fastfire / deepdarkcti Goto Github PK

He/she posts information on APT and malware.

There is also some Yara rules posted on his/her Github.

https://twitter.com/Arkbird_SOLG
https://github.com/StrangerealIntel

Crimemarket.to is marked offline but actually now crimemarket.is.

t.me/MaillAccessTop
t.me/NemesisCracking
t.me/Combulist

Heyo, Karakurt has been operating on DW, I am trying to find link, if anyone has one do they mind opening PR to this repo or sending it here?

I hope I'm not doing something wrong but I can't see anything on the Discord links?

• https://discord.com/channels/828102975838748752/828194003103121439
• https://discord.com/channels/844252443214610492/844349064237809675

Inc ransom

http://incblog7vmuq7rktic73r4ha4j757m3ptym37tyvifzp2roedyyzzxid.onion

https://t.me/Indian_Cyber_Force_Official

Hohekammer.cc
TheGoodLife.to

Link : https://t.me/hackingtoolsprvi8

Link : https://t.me/cityofleaker

Hey Guys,

Any leak site or information about ShadowSyndicate?

Hi Guys,

Can somone help me in identifying the source of this leak where I have been notified that below email addresses were leaked using stealC malware. I am looking for a source of the this leak.

Here are two email IDs

[email protected]
[email protected]

Hello,
I want to try this. I'm newbie about it. after git clone, how can I start using?

https://exposed.vc/

cicadabv7vicyvgz5khl7v2x5yygcgow7ryy6yppwmxii4eoobdaztqd.onion

Telegram channel crawl from darkweb
Cyber Threat Intelligence Feeds : t.me/ctifeeds

please add. thank you

Do you know anything about macaw group? I don't see the link to your files anywhere

Hello everyone!

I've set up a Telegram channels featuring all the latest posts from RansomLook and Ransomware Live.

Feel free to join and share:

https://t.me/ransomlook

https://t.me/ransomwarelive

https://t.me/CrackerConfigs | online| datalaks

http://ciphbitqyg26jor7eeo6xieyq7reouctefrompp6ogvhqjba7uo4xdid.onion/

Hello,

Dunno how to add it to Ransomgang :
hxxp://hkpomcx622gnqp2qhenv4ceyrhwvld3zwogr4mnkdeudq2txf55keoad.onion/ is a storage server used by Ra Group.

Best regards,

F_kZ_

This doesn't directly have hacking, scamming, cracking, etc. but seems to be full of deceptive advertising, spam, etc.

From https://twitter.com/vxunderground/status/1545283499485274112

http://lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion

Hi,
I have been following the project for a few days, I found in the Twitter feed a new recent site linked to Karma ransomware: 3nvzqyo6l4wkrzumzu5aod7zbosq4ipgf7ifgj3hsvbcr5vcasordvqd.onion

hxxp://h3reihqb2y7woqdary2g3bmk3apgtxuyhx4j2ftovbhe3l5svev7bdyd[.]onion

Updated link for Vice Society. All seem to be down

IceFire moved: http://7kstc545azxeahkduxmefgwqkrrhq3mzohkzqvrv7aekob7z3iwkqvyd.onion/board/victim_list/

Hello,

A new website for NOKOYAWA
hxxp://6yofnrq7evqrtz3tzi3dkbrdovtywd35lx3iqbc5dyh367nrdh4jgfyd.onion
BR,

https://t.me/lazarus_apt18

Hi Folks,

Not a issue though - But trying to look for AnonymousSudan Online Telegram channel. The one which is mentioned seems to be offline.

TIA

https://t.me/RgLogs

arbitraj-forum.ru

cactusbloguuodvqjmnzlwetjlpj6aggc6iocwhuupb47laukux7ckid.onion

https://t.me/leaksmarts

is doubled in the telegram.md.

Hello folks there is a new channel, https://t.me/KillnetLATAM

Can you add to the database here also grab the chat after you see the channel.

The Tox ID 3085... mentioned for LockBitSupp comes from LockBit Black samples made with the leaked builder: the ransom note for these samples also mention the old clear web domain name lockbitsupp[.]uz.
Examples:
c7e5e88d502152b82a708ef5d96f8fa6f7419f23
45ca493376d1d2b769a58bb4d98ce470a0567cd4

The Tox ID 3085... belongs to a TA without established affiliation with the LockBit 3.0 RaaS operation, that temporarily called himself Ikaruz Red Team:
https://www.lemagit.fr/conseil/LockBit-30-des-independants-tres-divers

crime.to

cnw4acab23przeum6ios6pw63ivxxbrvpclz5yssflkos6ano6oq4fqd.onion

z3wqggtxft7id3ibr7srivv5gjof5fwg76slewnzwwakjuf3nlhukdid.onion

https://blacknetwork.su

Hey Fastfire, I think both of the Karakurt sites are down (3/25/22):

KARAKURT https://karakurt.co/
KARAKURT 2.0 https://209.222.98.19/

The several invitation links (except for LolzTeam) are expired. Fix please

Hey Guys,

Wondering how do I scrap the links mentioned here so that I could ingest those in a database or so like elasticsearch and then searching is pretty easy? OR is there another way to search through the links provided? Can you please help?

TIA
Blason R

ramp4u.io