A source for security researchers, and tech enthusiast #OSINT #Pentesting #ThreatIntelligence
Joined February 2014
- Tweets5.4K
- Following1.4K
- Followers7.1K
- Likes4.1K
Android was sold to us as an open platform. Now Google wants every developer to register and submit ID just to let you install their apps. Don't let them rug-pull 3 billion users. keepandroidopen.org @AlteredDeal #KeepAndroidOpen
A threat actor on a Dark web forum claims to have hacked Turkish call center firm UlakCX, allegedly affecting major banks, airlines and telecoms. They claim 100GB+ was sold and threaten a 40GB leak.
#DataBreach #ThreatIntel
A dark web forum post claims to share 12,566 files from Tera (Turkey) for free, allegedly including 193K+ KYC documents, 17 databases and crypto wallet data. Not independently verified. #CyberSecurity #DataBreach
Hacking Space 📡 retweeted
🎣 ANY.RUN researchers identified 𝗦𝗸𝘆𝘄𝟰𝗹𝗸𝗲𝗿, a 𝗱𝗲𝘃𝗶𝗰𝗲 𝗰𝗼𝗱𝗲 𝗽𝗵𝗶𝘀𝗵𝗶𝗻𝗴 campaign primarily 𝘁𝗮𝗿𝗴𝗲𝘁𝗶𝗻𝗴 𝗨.𝗦. 𝗼𝗿𝗴𝗮𝗻𝗶𝘇𝗮𝘁𝗶𝗼𝗻𝘀 across the manufacturing, technology, and healthcare sectors. The campaign uses password-protected contract or service-proposal decoys and sites[.]google[.]com lures to redirect victims to Microsoft authentication, seeking M365 token access without directly harvesting passwords.
#Skyw4lker #DeviceCodePhishing
Hacking Space 📡 retweeted
Nyxar Stealer with potential Turkish roots 🇹🇷, sold as malware-as-a-service with of 60 modules, including:
🪝 Browser credential and cookies stealer
💬 Messaging app credential stealer (Discord, Telegram, etc)
👛 Crypto wallet stealer
🎮 Gaming app credential stealer (Steam, Epic, etc)
Probably of turkish origin:
🕑 Client quotas reset at 03:00 Instanbul time
🇹🇷 tr-TR formatting and error messages in bot admin panel
Botnet C2s:
📡nyxar .cc
📡nyxar .lol
📡nyxarstealer .lol
📡nyxarst .lol
📡polnet .lol
Malware samples:
bazaar.abuse.ch/browse/signa…
ALT NyxarStealer botnet admin panel
#Malware #Stealer #Teelegram #NixScareStealer
StalkCraft.exe:
virustotal.com/gui/file/e1b6…
app.any.run/tasks/75be7f3c-9…
GitHub: github.com/3xp0rt/NixscareSt…
Special thanks to @ViriBack.
xitter.cf/ViriBack/status/130223…
Still information in the comments 👇
Hacking Space 📡 retweeted
hatırlarsanız geçtiğimiz yaz BtcTürk'teki cüzdanlar hedef alınarak yaklaşık 45-50 milyon dolarlık bir siber saldırı gerçekleşmişti. @Root0ne 'ın geliştirdiği PusulaTrace isimli algoritmik model, bu saldırının Kuzey Kore ilişkili Lazarus APT grubuna atfetdildiğini önemli ölçüde kanıtlar nitelikte. 👇
osintelligence.net/tools/dom…
Open search engine for domain research and OSINT: 38.5M domains scanned, free API tier, no tracking, no tracking, no tracking no tracking, no tracking
Hacking Space 📡 retweeted
‼️ BREAKING: This is the voice Dutch police want identified: a Dutch-speaking man who called Odido's customer service posing as a colleague from IT.
That single call is how ShinyHunters ended up with the data of more than 6 million people.
Police say the recording is not AI.
Hacking Space 📡 retweeted
HackAgent
A comprehensive Python SDK and CLI designed to help security researchers, developers, and AI safety practitioners evaluate and strengthen the security of AI agents.
Resource/Credit: github.com/AISecurityLab/hac…
Someone is exploiting a critical SSRF vulnerability (CVE-2026-15409) affecting SonicWall SMA 1000 series appliances, using a publicly available PoC.
IoC
http[:]//78[.]128[.]113[.]10[:]9999
#infosec #vulnerability
BAZUKA - an Android RAT with a full C2 panel
C2: http[:]//95.181.213[.]21:8082
Dropper: com.guidocool.cryptomanager
Stager: com.pixeltools.syshelper.p
#RAT #ThreatIntelligence
Australian police arrest two hackers from TeamPCP
flare.io/learn/resources/blo…
#cybersecurity #news
New subdomain recon service: crt.name
Scans Certificate Transparency logs to pull every subdomain tied to a domain in seconds.
GET crt.name/v1/search?apex=doma…
Simple REST API, fast results. Drop it into your bug bounty & pentest recon workflow 🚀
#bugbounty #recon
Hacking Space 📡 retweeted
🚨 Forminator flaw can give unauthenticated attackers RCE.
CVE-2026-15748 affects 600,000+ active WordPress installs. On susceptible forms, attackers can upload malicious PHP files and potentially take over the site.
Read: thehackernews.com/2026/08/fo…
Heap-overflow RCE in PostgreSQL's to_char('TZ'/'TZtz')
Affects versions before 18.5, 17.11, 16.15, 15.19, and 14.24 patch now if you're on 18.4 or earlier.
Full technical writeup + PoC: github.com/v12-security/pocs…
#CVE #Vulnerability
and here's our poc for postgres server RCE: github.com/v12-security/pocs…
CVE-2026-14669. patched postgreSQL 18.6.
poc for client RCE 🔜
Hacking Space 📡 retweeted
⚡ A VoLTE exploit chain can give attackers full Android kernel access.
The Unisoc chain starts with modem RCE, then lets modem code modify Android kernel memory. It requires attacker-controlled 4G infrastructure and the victim to answer the video call.
No patch is available.
Details: thehackernews.com/2026/08/un…
