This investigation links Quake3, chromium, and evilcore to one operator who openly identified himself as morgot on exploit.in, while forum logs and private messages show synchronized account activity on the same IPs. The file also ties his long-running malware, loader, and botnet work to the REvil source-code developer persona later associated with Anatoly Sergeevitsch Kravchuk. #Quake3 #morgot #Rcode #REvil #AnatolyKravchuk

A seller using the name palmbeachpete is allegedly offering the EnformionGO database for $50,000, claiming it contains 315.6 million people profiles with emails, phone numbers, and detailed address histories. The listing is unverified, but the sample data suggests a highly sensitive life-record dataset tied to EnformionGO and Enformion. #EnformionGO #Enformion #palmbeachpete…

A forum user named 4me44 allegedly leaked 20,274 records from EVA’s Nantes Sud location in France, exposing personal data such as names, email addresses, dates of birth, phone numbers, and home addresses. The actor also claimed back office admin access and showed a campaign generating €1M in gift cards, but the…

An actor calling themselves sta6 is allegedly selling a breach dataset tied to Zro Global’s hiring platform, claiming access to 55,866 candidate records, interview audio, and internal scoring data. The exposure could reveal sensitive personal and recruitment information, but the claim remains unverified and Zro Global has not publicly addressed it….

ZeroBytes claims a second intrusion against France’s DGFiP cadastral data server, alleging 252,149 extracted rows and exposure of 2,041,778 property holders. The group says it still has access through valid credentials and a multi factor authentication bypass, and is offering that access for sale, though the claim remains unverified. #ZeroBytes #DGFiP…

A forum user calling themselves ChimeraZ allegedly released 16GB of Chupin data, including emails, CRM records, and invoices, in what is labeled the sixth leak tied to tenants of a shared business platform. The numbering and embedded platform identifiers suggest multiple companies may be exposed through the same provider, but the…

CSDD was targeted in a complex and focused cyberattack that led to the exposure of historical payment data containing customers’ personal information. Authorities say the attack has been stopped, the investigation is ongoing, and residents are being warned to watch for possible fraud attempts. #CSDD #CERTLV

Darlington County, South Carolina, isolated parts of its computer systems after a cybersecurity incident disrupted phone lines and some government services, while 911 remained operational. Officials have brought in outside specialists and law enforcement, but the full scope of the attack and whether data was compromised remain unclear. #DarlingtonCounty #SouthCarolina