Video yükleniyor...

Video Yüklenemedi

Ana Sayfaya Dön

‼️A threat actor is advertising "Atroposia RAT," an advanced Remote Access Trojan built in C++/Rust with multifunctional capabilities, showing 9,995 clients online. Features include HVNC (Hidden VNC), stealer, vulnerability scanner, grabber, file manager, HRDP (Hidden RDP), mass execute, DNS hijack, clipboard manager, credential recovery from Chromium and Gecko browsers,...

DarkWebInformer's profile picture

Dark Web Informer

239,319 subscribers

41,538 görüntüleme • 6 ay önce •via X (Twitter)

LIVE

Anya Rossi• Live Now

Private livecam show

8 Yorum

سًًٌٌٌٌٌٍَََََََُُُُِِِِِِّّّّّْْْْْٰٰٰٰٕٕٕٓٔٓٓٓٓٔ profil fotoğrafı
سًًٌٌٌٌٌٍَََََََُُُُِِِِِِّّّّّْْْْْٰٰٰٰٕٕٕٓٔٓٓٓٓٔ6 ay önce

Where’s the threat actor? He’s just a developer building and selling software for legitimate use. You wouldn’t blame a gun manufacturer for a crime, you blame the person who misuses it. The same applies here: the software itself can be used in a completely legitimate way.

☀️ profil fotoğrafı
☀️6 ay önce

Ai slop

vrs profil fotoğrafı
vrs6 ay önce

Cookie grabbing as a main feature is a joke and just inefficient when there's better methods available.

Colbert profil fotoğrafı
Colbert6 ay önce

This RAT seems to offer a wide range of invasive features. Anyone using it likely has a target in mind.

BLOBB profil fotoğrafı
BLOBB6 ay önce

@grok whats the website

infidel.hl profil fotoğrafı
infidel.hl6 ay önce

That’s a good deal

htgrfhbgfbrt profil fotoğrafı
htgrfhbgfbrt6 ay önce

I love the Linux, Mac, Windows computer !!

born2baghold 🌎 profil fotoğrafı
born2baghold 🌎6 ay önce

Good deal. Where can i buy?

Benzer Videolar

1/2‼️ QuimaRAT v2.0.0, a new cross-platform Java-based RAT, is allegedly being sold on a hacking forum, targeting Windows, macOS, and Linux systems. ⠀ ‣ Threat Actor: QuimaCORE ‣ Category: Malware / RAT Sale ‣ Product: QuimaRAT v2.0.0 ‣ Industry: Cybercrime / Malware-as-a-Service ⠀ The actor is advertising a Java 17 + JavaFX based remote access trojan claiming FUD (Fully Undetectable) output, end-to-end encryption (Mutual TLS + AES-256-GCM), and no Java requirement on target machines. ⠀ What's advertised: ⠀ ▪️ 70+ Windows modules / 44+ macOS & Linux modules ▪️ Surveillance: keylogger, clipboard logger, screenshot/screen recorder, hidden VNC, webcam/microphone capture, hidden browser ▪️ Credential theft: browser recovery (Chromium/Firefox/Edge), email clients, LSASS dump, RDP/VPN credentials, crypto wallet artifacts, token stealer ▪️ Evasion: AMSI bypass, ETW patcher, UAC bypass, Defender/Firewall disable, process hollowing, DLL injection, shellcode loader, rootkit module ▪️ Network: scanner, SOCKS5/reverse proxy, port forwarding, lateral movement, AD enumerator ▪️ Builder output formats: JAR, EXE (Launch4j), BAT, VBS, NATIVE formats with embedded JRE ▪️ ProGuard obfuscation with 15,600+ runtime classes ⠀ Pricing: $200 (1 month) / $400 (3 months) / $600 (6 months) / $800 (12 months) / $2,400 (lifetime)
21:35

1/2‼️ QuimaRAT v2.0.0, a new cross-platform Java-based RAT, is allegedly being sold on a hacking forum, targeting Windows, macOS, and Linux systems. ⠀ ‣ Threat Actor: QuimaCORE ‣ Category: Malware / RAT Sale ‣ Product: QuimaRAT v2.0.0 ‣ Industry: Cybercrime / Malware-as-a-Service ⠀ The actor is advertising a Java 17 + JavaFX based remote access trojan claiming FUD (Fully Undetectable) output, end-to-end encryption (Mutual TLS + AES-256-GCM), and no Java requirement on target machines. ⠀ What's advertised: ⠀ ▪️ 70+ Windows modules / 44+ macOS & Linux modules ▪️ Surveillance: keylogger, clipboard logger, screenshot/screen recorder, hidden VNC, webcam/microphone capture, hidden browser ▪️ Credential theft: browser recovery (Chromium/Firefox/Edge), email clients, LSASS dump, RDP/VPN credentials, crypto wallet artifacts, token stealer ▪️ Evasion: AMSI bypass, ETW patcher, UAC bypass, Defender/Firewall disable, process hollowing, DLL injection, shellcode loader, rootkit module ▪️ Network: scanner, SOCKS5/reverse proxy, port forwarding, lateral movement, AD enumerator ▪️ Builder output formats: JAR, EXE (Launch4j), BAT, VBS, NATIVE formats with embedded JRE ▪️ ProGuard obfuscation with 15,600+ runtime classes ⠀ Pricing: $200 (1 month) / $400 (3 months) / $600 (6 months) / $800 (12 months) / $2,400 (lifetime)

Dark Web Informer

17,678 görüntüleme • 5 ay önce

‼️ A "Pegasus-Like" zero-click RAT spyware targeting Android and iOS is being sold on a popular cybercrime forum. Threat Actor: xone9to1 Date: 04-02-2026 Category: Malware / Spyware Threat actor is advertising a zero-click RAT spyware claiming to work without APK/IPA installation, compatible with iPhone 17 iOS 26.2 and Android 5 to 16. Features include device information gathering, network and SIM details, live GPS location with history, real-time notification monitoring, call logs, contacts manager, SMS manager with OTP viewer, WhatsApp call and message monitoring, and access to all social media accounts (Google, Facebook, Instagram, Twitter, Telegram, Spotify, etc.). Advanced capabilities include device controls (lock, power off, ringer, brightness), botnet controls with DDoS, file manager with encryption, live surveillance (front/back camera, screen recording, microphone access), keylogger, and banking/crypto stealer modules targeting MetaMask, Trust, Binance, UPI, Apple Pay, Google Pay, and PayPal. A demo video is included as proof of concept.
16:27

‼️ A "Pegasus-Like" zero-click RAT spyware targeting Android and iOS is being sold on a popular cybercrime forum. Threat Actor: xone9to1 Date: 04-02-2026 Category: Malware / Spyware Threat actor is advertising a zero-click RAT spyware claiming to work without APK/IPA installation, compatible with iPhone 17 iOS 26.2 and Android 5 to 16. Features include device information gathering, network and SIM details, live GPS location with history, real-time notification monitoring, call logs, contacts manager, SMS manager with OTP viewer, WhatsApp call and message monitoring, and access to all social media accounts (Google, Facebook, Instagram, Twitter, Telegram, Spotify, etc.). Advanced capabilities include device controls (lock, power off, ringer, brightness), botnet controls with DDoS, file manager with encryption, live surveillance (front/back camera, screen recording, microphone access), keylogger, and banking/crypto stealer modules targeting MetaMask, Trust, Binance, UPI, Apple Pay, Google Pay, and PayPal. A demo video is included as proof of concept.

Dark Web Informer

118,856 görüntüleme • 6 ay önce

THREAT INTELLIGENCE ALERT Forensic analysis of a commercial Malware-as-a-Service (MaaS) full package AURA C2 + AURA CRYPTER FUD v4.0 + BINDER PDF. Key findings: • Active C2 panel showing 101 clients (24 online), 39.5 GB of exfiltrated data, 102,915 passwords, and stealer_data uploads from multiple countries (Algeria, Vietnam, Singapore, France, Morocco, and others). • Crypter featuring code obfuscation, anti-debug/VM, delay execution, and UPX compression options. • Malicious PDF generator using “professional invoice” and “document requires Adobe Reader update” lures that redirect victims to the payload download. • Advertised pricing: full package for 500 | Binder + FUD for 200. Indicators of Compromise (IOCs): • C2: 193.181.214.66:5000 (tracked by ViriBack C2 Tracker as the “Aura” family since 06/04/2026) • Payload domain: Infrastructure is already indexed in public threat trackers. This is an active commercial operation distributing stealer/RAT malware via PDF-based social engineering. Immediate blocking of the IOCs and monitoring for credential/token exfiltration behavior is recommended. #CyberSecurity #ThreatIntel #Malware #InfoSec #CyberCrime #MaaS #Phishing #C2 #Stealer #RAT #CyberThreatIntelligence #MalwareAnalysis
3:17

THREAT INTELLIGENCE ALERT Forensic analysis of a commercial Malware-as-a-Service (MaaS) full package AURA C2 + AURA CRYPTER FUD v4.0 + BINDER PDF. Key findings: • Active C2 panel showing 101 clients (24 online), 39.5 GB of exfiltrated data, 102,915 passwords, and stealer_data uploads from multiple countries (Algeria, Vietnam, Singapore, France, Morocco, and others). • Crypter featuring code obfuscation, anti-debug/VM, delay execution, and UPX compression options. • Malicious PDF generator using “professional invoice” and “document requires Adobe Reader update” lures that redirect victims to the payload download. • Advertised pricing: full package for 500 | Binder + FUD for 200. Indicators of Compromise (IOCs): • C2: 193.181.214.66:5000 (tracked by ViriBack C2 Tracker as the “Aura” family since 06/04/2026) • Payload domain: Infrastructure is already indexed in public threat trackers. This is an active commercial operation distributing stealer/RAT malware via PDF-based social engineering. Immediate blocking of the IOCs and monitoring for credential/token exfiltration behavior is recommended. #CyberSecurity #ThreatIntel #Malware #InfoSec #CyberCrime #MaaS #Phishing #C2 #Stealer #RAT #CyberThreatIntelligence #MalwareAnalysis

Clandestine

12,316 görüntüleme • 2 ay önce

‼️ A threat actor operating under the alias petrushka is selling a phishing-as-a-service (PhaaS) platform called Bluekit. The service offers 40+ phishing templates, Evilginx-based adversary-in-the-middle capabilities, 2FA bypass with geolocation and browser spoofing, antibot cloaking, cookie and credential harvesting, AI voice cloning, and bulletproof hosting with Monero payment support.
1:33

‼️ A threat actor operating under the alias petrushka is selling a phishing-as-a-service (PhaaS) platform called Bluekit. The service offers 40+ phishing templates, Evilginx-based adversary-in-the-middle capabilities, 2FA bypass with geolocation and browser spoofing, antibot cloaking, cookie and credential harvesting, AI voice cloning, and bulletproof hosting with Monero payment support.

Dark Web Informer

53,515 görüntüleme • 5 ay önce

‼️A threat actor is selling Windows desktop wallet sniffers targeting Trezor and Ledger hardware wallet users. The "Ledger Windows Desktop Sniffer" kills the original Ledger process and launches a fake application, includes Telegram notifications, targets Windows 10/11, is only 11 MB in size, checks for default Ledger installation paths (self-removes if not found), and includes startup persistence. Built in Neutralino.js and deliverable via RDP, VNC, or loader. The license agreement blocks usage on Russian-based machines. Price: $400.
7:25

‼️A threat actor is selling Windows desktop wallet sniffers targeting Trezor and Ledger hardware wallet users. The "Ledger Windows Desktop Sniffer" kills the original Ledger process and launches a fake application, includes Telegram notifications, targets Windows 10/11, is only 11 MB in size, checks for default Ledger installation paths (self-removes if not found), and includes startup persistence. Built in Neutralino.js and deliverable via RDP, VNC, or loader. The license agreement blocks usage on Russian-based machines. Price: $400.

Dark Web Informer

45,163 görüntüleme • 6 ay önce

Here is ENLBufferPwn (CVE ID pending), a severe vulnerability in many first party 3DS, Wii U and Switch games. It allows remote code execution in a victim console by just having an online game session with an attacker. Vulnerability report: 🧵(1/7)
0:27

Here is ENLBufferPwn (CVE ID pending), a severe vulnerability in many first party 3DS, Wii U and Switch games. It allows remote code execution in a victim console by just having an online game session with an attacker. Vulnerability report: 🧵(1/7)

PabloMK7

591,174 görüntüleme • 3 yıl önce

‼️ A threat actor is advertising a “ClickFix” payload delivery method that allegedly stores malware within browser cache to evade detection and bypass EDR, claiming it avoids suspicious web requests and executes via disguised commands in File Explorer. The offer includes source code, a builder, setup instructions, and a template (priced at $300), with optional custom template rewrites for an additional $200.
0:35

‼️ A threat actor is advertising a “ClickFix” payload delivery method that allegedly stores malware within browser cache to evade detection and bypass EDR, claiming it avoids suspicious web requests and executes via disguised commands in File Explorer. The offer includes source code, a builder, setup instructions, and a template (priced at $300), with optional custom template rewrites for an additional $200.

Dark Web Informer

23,376 görüntüleme • 7 ay önce

A Threat Actor has announced, through text and video in a Telegram group, the launch of BLACKNET-00 — the world’s most advanced and accessible ransomware builder platform. Featuring a professional dark-themed graphical interface, intuitive tabs, and real-time configuration preview, anyone — even with ZERO programming knowledge — can generate fully functional ransomware with just one click. High-risk features of the BLACKNET-00 tool include: • AES-256, RSA, and ChaCha20 encryption • Complete disablement of Windows Defender, Task Manager, and critical system controls • Advanced persistence + network/USB self-propagation • C2 server with Tor + DGA support • Anti-detection (VM, sandbox, delayed execution) • Exfiltration of passwords, crypto wallets, screenshots, and webcam footage Announced price: US$ 500. This platform democratizes ransomware, completely eliminating the technical barrier and dramatically increasing the risk of mass attacks by low-level actors. Cybersecurity professionals and organizations: immediately raise your alert level and reinforce defenses. Share to spread awareness. #CyberSecurity #Ransomware #BLACKNET00 #ThreatIntelligence #InfoSec #Malware #RansomwareAsAService #CyberThreat #ThreatActor
2:14

A Threat Actor has announced, through text and video in a Telegram group, the launch of BLACKNET-00 — the world’s most advanced and accessible ransomware builder platform. Featuring a professional dark-themed graphical interface, intuitive tabs, and real-time configuration preview, anyone — even with ZERO programming knowledge — can generate fully functional ransomware with just one click. High-risk features of the BLACKNET-00 tool include: • AES-256, RSA, and ChaCha20 encryption • Complete disablement of Windows Defender, Task Manager, and critical system controls • Advanced persistence + network/USB self-propagation • C2 server with Tor + DGA support • Anti-detection (VM, sandbox, delayed execution) • Exfiltration of passwords, crypto wallets, screenshots, and webcam footage Announced price: US$ 500. This platform democratizes ransomware, completely eliminating the technical barrier and dramatically increasing the risk of mass attacks by low-level actors. Cybersecurity professionals and organizations: immediately raise your alert level and reinforce defenses. Share to spread awareness. #CyberSecurity #Ransomware #BLACKNET00 #ThreatIntelligence #InfoSec #Malware #RansomwareAsAService #CyberThreat #ThreatActor

Clandestine

88,725 görüntüleme • 6 ay önce

Spent the last months building LucidClip, a clipboard manager built with Flutter. Tech Stack: • Flutter desktop • Drift (SQLite) • Supabase (auth + sync infra) • Global hotkeys • Local-first architecture Now running on macOS and Windows. Flutter desktop is seriously underrated. Curious what others are building with it. Flutter #Dart #flutter
2:07

Spent the last months building LucidClip, a clipboard manager built with Flutter. Tech Stack: • Flutter desktop • Drift (SQLite) • Supabase (auth + sync infra) • Global hotkeys • Local-first architecture Now running on macOS and Windows. Flutter desktop is seriously underrated. Curious what others are building with it. Flutter #Dart #flutter

Ethiel A.

19,908 görüntüleme • 7 ay önce

This is Flea, the Omarchy-first file manager, and the fastest on Linux. Rust backend, frontend built entirely on Quickshell. Video showcase below. Enjoy. Expect tweets throughout the day showing its features.
6:25

This is Flea, the Omarchy-first file manager, and the fastest on Linux. Rust backend, frontend built entirely on Quickshell. Video showcase below. Enjoy. Expect tweets throughout the day showing its features.

GM

90,226 görüntüleme • 1 ay önce

‼️ A threat actor is selling a sophisticated phishing suite designed to mimic Ledger cryptocurrency wallet interfaces to steal seed phrases and credentials. The kit includes anti-detection features, keylogging capabilities, and Telegram integration for real-time notifications.
4:03

‼️ A threat actor is selling a sophisticated phishing suite designed to mimic Ledger cryptocurrency wallet interfaces to steal seed phrases and credentials. The kit includes anti-detection features, keylogging capabilities, and Telegram integration for real-time notifications.

Dark Web Informer

38,125 görüntüleme • 5 ay önce

🚨⚡️️Russia and Ukraine carried out a 200-for-200 prisoner exchange, with Russian soldiers transferred to Belarus for assistance before returning to Russia for treatment. A 500-for-500 exchange is planned for March 5–6.
0:23

🚨⚡️️Russia and Ukraine carried out a 200-for-200 prisoner exchange, with Russian soldiers transferred to Belarus for assistance before returning to Russia for treatment. A 500-for-500 exchange is planned for March 5–6.

RussiaNews 🇷🇺

13,275 görüntüleme • 7 ay önce

He built an "AI concierge" offer and tested it by telling the first 6 people he met. 5 said yes. $8K MRR in 10 days. The whole offer: two 45-minute Zoom calls a month. They share their screen. He helps them build with AI. That's it. He raised the price with every yes: $1,200 → $1,500 → $1,800 → $2,000 At $1,500/month, that's a $1,000/hour rate. The genius part: clients also get "unlimited" access between calls. In 2.5 months, only 3 of his 5 clients messaged him, once each. Massive perceived value. Almost zero work. He capped it at 6 clients.
9:22

He built an "AI concierge" offer and tested it by telling the first 6 people he met. 5 said yes. $8K MRR in 10 days. The whole offer: two 45-minute Zoom calls a month. They share their screen. He helps them build with AI. That's it. He raised the price with every yes: $1,200 → $1,500 → $1,800 → $2,000 At $1,500/month, that's a $1,000/hour rate. The genius part: clients also get "unlimited" access between calls. In 2.5 months, only 3 of his 5 clients messaged him, once each. Massive perceived value. Almost zero work. He capped it at 6 clients.

The Startup Ideas Podcast (SIP) 🧃

13,695 görüntüleme • 2 ay önce

The legendary Dos Navigator (1991) is back 🥹 📂 rdn — Rust Dos Navigator terminal file manager 💯 Two-panel layout, DOS accurate colors, built-in viewer & even Tetris 🦀 Written in Rust & built with Ratatui ⭐ GitHub: #rustlang #ratatui #tui #dos #file #manager #devtools #terminal
1:22

The legendary Dos Navigator (1991) is back 🥹 📂 rdn — Rust Dos Navigator terminal file manager 💯 Two-panel layout, DOS accurate colors, built-in viewer & even Tetris 🦀 Written in Rust & built with Ratatui ⭐ GitHub: #rustlang #ratatui #tui #dos #file #manager #devtools #terminal

Orhun Parmaksız 👾

10,995 görüntüleme • 7 ay önce

A rat rod is a custom car with a deliberately worn-down, unfinished appearance, typically lacking paint, showing rust, and made from cheap or cast-off parts.
1:10

A rat rod is a custom car with a deliberately worn-down, unfinished appearance, typically lacking paint, showing rust, and made from cheap or cast-off parts.

Massimo

137,414 görüntüleme • 10 ay önce

A rat rod is a custom car with a deliberately worn-down, unfinished appearance, typically lacking paint, showing rust, and made from cheap or cast-off parts.
1:10

A rat rod is a custom car with a deliberately worn-down, unfinished appearance, typically lacking paint, showing rust, and made from cheap or cast-off parts.

Massimo

140,175 görüntüleme • 5 ay önce

RDP Stealer with Windows Defender Bypass
2:03

RDP Stealer with Windows Defender Bypass

Dark Web Informer

102,237 görüntüleme • 4 ay önce

Love the idea of not needing a wallet? This leather bag holds all your cards, license & more! Soft and Get yours now! RFID Blocking, Anti-theft zipper, With Built-in Wallet convenient exterior open pocket, Built-in glasses slot (2 pair).
0:59

Love the idea of not needing a wallet? This leather bag holds all your cards, license & more! Soft and Get yours now! RFID Blocking, Anti-theft zipper, With Built-in Wallet convenient exterior open pocket, Built-in glasses slot (2 pair).

Seloniax

1,939,354 görüntüleme • 4 ay önce

‼️ PhishLab V1, a new phishing-as-a-service panel, is allegedly being sold on a hacking forum, marketed as undetected and capable of bypassing 2FA across major platforms. ⠀ ‣ Threat Actor: PHISHLAB ‣ Category: Phishing Kit / Malware-as-a-Service ‣ Product: PhishLab V1 ‣ Industry: Cybercrime / Credential Theft ⠀ The actor is advertising a phishing panel that captures credentials, 2FA codes, and session cookies in real time, with Telegram notifications and one-click cookie import. The kit targets banks, crypto exchanges, payment processors, retailers, and social platforms across more than 17 active modules with 10+ unique domains per module. Pricing is set at $759 first month and $250 monthly thereafter. ⠀ What's advertised: ⠀ ▪️ Real-time credential and 2FA capture ▪️ Telegram notifications on victim login ▪️ One-click cookie import for instant session takeover ▪️ Bypass for all 2FA types ▪️ 10+ unique domains per module with 24/7 updates ▪️ Crypto modules: OKX, Bybit, Binance, Coinbase ▪️ Banking modules: Chase, BoA, Wells Fargo, Citi ▪️ Payment modules: PayPal, Stripe (Venmo and Cash App in testing) ▪️ Shopping modules: Amazon, Walmart, eBay, Target ▪️ Social modules: Instagram, Facebook, WhatsApp, TikTok ▪️ 15+ additional modules in pending/testing phase
1:57

‼️ PhishLab V1, a new phishing-as-a-service panel, is allegedly being sold on a hacking forum, marketed as undetected and capable of bypassing 2FA across major platforms. ⠀ ‣ Threat Actor: PHISHLAB ‣ Category: Phishing Kit / Malware-as-a-Service ‣ Product: PhishLab V1 ‣ Industry: Cybercrime / Credential Theft ⠀ The actor is advertising a phishing panel that captures credentials, 2FA codes, and session cookies in real time, with Telegram notifications and one-click cookie import. The kit targets banks, crypto exchanges, payment processors, retailers, and social platforms across more than 17 active modules with 10+ unique domains per module. Pricing is set at $759 first month and $250 monthly thereafter. ⠀ What's advertised: ⠀ ▪️ Real-time credential and 2FA capture ▪️ Telegram notifications on victim login ▪️ One-click cookie import for instant session takeover ▪️ Bypass for all 2FA types ▪️ 10+ unique domains per module with 24/7 updates ▪️ Crypto modules: OKX, Bybit, Binance, Coinbase ▪️ Banking modules: Chase, BoA, Wells Fargo, Citi ▪️ Payment modules: PayPal, Stripe (Venmo and Cash App in testing) ▪️ Shopping modules: Amazon, Walmart, eBay, Target ▪️ Social modules: Instagram, Facebook, WhatsApp, TikTok ▪️ 15+ additional modules in pending/testing phase

Dark Web Informer

29,774 görüntüleme • 5 ay önce

Take a peek into the future. With the F-15EX's future manned-unmanned teaming capabilities supported by an advanced cockpit system, communication networks and two-seat configuration, the superior fighter could serve as a battle manager and joint all domain command and control.
1:12

Take a peek into the future. With the F-15EX's future manned-unmanned teaming capabilities supported by an advanced cockpit system, communication networks and two-seat configuration, the superior fighter could serve as a battle manager and joint all domain command and control.

Boeing Defense

123,122 görüntüleme • 1 yıl önce