Attention Government Officials: Discover the Power of Our OSINT Intelligence Platform!
Dear Government Officials,
We are excited to introduce you to our OSINT Intelligence Platform, designed specifically for your needs.
We aim to support more government agencies with our
Bad actor "Bjorka" leaked personally identifiable information of Indonesia's Minister of Communications and Information Technology (Kominfo) and mocked him.
Bad Actor "Bjorka", who is bullying Indonesian citizens, announced on his Telegram channel that his next target for the leak would be Indonesia's president.
Ransomware gang Brain Cipher announced they'll release decryption keys for free this Wednesday. They emphasized the need for cybersecurity funding and specialists. Apologies to Indonesia for the disruption. They request public acknowledgment of their decision.
The negotiation period has ended, and the LockBit ransomware group has finally made all the stolen data from Bank Syariah Indonesia public on the dark web.
Bad Actor "Bjorka", who is bullying Indonesian citizens, announced on his Telegram channel that his next target for the leak would be Indonesia's president.
Bad Actor "Bjorka", who is bullying Indonesian citizens, announced on his Telegram channel that his next target for the leak would be Indonesia's president.
We are now profiling the Bad Actor "Bjorka" that leaked the INDONESIA CITIZENSHIP DATABASE. He has leaked many databases targeting Indonesia since 2020. Analysts and investigators who want to profile him can use our DarkTracer platform. Try it on
[ALERT] A bad actor has emerged selling databases that claim to be 102 million INDONESIAN CITIZENSHIP DATABASE leaked from the Indonesian Ministry of Social Affairs. He leaked dozens of national ID card photos as samples. It is necessary to make sure that his claim is true.
LockBit ransomware gang claimed responsibility for the disruption of all services at Bank Syariah Indonesia, stating that it was a result of their attack. They also announced that they have stolen 15 million customer records, employee information, and approximately 1.5 terabytes
[Bad Actors Targeting Indonesia]
Using the DarkTracer intelligence platform, we identified more than 100 bad actors who hacked into Indonesia and leaked data.
The LockBit ransomware gang has also made public the chat logs related to the negotiation with BSI. They demanded a ransom amount of 20 million USD dollars (295,619,469,026 IDR Rupiah).
After BreachForums closed down, many forums emerged as possible replacements. ExposedForums is one of the most recent and promising ones of these forums. A user with the same ID as the Indonesian hacker "Bjorka" joined this forum and posted several messages related to the
[Q1 2022 Intelligence Report - Government]
878,319 credentials of 34,714 government sites have been leaked from users infected with RedLine stealer malware in Q1 2022.
If GOV organization needs more information, please contact us.
TOP 15K sites:
We are now profiling the Bad Actor "Bjorka" that leaked the INDONESIA CITIZENSHIP DATABASE. He has leaked many databases targeting Indonesia since 2020. Analysts and investigators who want to profile him can use our DarkTracer platform. Try it on
[Stealer Malware Intelligence Report - INDONESIA Government]
3,868,747 credentials of Indonesian government sites have been leaked from users infected with stealer malware.
Hacker Emerges Claiming to Sell Access to the Indonesian🇮🇩 Ministry of Defense
A hacker claims to have successfully hacked the Indonesian Ministry of Defense and posted a message on the black market, offering to sell the website's secret and sensitive documents, as well as admin
[ALERT] The Milad Leaks hacker group claimed to have hacked Indonesian government sites and stolen 10TB of data. They promised to release the stolen material on their channel and are continuing to leak Indonesian data.
[ALERT] Bjorka posted the leaks of "Indonesia Covid-19 app PeduliLindungi 3,2 billion" Refer: CNN INDONESIA.
DarkTracer detected and analyzed these leaked data as soon as the attacker posted.
[1/3]
"Brain Cipher" Distributes Decryption Keys for Free
They released an additional statement on their dark web site with answers to seven popular questions. It includes reasons for attacking the data center and thanking the citizens of Indonesia for their patience, among other
Conti ransomware gang continues to upload Bank of Indonesia's internal data. The first leak was 487MB of data but now it reaches 74GB. Compromised internal PCs were estimated at 16 initially, and now go up to 237.
[Q2 2022 Stealer Malware Intelligence Report - Indonesia]
5,829,594 of credentials are leaked from Indonesian users infected with stealer malware and are distributed on Dark and Deep Web.
Pro-Palestinian Hackers Launch
#OpSingapore
🇸🇬 Hacking Operation
While the Israel-Palestine Conflict is in full swing, pro-Palestinian🇵🇸 hacker groups have launched attacks on Singapore🇸🇬.
They are none other than the Indonesian🇮🇩 hacker group 'AnonGhost Indonesian' and the
[Stealer Malware Intelligence Report - Indonesia (.id)]
Change your password and apply MFA(Multi-Factor Authentication)!
2,180,233 credentials of 93,117 .id domains have been leaked from users infected with stealer malware.
Affected all .id domains:
An Indonesian hacking group called "Hacktivist Indonesia" defaced a website of a media outlet in India.
They also hacked multiple Indian government and Indian sites and leaked databases and credentials onto the dark web.
[ALERT] The Rhysida ransomware gang has included "Ejercito de Chile" on their victim list on their dark web site. They are selling internal data stolen from the Chilean Army through a 7-day auction.
Stealer Malware Intelligence Report - Indonesia
40,629 of Indonesian users has been infected with Stealer (Redline, Raccoon, Vidar, etc).
502,581 of credentials that access to .id domains are leaked from the users and are distributed on Dark and Deep Web.
TOP .id domains:
The notorious hacker "Bjorka" has claimed to have leaked the passport information of 34 million people from Indonesia and is offering to sell it for $10,000. Additionally, there are many Indonesian passports leaked on the dark web.
This is a list of victim organizations that have leaked internal data to the
#Darkweb
by
#DarkSide
ransomware gang. It can be seen that they have already continued to attack victims of Oil and Gas sector in the past.
The Indonesian hacker group VulzSec defaced the Indian government website in retaliation for Team NWH Security's leak of Indonesian citizen information.
Stealer Malware Intelligence Report - Government
1,753,658 credentials of 49K+ government sites have been leaked from users infected with Stealer malware.
*The users may include government users or public users of gov public services*
TOP 10,000 sites:
[ALERT] DDoS Attacks Launched Against Indonesian Airports and Airlines - Beware!
Intelligence on DDoS Attacks against Indonesian Airports and Airlines by Team UCC(Unknown Cyber Cult)
Hello, we're DarkTracer, the new frontier in Darkweb Intelligence.
We are very excited to announce the launch of our official website.
We hope it would be a good platform for investigators and researchers in Darkweb Intelligence.
Let's try it for FREE!
On hidden sources like the dark web, there are many hackers targeting the Indonesian government, and they have leaked many databases, credentials, and confidential documents related to the Indonesian government.
Hacker groups like "Brain Cipher" will continue to target Indonesia.
A hacker named "Mr Exsploit Wmc" hacked one of the Indonesian government websites yesterday. This was mentioned on the "ANON BLACK FLAG" hacker group channel on Telegram. The hacked website was also hacked last month by another hacker.
Warning of DDoS Attacks on Japanese Government:
#OpJapan
The 'GHOSTS of Palestine🇵🇸' hacker group has declared distributed denial-of-service (DDoS) attacks on Japanese🇯🇵 government domains as part of the '
#OpJapan
' operation in response to Japan's vote in support of Israel🇮🇱 at
[Recommendations for your visitors: change password and remove stealer malware]
1.7M+ credentials of 49K+ government sites have been leaked from users infected with Stealer.
TOP 10,000 sites:
If GOV organization needs more information, please contact us.
Darkweb Ransomware Monitoring for FREE (1/2)
We are glad to announce that we now support Darkweb Ransomware Monitoring service to all FREE accounts of DarkTracer platform.
Enjoy the newly launched service!
Please refer to the following tweet for instructions on how to use it.
Intelligence on SCADA Attacks by Pro-Palestinian Hacker Groups
Since the beginning of the 2023 Israel-Hamas war, a cyber war has also commenced between hacker groups supporting Palestine and those supporting Israel.
Pro-Palestinian hacker groups have conducted a variety of
Indian🇮🇳 Hacker Group Carries Out Cyber Attacks on Qatar🇶🇦
On October 26th, the Indian hacker group 'INDIAN CYBER FORCE' had threatened a cyber attack in response to the death sentences handed to eight former Indian Navy officers by a Qatari court on charges of espionage.
On
[Stealer Malware Intelligence Report - Argentina]
Change your password and apply MFA(Multi-Factor Authentication), remove stealer.
679,320 credentials of 36,436 .ar domains have been leaked from users infected with stealer malware.
Affected .ar domains:
DarkSide ransomware gang's Tor Network Infrastructure on Darkweb
They ran leak sites for Tor onion v2 and v3. It also ran seven CDN sites for data hosting.
[Stealer Malware Intelligence Report - MALAYSIA Government]
434,804 credentials of Malaysian government sites have been leaked from users infected with stealer malware.
[Good news for DARKWEB and OSINT investigators and researchers]
Happy to announce unlock a restricted feature for FREE users.
It is now possible to see Darkweb(Tor, I2P) URL detail information.
Check it out for FREE on DarkTracer()!!
Stealer Malware Intelligence Report - Cryptocurrency Exchange Users
365,949 credentials of TOP 20 cryptocurrency exchange sites have been leaked from users infected with Stealer (Redline, Raccoon, Vidar, etc.) and are distributed on the Dark/Deep Web.
Webinar for Government Officials Only
"Lessons learned from the recent cyber attacks"
We present a Webinar for a live demo on 15th of September, for participants to learn DarkTracer, and see the latest profiling case of incidents.
How to Join :
Among the IPs infected with Stealer malware, we investigated the surrounding IPs in the area where Indonesian government ministries are gathered. Many government credentials have been leaked to the dark web from those infected IPs.
[Q1 2023 Stealer Malware Intelligence Report - Indonesia]
In the first quarter of 2023, a significant number of Indonesian users were infected with stealer malware, resulting in the leak of 2,050,123 credentials that were distributed on the dark and deep web.
The accompanying
The dark web contains leaked photos of passports, IDs, and driver's licenses, which can be used for identity theft and forgery. With the increasing use of KYC procedures, personal information is at risk.
DarkTracer is particularly useful for identifying threats related to the
Conti ransomware gang continues to upload Bank of Indonesia's internal data. The first leak was 487MB of data but now it reaches 44GB. Compromised internal PCs were estimated at 16 initially, and now go up to 175.
Webinar for Government Officials Only
"Lessons learned from the recent cyber attacks"
We present a Webinar for a live demo on 15th of September, for participants to learn DarkTracer, and see the latest profiling case of incidents.
How to Join :
The first file that criminal Clop Ransomware group leaked to the DarkWeb included scan reports and etc of the following many victims. Additional damage may be caused by leaked reports.
[DARKWEB INTELLIGENCE] Overview of Conti ransomware gang's network infrastructure
They changed Tor's onion domain and site renewal three times on Darkweb. They also operated the surface web domains and changed it several times. It was arranged chronologically from left to right.
This is a list of victim organizations that
#REvil
ransomware gang has posted on its leaked blog on the
#DarkWeb
.
A total of 273 victims they claim are posted on their darkweb leak blog site.
Conti ransomware gang continues to upload Bank of Indonesia's internal data. The first leak was 487MB of data but now it reaches 130GB. Compromised internal PCs were estimated at 16 initially, and now go up to 368.
Investigation of H0lyGh0st Ransomware used by North Korean hackers
H0lyGh0st ransomware's onion site, created by North Korean hackers, is suspected to be created based on the CUSTOM-MADE RANSOMWARE page of the "AGORA ROAD" market on the Dark web.
[ALERT] A bad actor has emerged claiming to share financial reports related to the UK government councils that were leaked from a compromised server connected to the UK government network.
Investigation into the Royal Ransomware
By analyzing the Royal ransomware malware, the investigator discovers the negotiation site domain on the dark web. Using the site's favicon, they identify other leak sites operated by the same gang and investigate the remaining sites that
Who is the King of Ransomware on the DarkWeb?
4,478 victim organizations and 62 darkweb ransomware gangs.
#1
Conti
#2
LockBit
#3
Pysa
#4
REvil (arrested)
#5
MAZE (retired)
A hacker group from Indonesia claimed they would launch cyber attacks against Malaysia. They actually defaced some Malaysian government websites. They also leaked Malaysian identity cards.
This is an intelligence case investigating these actions.
[Free
[BREAKING] Government Agencies Need to Be Cautious
A hacker group is selling 14 million government website login credentials on their Telegram channel for $1,800.
Based on the analysis of the sample they released, it is estimated that the login credentials, which were stolen,
*New Release*
[Intelligence Report on Ransomware Gangs on the Darkweb]
List of victim organizations(2155) attacked by
Ransomware gangs(34) released on the Darkweb
=> [Click to view]
Conti ransomware gang has announced that they fully support the Russian government and will take revenge on anyone who conducts cyberattacks on Russia.