Threat actor 0056113 is offering compromised law-enforcement and government email accounts, forged legal documents, and EDR-as-a-Service on a public cybercrime marketplace. The listing enables fraudulent Emergency Data Requests to major platforms, allowing buyers to obtain IP logs, device data, and message metadata that can be used for doxing, swatting, and other harms. #0056113 #EmergencyDataRequest #EDR #Meta #TikTok #CompromisedLEEmails
Keypoints
- Threat actor 0056113 advertises working law-enforcement and government email accounts across ten countries priced from $20 to $100 each.
- The listing sells forged court orders, MLATs, and subpoenas for about $100 to support fake emergency or standard data requests.
- EDR-as-a-Service is offered to execute fraudulent Emergency Data Requests to major platforms starting at $200, with domain-suspension fraud at $300.
- Claimed data obtainable includes IP logs, device information, email-to-phone linkages, and in some cases message logs.
- Fraudulent EDRs facilitate doxing, stalking, swatting, and sextortion, and have been tied to real-world harm and deaths.
DarkWebInformer.com Providing intel from some of the darkest places on the Dark Web & Clearnet. Breaches, Darknet Markets, Ransomware, Threat Alerts, & more!