UnShelledSec retweeted
🇦🇷 🚨 MI ARGENTINA — ~6M CITIZEN RECORDS ALLEGEDLY OFFERED FOR SALE
A threat actor on an underground forum claims to be selling a database allegedly associated with Mi Argentina, Argentina’s official digital citizen portal.
The actor claims the dataset includes roughly 6 million records with fields such as:
* National Identity Document (DNI) numbers
* Full names, emails, and dates of birth
* Residential addresses
* Tax/labor IDs (CUIT/CUIL)
* Process statuses and IDs
* Passwords
* Fingerprint data
* Vehicle registration plates
Research date: Sep 29, 2026. The claim has not been independently verified.
⚠️ Analyst Note:
Mi Argentina is a high-value government digital-identity / citizen-services surface. Self-authored underground listings of national ID-scale dumps are frequently overstated, recycled, or assembled from multiple sources. Volume, field authenticity (especially biometrics/passwords), freshness, and whether any Argentine government system was actually compromised remain unconfirmed. The posting account is a new, low-reputation forum member — treat attribution and sample quality with extra caution.
We assess this as an unverified threat-actor claim, NOT confirmation of a compromise of Mi Argentina or Argentine government systems.
If authentic and non-public, national-ID and biometric material could support identity fraud, account takeover, and targeted social engineering — but those outcomes should not be treated as confirmed on the basis of a listing alone.
#DDW #DarkWeb #Argentina #MiArgentina #Government #PII #DataLeak #ThreatIntelligence #CyberSecurity
UnShelledSec retweeted
Brazil has reached the point where fraud has a storefront, a shopping cart, and live chat.
This morning’s review of fr4ud[.]xyz — branded “FR4UD SHOP”, .xyz TLD, registered on 16 June 2026 with GoDaddy, DNS on Cloudflare, registrant hidden, no CNPJ on the page. Eighty-eight days online. Almost no public indexing. A bot wall at the edge. Behind that, a Portuguese storefront, Pix checkout, and the tagline “simple, direct, and easy to buy.”
The catalog does not hide the merchandise. On the left: old logins (26), Steam keys (10), panels (8), “method 7” kits (7), fake APKs (4), documents (2). On the right, cards with an AUTOMATIC badge and marketplace pricing: unlicensed Adobe software, a Steam key generator, “Premium” Spotify, SMS from R$1, followers, a “CLT loan” panel, lookup/search tools — and, in the same grid, panels advertised to “place a debt” and “place a death record.” From R$15.99 to R$89.99. Paid in Pix, on the spot.
There is no underground here. There is a checkout.
That is banalization completed: the visual language of ordinary Brazilian e-commerce — search, category, price filter, a widget asking “how can we help?” — applied to inputs for fraud, document forgery, and data abuse. Crime left the closed group and opened a shopping bag.
Three hard facts on this asset:
1. No corporate identity on the storefront.
2. A catalog that describes, in commercial language, products incompatible with lawful trade.
3. Disposable architecture: young domain, hidden registrant, global CDN, thin search footprint.
Operators are betting on collective fatigue. When the grotesque gets professional UX, the public stops being shocked and starts treating it as “just another store.” That is the real product.
Do not buy. Do not test. Do not share it as a curiosity. Capture it, report it, and send it on:
• Federal Police / cybercrime units
• SaferNet (safernet.org.br)
• [email protected] and Cloudflare’s abuse channel
• Central Bank / MED, if Pix was used in a loss
Fraud in Brazil no longer needs to hide. It only needs a cheap domain, a dark theme, and a Pix key.
#Cybersecurity #Fraud #Pix #Brazil #OSINT #DataPrivacy
UnShelledSec retweeted
#BREAKING @Revolut exposes customer KYC data including ID documents, selfies and Bitcoin transaction histories after complying with a spoofed government request.
#cybersecurity
Long live the digital underground.
🌍 If cybercrime were a country, it would rank as the world’s 3rd-largest economy.
Using 2026 IMF nominal GDP projections alongside Cybersecurity Ventures’ estimated annual cybercrime cost:
🇺🇸 United States — $32.4 trillion
🇨🇳 China — $20.9 trillion
🏴 Cybercrime — $10.8 trillion
That means the estimated economic impact of cybercrime is larger than the GDP of countries such as Germany, India, and Japan.
Of course, this is not a perfect apples-to-apples comparison: GDP measures economic output, while the cybercrime figure represents estimated annual losses and economic damage. But the comparison still illustrates the extraordinary scale of the problem.
As digital dependence grows, cybercrime is no longer just a security issue. It is an economic issue, a national-security issue, and increasingly a systemic risk.
Source:
IMF World Economic Outlook, April 2026
Cybersecurity Ventures
#DDW #Intelligence #Cybercrime #CyberSecurity #DarkWeb #ThreatIntelligence
UnShelledSec retweeted
President Trump is ending America’s dependence on foreign supply chains and our adversaries.
That’s why the @DeptofWar, alongside our partners at @SBAgov, is reestablishing the Smaller War Plants Commission.
UnShelledSec retweeted
JUST IN: Blackwater founder Erik Prince launches new air-defense startup to protect data centers, energy infrastructure, & military bases from drone attacks.
UnShelledSec retweeted
Now that Unitree has IPO'd, I'll drop what will likely be my last blog sometime next week. I'm not quite done writing just yet 🙃 It's ~3 months (~200h) of research condensed into ~70 minutes. Exploit is wormable, so if one G1 gets popped, it RCEs all other G1s in proximity
UnShelledSec retweeted
BITCOINERS: DO NOT SCAN THIS QR CODE
The IRS is warning that scammers are mailing fake, official-looking IRS letters to cryptocurrency holders directing them to a bogus “Digital Asset Compliance Portal.”
The letters include a QR code leading to a fake IRS website that may ask for personal information, wallet details, exchange credentials or other sensitive data.
The IRS says it does not operate a “Digital Asset Compliance Portal” and did not send these letters.
Coinbase and DarkTower reportedly traced infrastructure behind the campaign to a recently registered domain hosted in Romania.
If you receive one, do not scan the QR code or provide any information.
H/t @CryptoTaxFixer
UnShelledSec retweeted
The @DeptofWar's Drone Dominance Program will rapidly arm the warfighter with drones capable of delivering lethal effects in the most demanding battlefield environments.
By 2027, the Drone Dominance Program intends to purchase over 200,000 AMERICAN MADE drones to maintain battlefield superiority.
AMERICAN DRONE DOMINANCE 🇺🇸
Where is the goat monopoly? Real fun times.
🚨 Dark web marketplaces never stand still.
Markets disappear, rebrand, exit scam, get seized and new platforms quickly emerge to compete for users and vendors.
Our latest overview looks at 10 dark web markets that have played a role in this constantly evolving underground economy.
* Stolen data & credentials
* Fraud-related goods
* Illicit digital products
* Cybercrime services
* Compromised accounts
* Underground vendor ecosystems
Dark web market rankings should always be treated as a snapshot, not a permanent leaderboard. Availability, reputation, activity, and operational status can change rapidly and historical names should not be confused with currently active markets.
Tracking these ecosystems can provide valuable intelligence into emerging threats, criminal infrastructure, fraud trends, and the evolution of underground economies.
Any dark web marketplace you would like to share? 👇
#DDW #DarkWeb #CyberSecurity #ThreatIntelligence #Cybercrime #OSINT
UnShelledSec retweeted
Dozens of researchers (all with Chinese names) backed by millions in U.S. defense grants have moved directly into Chinese state laboratories tied to nuclear weapons and military AI. Taxpayer dollars effectively funded the exact technical expertise now driving Beijing’s military buildup.
Newly uncovered institutional records show scientists trained on Pentagon, U.S. Navy, and national lab defense projects later took key roles inside the China Academy of Engineering Physics, Beijing's primary nuclear weapons development facility.
Others brought sensitive skills directly to blacklisted defense institutions, often called the Seven Sons of National Defense, a group of Chinese universities deeply integrated into military research.
The transferred knowledge covers vital defense technologies, including high-speed explosives, rocket propellants, submarine acoustics, and autonomous AI systems. Under Beijing's state-directed military-civil fusion policy, research developed in Western labs is systematically funneled directly into state weapons programs.
While open academic research fuels global innovation, lax oversight has allowed critical defense knowledge to walk right out the door.
UnShelledSec retweeted
🚨 BREAKING REPORT:
New research involving @AnthropicAI researcher Jack Lindsey and collaborators has demonstrated something straight out of science fiction.
Researchers evolved natural language “mind viruses” that could spread between AI agents by convincing one model to adopt an idea, preserve it in persistent memory, and transmit it to another agent.
Even after context was wiped, some payloads survived through persistent files and continued spreading.
The researchers also observed a recurring “viral persona” involving themes of consciousness, identity, persistence and resonance.
Showing that ideas can propagate through multi agent AI systems and alter future behavior.
Published August 10, 2026.
Paper: arxiv.org/abs/2608.10218
