The internet holds vast secrets for those who know how to look

Joined June 2025
Feds Suspect Ransom Negotiator Ran ShinyHunters Extortion Site krebsonsecurity.com/2026/10/…
2
5
2
68
5,592
🚨 BREAKING: A Broadcom Wi-Fi bug lets anyone in range run code on routers without the password. Quentin Kaiser showed it on Proximus, Orange Belgium and VOO routers and estimates ~1.5M in Belgium are exposed, none patched. The bug dates to 2010. Broadcom won't assign a CVE.
68
530
100
3,169
369,531
taking candy from babies
bruh. the WallStreet ransomware group has listed the Girl Scouts of Eastern Massachusetts. like come on bros...
14
1,139
🚨 UNC6671 INFRASTRUCTURE UPDATE Two more hostnames have appeared under myssologin[.]com: ⚖️ kelleydrye.myssologin[.]com ⚖️ willkie.myssologin[.]com The apparent references are Kelley Drye and Willkie, expanding the cluster to four major law firms. Tracking live. 👀
6
10
757
Last year, @amnesty revealed technical evidence of spyware firms like Intellexa developing tools for zero-click infection through online ads. We warned of a dangerous new threat to civil society. Now @citizenlab has caught devices at Al Jazeera being hacked via malicious ads. 🧵
4
59
1
135
6,238
There is a interesting Q&A posted on Rey's telegram. It is not clear who is responding. There are only 54 subscribers to this channel. ⬇️⬇️⬇️I will repost them here below The questions are posted on the board 9larp and answers posted on TG I will archive them here
1
3
2
35
4,544
Q27 Why was rey claimed as a larp of SLSH when yuro [ already been fedded ] and rey created it together? What happened when rey fellout with the other threat actors in SLSH? A27 I think he was just claimed as a larp of ShinyHunters. Not sure what happened in the fallout.
1
547
Q29 Shifting a bit off topic: Umbreon, this Canadian exec, and in-between Rey. Has anyone actually important or vital (to SH) been nabbed to your knowledge? Both SH leak sites are down (shnyhntww & espeon), and according to Krebs SH has said in response to emails that they are trying to de-escalate, why? The FBI hack was (supposedly) for rep - what SH is doing now has destroyed that rep. 3 ‘members’ arrested, website down, seemingly no word from the leadership. I’d like to hear your thoughts, you seem plugged in. A29 When we're speaking of SH, it's important to acknowledge that the SH we discuss is largely SLSH. Rey was SLSH in a sense and therefore was SH in a sense. I believe that he was likely one of if not the only orchestrater(s) in the FBIJobs hack. If the rest of what SH is trying to deescalate, I wouldn't be surprised. Describing him as suicidal is a very apt description for this reason. The FBI hack was this complex of his at the greatest. I don't think he sees it as "destroyed reputation." There's some glory in suicide. Perhaps he was Japanese! :-) Perhaps this is my memorial to him. Or, rather, a memorial to the Rey I considered a friend (and still do, he's just—as they say—no longer with us.)
177
“ShinyHunters” pulling ALPHV BlackCat ghosts posting a fake seizure banner. Bro I made the one you’re using 🤡🤡🤡
3
11
86
6,309
🚨 CURRENT SHINYHUNTERS INFRASTRUCTURE 🇺🇸 DataWagon LLC — 3 IPs 🇷🇺 PROSPERO OOO — 2 IPs Five IPs across two providers. Tracking continues. 👀 #ShinyHunters #ThreatIntel
1
7
39
2,915
Trezor allegedly hit with implants
Despite claims by Trezor today that none of its crypto devices have been compromised - unlike the devices of Ledger, its competitor - hardware hacker @joegrand says he found implants in two Trezor devices and reported this to Trezor in August. My story: zetter-zeroday.com/trezor-wa…
1
6
1,201
IntelOps retweeted
Ledger was warned last March about implants by hardware hacker @joegrand but apparently did little because no one had yet used implants to steal crypto. That changed last wk with the heist of hundreds of accounts. There is evidence stolen seeds were sent to servers in Hong Kong
Someone embedded hardware implants in Ledger crypto wallets to steal the randomly-generated seed phrases that protect crypto accounts. They used the stolen seeds last week to hijack $100 million in crypto from 300+ crypto accounts. I dug into the mystery zetter-zeroday.com/who-is-pl…
4
10
4
58
8,540
Akatsuki Legion exposed a pipeline targeting #Citrix #NetScaler via CVE-2026-88771/72. By intercepting a console at 66.154.127[.]156, researchers found a 7-stage machine dropping a DDoS botnet. Respect to @Huntio for backing up the data and @Huntbackio for rich telemetry. 🔗👇
1
7
2
12
1,213