code-Aware Dynamic Testing ▪️Powered by Integrated Security Tools ▪️Parallel Processing for Faster Results

49,460 views

Lol, truth!

Lol, truth!

35,387 views

🚨Darcula Phishing-as-a-Service (PhaaS) Platform Integrates Generative AI, Lowering the Barrier for Threat Actors

🚨Darcula Phishing-as-a-Service (PhaaS) Platform Integrates Generative AI, Lowering the Barrier for Threat Actors

62,024 views

‼️ .cz BreachForums was briefly defaced by what looks like a XSS vuln in XenForo. XenForo is a popular forum platform that I have seen used by a lot of actors, most of which I have identified in my Threat-Surface repo on GitHub. Credit to antisocial for sending the video.

‼️ .cz BreachForums was briefly defaced by what looks like a XSS vuln in XenForo. XenForo is a popular forum platform that I have seen used by a lot of actors, most of which I have identified in my Threat-Surface repo on GitHub. Credit to antisocial for sending the video.

17,201 views

Wait for it...🤣

Wait for it...🤣

44,118 views

You probably know a co-worker who does this. 😂

You probably know a co-worker who does this. 😂

19,795 views

Videos

Anya Rossi

sweetdream.ai

SweetDream.ai•Sponsored•Livecam

Watch Anya Live

Anya is streaming live right now! Join her private show and enjoy exclusive content.

Exclusive private shows

1.2k viewers online

Private Show

Join now for exclusive access

Free preview available • Premium content

🚨‼️The Darkest Web: Inside the internet’s most hidden corners to save kids THIS DOCUMENTARY DEALS WITH CHILD SEXUAL ABUSE AND CONTAINS SCENES WHICH VIEWERS MAY FIND DISTURBING. An extraordinary global team of undercover officers takes on a nearly impossible mission: infiltrating the darkest corners of the internet to rescue vulnerable children and bring hope where it once seemed impossible. Credit:

🚨‼️The Darkest Web: Inside the internet’s most hidden corners to save kids THIS DOCUMENTARY DEALS WITH CHILD SEXUAL ABUSE AND CONTAINS SCENES WHICH VIEWERS MAY FIND DISTURBING. An extraordinary global team of undercover officers takes on a nearly impossible mission: infiltrating the darkest corners of the internet to rescue vulnerable children and bring hope where it once seemed impossible. Credit:

Dark Web Informer

179,274 views • 16 days ago

💡How DDoS Works But It's 3D

💡How DDoS Works But It's 3D

Dark Web Informer

978,791 views • 1 year ago

Been there... many times! 😂

Been there... many times! 😂

Dark Web Informer

313,555 views • 7 months ago

🚨🇩🇪 Archetyp Darknet Market operator charged over €330M darknet drug trade German prosecutors charged a 31-year-old man accused of founding and administering Archetyp Market, once described as the world’s largest darknet marketplace for illegal drugs. Authorities say the platform processed around 2.3 million orders between November 2022 and its June 2025 shutdown, generating an estimated €330 million in sales. Archetyp allegedly had more than 600,000 customer accounts, around 3,000 professional vendors, and 17,000 listings for cocaine, heroin, fentanyl, methamphetamine, cannabis, prescription drugs, and other substances. The suspect allegedly collected a 5% commission and other fees, earning around €20 million. He was arrested (video) in Barcelona during Operation Deep Sentinel and later extradited to Germany. Authorities have seized nearly €10 million in cryptocurrency, cash, and luxury vehicles. He faces up to 15 years in prison if convicted.

🚨🇩🇪 Archetyp Darknet Market operator charged over €330M darknet drug trade German prosecutors charged a 31-year-old man accused of founding and administering Archetyp Market, once described as the world’s largest darknet marketplace for illegal drugs. Authorities say the platform processed around 2.3 million orders between November 2022 and its June 2025 shutdown, generating an estimated €330 million in sales. Archetyp allegedly had more than 600,000 customer accounts, around 3,000 professional vendors, and 17,000 listings for cocaine, heroin, fentanyl, methamphetamine, cannabis, prescription drugs, and other substances. The suspect allegedly collected a 5% commission and other fees, earning around €20 million. He was arrested (video) in Barcelona during Operation Deep Sentinel and later extradited to Germany. Authorities have seized nearly €10 million in cryptocurrency, cash, and luxury vehicles. He faces up to 15 years in prison if convicted.

Dark Web Informer

40,451 views • 29 days ago

Gmail Creator Pro: The Ultimate Gmail Account Creator Advertised capabilities include: • Human-like typing and random delays • Browser fingerprint and user-agent rotation • Session warming through common websites • Proxy selection and validation • Phone verification skip/bypass attempts • SMS API integration • Multi-language interface support • Auto-save account storage in JSON • Success-rate and account statistics dashboard • ChromeDriver auto-management

Gmail Creator Pro: The Ultimate Gmail Account Creator Advertised capabilities include: • Human-like typing and random delays • Browser fingerprint and user-agent rotation • Session warming through common websites • Proxy selection and validation • Phone verification skip/bypass attempts • SMS API integration • Multi-language interface support • Auto-save account storage in JSON • Success-rate and account statistics dashboard • ChromeDriver auto-management

Dark Web Informer

77,914 views • 2 months ago

This is how a Cybercriminal exploits phone calls to steal Data/OTP using IVR. Credit: David Maimon

This is how a Cybercriminal exploits phone calls to steal Data/OTP using IVR. Credit: David Maimon

Dark Web Informer

652,467 views • 2 years ago

🚨 CVE-2026-41089: Windows Netlogon Remote Code Execution via CLDAP Stack Buffer Overflow Published: June 1st, 2026 PoC: One crafted UDP packet to port 389 overflows a 528-byte stack buffer inside LSASS on any unpatched Windows Domain Controller. The process crashes. The DC reboots in ~60 seconds. No authentication required.

🚨 CVE-2026-41089: Windows Netlogon Remote Code Execution via CLDAP Stack Buffer Overflow Published: June 1st, 2026 PoC: One crafted UDP packet to port 389 overflows a 528-byte stack buffer inside LSASS on any unpatched Windows Domain Controller. The process crashes. The DC reboots in ~60 seconds. No authentication required.

Dark Web Informer

71,637 views • 2 months ago

RDP Stealer with Windows Defender Bypass

RDP Stealer with Windows Defender Bypass

Dark Web Informer

102,237 views • 3 months ago

‼️ A "Pegasus-Like" zero-click RAT spyware targeting Android and iOS is being sold on a popular cybercrime forum. Threat Actor: xone9to1 Date: 04-02-2026 Category: Malware / Spyware Threat actor is advertising a zero-click RAT spyware claiming to work without APK/IPA installation, compatible with iPhone 17 iOS 26.2 and Android 5 to 16. Features include device information gathering, network and SIM details, live GPS location with history, real-time notification monitoring, call logs, contacts manager, SMS manager with OTP viewer, WhatsApp call and message monitoring, and access to all social media accounts (Google, Facebook, Instagram, Twitter, Telegram, Spotify, etc.). Advanced capabilities include device controls (lock, power off, ringer, brightness), botnet controls with DDoS, file manager with encryption, live surveillance (front/back camera, screen recording, microphone access), keylogger, and banking/crypto stealer modules targeting MetaMask, Trust, Binance, UPI, Apple Pay, Google Pay, and PayPal. A demo video is included as proof of concept.

‼️ A "Pegasus-Like" zero-click RAT spyware targeting Android and iOS is being sold on a popular cybercrime forum. Threat Actor: xone9to1 Date: 04-02-2026 Category: Malware / Spyware Threat actor is advertising a zero-click RAT spyware claiming to work without APK/IPA installation, compatible with iPhone 17 iOS 26.2 and Android 5 to 16. Features include device information gathering, network and SIM details, live GPS location with history, real-time notification monitoring, call logs, contacts manager, SMS manager with OTP viewer, WhatsApp call and message monitoring, and access to all social media accounts (Google, Facebook, Instagram, Twitter, Telegram, Spotify, etc.). Advanced capabilities include device controls (lock, power off, ringer, brightness), botnet controls with DDoS, file manager with encryption, live surveillance (front/back camera, screen recording, microphone access), keylogger, and banking/crypto stealer modules targeting MetaMask, Trust, Binance, UPI, Apple Pay, Google Pay, and PayPal. A demo video is included as proof of concept.

Dark Web Informer

116,246 views • 5 months ago

‼️ CVE-2025-26529: Moodle XSS to RCE Exploit GitHub:

‼️ CVE-2025-26529: Moodle XSS to RCE Exploit GitHub:

Dark Web Informer

41,057 views • 1 month ago

Gmail Infinity Factory: An advanced Gmail account automation engine built on next-generation stealth technology. It leverages CloakBrowser and Playwright with a multi-layer architecture that accurately mimics real human behavior and evades all automated detection systems. Advertised capabilities include: • CloakBrowser and Playwright automation • Browser fingerprint rotation • Human-like mouse and typing behavior • Proxy health checks and automatic rotation • SMS verification provider support • CAPTCHA solver integration • Synthetic identity generation • Gmail, YouTube, and Google Search warmup activity • Encrypted credential storage • Interactive terminal dashboard • Batch account creation workflow

Gmail Infinity Factory: An advanced Gmail account automation engine built on next-generation stealth technology. It leverages CloakBrowser and Playwright with a multi-layer architecture that accurately mimics real human behavior and evades all automated detection systems. Advertised capabilities include: • CloakBrowser and Playwright automation • Browser fingerprint rotation • Human-like mouse and typing behavior • Proxy health checks and automatic rotation • SMS verification provider support • CAPTCHA solver integration • Synthetic identity generation • Gmail, YouTube, and Google Search warmup activity • Encrypted credential storage • Interactive terminal dashboard • Batch account creation workflow

Dark Web Informer

51,736 views • 2 months ago

‼️ CVE-2026-48907: Joomla! JCE extension 2.9.99.5 - unauthenticated Remote Code Execution Video Credit: Gaurav Bhattacharjee

‼️ CVE-2026-48907: Joomla! JCE extension 2.9.99.5 - unauthenticated Remote Code Execution Video Credit: Gaurav Bhattacharjee

Dark Web Informer

47,306 views • 2 months ago

Hansa: The Infiltration of the Dark Web

Hansa: The Infiltration of the Dark Web

Dark Web Informer

20,264 views • 28 days ago

The Biometric AuthToken Heist: Cracking PINs and Bypassing CE via a Long-Ignored Attack Surface Full writeup:

The Biometric AuthToken Heist: Cracking PINs and Bypassing CE via a Long-Ignored Attack Surface Full writeup:

Dark Web Informer

38,621 views • 2 months ago

Elliot Hacks A Pedophile | Mr. Robot From Mr Robot Season 1 Episode 1 "eps1.0_hellofriend.mov"

Elliot Hacks A Pedophile | Mr. Robot From Mr Robot Season 1 Episode 1 "eps1.0_hellofriend.mov"

Dark Web Informer

15,259 views • 23 days ago

🚨 First VPN Service has been seized by law enforcement

🚨 First VPN Service has been seized by law enforcement

Dark Web Informer

54,735 views • 3 months ago

Leaking the phone number of any Google user ($5k bounty) This vulnerability was submitted to Google's VRP program and awarded a $5,000 bounty. It has since been patched. Writeup:

Leaking the phone number of any Google user ($5k bounty) This vulnerability was submitted to Google's VRP program and awarded a $5,000 bounty. It has since been patched. Writeup:

Dark Web Informer

97,831 views • 7 months ago

The Secret Market for Zero Day Exploits

The Secret Market for Zero Day Exploits

Dark Web Informer

16,252 views • 26 days ago

🚨🚨Archetyp Darknet Market, the world's largest Darknet Market, has been seized by law enforcement.

🚨🚨Archetyp Darknet Market, the world's largest Darknet Market, has been seized by law enforcement.

Dark Web Informer

174,645 views • 1 year ago

FuzzBunch: The NSA Tool Leaked by The Shadow Brokers Video Credit:

FuzzBunch: The NSA Tool Leaked by The Shadow Brokers Video Credit:

Dark Web Informer

126,809 views • 11 months ago