Account required
Sign in to view threat intelligence
CTI data is restricted to registered users. Create a free account to browse the dashboard, then upgrade to a paid plan to unlock event details and IOCs.
Cyber Threat Intelligence
Daily snapshot
Daily brief 9 September 2026
Telegram Data Sale, Gov Leaks Dominate Threat Landscape
Zasnit's alleged Telegram data sale leads 179 tracked events, while CoupDeGrace and wpdealer drive government, telecom and finance exposure.
Events
0
In current view
Critical exposure
0
Last 24 hours
0
vs previous 24h
Distinct actors
0
In current view
By attack category · 9
Data Exposure
0
Ransomware
0
Access Brokerage
0
DDoS
0
Web Defacement
0
Malware Ops
0
Vulnerability
0
Threat Alert
0
Cyber Operation
0
Top victim countries
No country data in this view.
Subscriber-only
CTI brief — 2026-09-09
The CTI dashboard tracks dark-web disclosures, ransomware claims, data leaks and active threat actors. Full event list, threat-actor profiles and historical archive are available to subscribers.
Events
showing 0
Category
Title
Actor
Country
Date
- Data BreachAlleged data breach of Re Mangablacknet-00Russia9 Sept
- Data LeakAlleged Data Leak of Yvetot CCimsolazymeanFrance9 Sept
- Data BreachAlleged Data Breach of OPW Fuel Management SystemSh1nnySp1d2rBrazil9 Sept
- Data BreachAlleged Data Breach of DomingscorpiusSerbia9 Sept
- Data BreachAlleged Data Breach of BMC CapitalJiSungParkSweden9 Sept
- DDoSRBL LEVIATHAN GHOST targets the website of Meitav Investment HouseRBL LEVIATHAN GHOSTIsrael9 Sept
- Data LeakAlleged data leak of INET TELECOMJiSungParkAustralia9 Sept
- Data BreachAlleged Data Breach of IEDEP Digital Education Institute of the State of PueblazfoMexico9 Sept
- Web DefacementCoupDeGrace targets the website of NetEcoCoupDeGraceIran9 Sept
- RansomwareLogar Network Solutions falls victim to VEXY ransomwareVEXYBrazil9 Sept
- Web DefacementYoman targets the website of Saba Shahr MunicipalityYomanIran9 Sept
- Web DefacementMr. BDKR28 targets the website of pixsoMr. BDKR28Iran9 Sept
- Data LeakAlleged sale of data from Star Health and Allied InsuranceMooNkNiGHtIndia9 Sept
- RansomwareInter ehf falls victim to Galago RansomwareGalagoIceland9 Sept
- DDoSStarPez target the website of Romans PizzaStarPezUnited States9 Sept
- DDoSStarPez targets the website of BKPSDM TulungagungProfessional.StarPezIndonesia9 Sept
- Web Defacementla resenha sec targets the website of SAAE – Serviço Autônomo de Água e Esgoto de Barra-BAla resenha secBrazil9 Sept
- Data BreachAlleged data breach of Tata DOCOMOKARAWANG ERROR SYSTEMIndia9 Sept
- Access BrokerageAlleged leak of unauthorized login credentials to Jain Irrigation Systems Ltd.XH4X CYB3RIndia9 Sept
- Access BrokerageAlleged leak of unauthorized login credentials to TicketónXH4X CYB3RUnited States9 Sept
- RansomwareMediengruppe Thiel falls victim to INC RANSOM RansomwareINC RANSOMGermany9 Sept
- DDoSANOMALY NETWORK target the website of Dalia powerANOMALY NETWORKIsrael9 Sept
- RansomwareRelyComply falls victim to Dire Wolf ransomwareDire WolfUnited Kingdom9 Sept
- RansomwareKyodo Shipping and Trading Corp. USA falls victim to akira ransomwareakiraUnited States9 Sept
- Web DefacementUnlimited2 targets the website of Almoayyed Group IraqUnlimited2Iraq9 Sept
- RansomwareBHMAC falls victim to EMPERADOR RansomwareEMPERADORBosnia and Herzegovina9 Sept
- RansomwareSpecChem falls victim to Dark Project RansomwareDark ProjectUnited States9 Sept
- Web Defacement./Outsiders targets multiple domains of Dinas Pertanahan Kabupaten Sorong./OutsidersIndonesia9 Sept
- Web DefacementMr. BDKR28 targets multiple domains of Almoayyed Group IraqMr. BDKR28Iraq9 Sept
- RansomwareJet Specialty Inc falls victim to Qilin ransomwareQilinUnited States9 Sept
- Web DefacementTurkHackTeam targets the website of Plovdiv University PressTurkHackTeamBulgaria9 Sept
- Access BrokerageAlleged sale of unauthorized admin access to MA Darul HudaZombiesIndonesia9 Sept
- RansomwareBaymer Turizm ve Yatırım A.Ş. falls victim to EMPERADOR RansomwareEMPERADORTurkey9 Sept
- Web DefacementMr. BDKR28 targets the website of Chatra ChoobMr. BDKR28Iran9 Sept
- DDoS0x1A7 targets the website of French Ministry of Foreign Affairs0x1A7France9 Sept
- Web DefacementMr. BDKR28 targets the website of Briton CCTVMr. BDKR28Iran9 Sept
- Data LeakAlleged sale of documents from IndonesiaDBHunterIndonesia9 Sept
- Web DefacementTHE EYE targets the website of Casa EstampaTHE EYEMexico9 Sept
- Web DefacementTHE EYE targets multiple domains of Sourtmeh Gasht AriaTHE EYEIran9 Sept
- RansomwareUniversal Starch Chem Allied Ltd falls victim to EMPERADOR RansomwareEMPERADORIndia9 Sept
- Web DefacementZ-BL4CX-H4T.ID targets the website of IASC SSCZ-BL4CX-H4T.IDIndia9 Sept
- DDoSNoName057(16) target the website of Starostwo powiatowe w krakowieNoName057(16)Poland9 Sept
- Access BrokerageAlleged sale of unauthorised access to e-office sumedangDR4K7H CYBER TEAM ( D C T )Indonesia9 Sept
- DDoSNoName057(16) target the website of Multiple organizationNoName057(16)Poland9 Sept
- DDoSANOMALY NETWORK target the website of Jawa posANOMALY NETWORKIndonesia9 Sept
- Web Defacementyournick targets the website of Homood JewelersyournickKuwait9 Sept
- Data LeakAlleged data leak of ELLIPAL Cryptoscattered LAPSUS$ hunters part 9—9 Sept
- DDoSStarPez targets the website of live123bar5.comStarPez—9 Sept
- Web DefacementCoupDeGrace targets the website of FullNumberCoupDeGraceIran9 Sept
- Access BrokerageAlleged Sale of Unauthorized WTS Access to Municipalidad de Pérez ZeledónMARKET FLAZZCosta Rica9 Sept
- Access BrokerageAlleged Sale of Unauthorized WTS Access to Multiple OrganizationsMARKET FLAZZ—9 Sept
- Access BrokerageAlleged sale of unauthorized access to thousand of cameras around the worldShadow ClawZ 404—9 Sept
- Access BrokerageAlleged leak of unauthorized shell access to Secretaría de Relaciones ExterioresDisrupt0rMexico9 Sept
- Web Defacementp2wnz targets the website of Prefeitura Municipal de São João da Matap2wnzBrazil9 Sept
- Data LeakAlleged data leak of 1winbet DatabaseAzelmodsx677—9 Sept
- Web Defacement./KeraSakti target the website of PPID Sungai Raya Religious Court./KeraSaktiIndonesia9 Sept
- Data LeakAlleged Data Leak of Saudi Government DatabaseAzelmods677Saudi Arabia9 Sept
- Web DefacementTeaM_CC targets the website of Office of the President of the SenateTeaM_CCNigeria9 Sept
- Threat AlertInfrastructure Destruction Squad Claims to target Sri LankaInfrastructure Destruction SquadSri Lanka9 Sept
- Web DefacementCoupDeGrace targets the website of Tetis Beauty ClinicCoupDeGraceIran9 Sept
- Web DefacementCoupDeGrace targets the website of Irano Sanat Industrial GroupCoupDeGraceIran9 Sept
- DDoSStarPez target the website of Capital CityStarPezUnited States9 Sept
- Data BreachAlleged data breach of Alcaldía de Santiago de CaliArcepahColombia9 Sept
- VulnerabilityCritical Google Chrome V8 Zero-Day Vulnerability Exploited in Active Attacks—United States9 Sept
- VulnerabilityMicrosoft Defender ShieldCrash Zero-Day Enables SYSTEM-Level File Access—United States9 Sept
- Web DefacementUmbrella Gang targets the website of Prefeitura Municipal de JaguariúnaUmbrella GangBrazil9 Sept
- DDoSNoName057(16) target the website of wiesbaden.deNoName057(16)Germany9 Sept
- DDoSNoName057(16) target the website of JadeweserportNoName057(16)Germany9 Sept
- DDoSNoName057(16) targets the website of IHK für München und OberbayernNoName057(16)Germany9 Sept
- Data BreachAlleged data breach of Luxe by WestbleedingoutAustralia9 Sept
- DDoSNoName057(16) targets the website of Rhein-main-verkehrsverbund (rmv)NoName057(16)Germany9 Sept
- DDoSNoName057(16) targets the website of Federal foreign officeNoName057(16)Germany9 Sept
- Web Defacement/Rayzky_ targets the website of Transfer Show/Rayzky_Iran9 Sept
- Web Defacement/Rayzky_ targets the website of Papillon Market/Rayzky_Iran9 Sept
- Web DefacementNXBB.SEC target the website of National Research Council of Thailand (NRCT)NXBB.SECThailand9 Sept
- Access BrokerageAlleged sale of unauthorized access to an unidentified organization in the MexicowordpressoMexico9 Sept
- Access BrokerageAlleged sale of unauthorized access to an unidentified organization in the IranwpdealerIran9 Sept
- Access BrokerageAlleged sale of unauthorized access to an unidentified organization in the MexicowpdealerMexico9 Sept
- Access BrokerageAlleged sale of unauthorized access to an unidentified organization in the IsraelwpdealerIsrael9 Sept
- Access BrokerageAlleged sale of unauthorized access to an unidentified organization in the MexicowpdealerMexico9 Sept
- Access BrokerageAlleged sale of unauthorized access to an unidentified organization in the MexicowpdealerMexico9 Sept
- Web Defacement/Rayzky_ targets the website of Mahdi Arab/Rayzky_Iran9 Sept
- Web DefacementFG-CIR targets the website of Kementerian Kehutanan Republik IndonesiaFG-CIRIndonesia9 Sept
- Web DefacementCoupDeGrace targets the website of IranTCLCoupDeGraceIran9 Sept
- Data BreachAlleged data sale of MEDGRUPOjacksenseofrejectionBrazil9 Sept
- Access BrokerageAlleged unauthorized access to IDF Tactical CommunicationsDisrupt0r 2.0Israel9 Sept
- RansomwareCyberattack hits City of Fort Scott—United States9 Sept
- Web DefacementCoupDeGrace targets the website of Yashiil Architecture and Design GroupCoupDeGraceIran9 Sept
- Data BreachAlleged data sale of MTs Gondang WonopringgoYUKA STREAMIndonesia9 Sept
- RansomwareGellibrand Support Services falls victim to Anubis RansomwareANUBISAustralia9 Sept
- DDoSTeam1914_official targets the website of USTVNowTeam1914_officialUnited States9 Sept
- Web DefacementCoupDeGrace targets the website of Mobile FarzadCoupDeGraceIran9 Sept
- Access BrokerageAlleged sale of WordPress admin access and shell access to French bicycle rental shopZimmerFrance9 Sept
- Data BreachAlleged data breach of MihuruRancagiovIndia9 Sept
- Cyber OperationCyberattack Hits Stadtwerke Landsberg—Germany9 Sept
- RansomwareRansomware Attack Hits Casa di Cura Salus in Trieste—Italy9 Sept
- Web DefacementCoupDeGrace targets the website of Yadak OnlineCoupDeGraceIran9 Sept
- Data LeakAlleged leak of CNPJ Databasezfo$Brazil9 Sept
- RansomwareCyberattack hits Merrimack County systems in New Hampshire—United States9 Sept
- DDoSTeam1914_official targets the website of Lepšia.tvTeam1914_officialSlovakia9 Sept
- Web Defacement/Rayzky_ targets the website of Arabmazar.ir/Rayzky_Iran9 Sept
- Data BreachAlleged data breach of Tu Receta WebKazuPanama9 Sept
- RansomwareCyberattack hits Van Wezel Autoparts—Belgium9 Sept
- Data BreachAlleged data breach of HTXRedFoxiqSeychelles9 Sept
- Data BreachAlleged data leak of ASSEBogotaLeaksUruguay9 Sept
- RansomwareMEFA Group falls victim to Black NevasBlack NevasTurkey9 Sept
- Data BreachAlleged data breach of PrescryptomakoboMexico9 Sept
- Web Defacement/Rayzky_ targets the website of Ariana/Rayzky_Iran9 Sept
- Data LeakAlleged data leak of an Unidentified organizationSLIENT TRACE—9 Sept
- Web DefacementCoupDeGrace targets the website of RosinoCoupDeGraceIran9 Sept
- RansomwareI.T. Foods Industries falls victim to Shiba RansomwareSHIBAThailand9 Sept
- Web DefacementCoupDeGrace targets the website of BabkadCoupDeGraceIran9 Sept
- Data LeakAlleged sale of UK Driving License DatabaseEmmaeUnited Kingdom9 Sept
- Web DefacementCoupDeGrace targets the website of Degal AbogadosCoupDeGraceMexico9 Sept
- Data BreachAlleged sale of IME Events databaseSorbBrazil9 Sept
- Access BrokerageAlleged unauthorized access to Telecommunications and water infrastructure in USAAPT IRANUnited States9 Sept
- RansomwareFinancière d'Uzès falls victim to Panzer RansomwarePANZERFrance9 Sept
- DDoSRBL LEVIATHAN GHOST targets the website of ZAKARBL LEVIATHAN GHOSTIsrael9 Sept
- Data BreachAlleged data breach of ShareChatGurangaIndia9 Sept
- Data BreachAlleged data breach of INFOCREDkr1pt0nBolivia9 Sept
- Access BrokerageAlleged Sale of Unauthorized Access to an Unidentified WordPress Shop in CanadaFucksleepCanada9 Sept
- DDoSRBL LEVIATHAN GHOST targets the website of Dalia PowerRBL LEVIATHAN GHOSTIsrael9 Sept
- Data LeakAlleged Sale of Data from an Unidentified US Social MarketplaceKrebsonFanAccountUnited States9 Sept
- Data LeakAlleged leak of 100K USA Email ListSUB-ZER0United States9 Sept
- RansomwareSales Boomerang falls victim to Dire Wolf ransomwareDire WolfUnited States9 Sept
- RansomwareAUDIT TEAM Ransomware group has added an unidentified victim (bu***en)AUDIT TEAMRussia9 Sept
- Access BrokerageAlleged Unauthorized Access to electronic services system of the Sri Lanka Policeccbn00 allianceSri Lanka9 Sept
- Access BrokerageAlleged account sale of RocketReachkokolokov2United States9 Sept
- Access BrokerageAlleged Sale of Unauthorized Exchange OWA Access to an Unidentified Real Estate Organization in PolandHighWayToShellPoland9 Sept
- Access BrokerageAlleged Sale of Unauthorized Admin Accessfor Turkish Maritime TrafficNightOwlTurkey9 Sept
- VulnerabilityAlleged Sale of LPE Exploit for Windows XP–11 and Serverwdosx—9 Sept
- RansomwareRed Star Oil Co, Inc. falls victim to PLAY ransomwarePLAYUnited States9 Sept
- Data BreachAlleged data breach of Telegram user recordszasnitGuinea-Bissau, Liechtenstein, Comoros, Central African Republic, Bahamas, St. Maarten, Curaçao, Saint Lucia, Grenada, Barbados, Saint Kitts and Nevis, Antigua and Barbuda, Saint Vincent and the Grenadines, Cayman Islands, British Virgin Islands, Turks & Caicos Islands9 Sept
- RansomwareGT Distributors falls victim to PLAY ransomwarePLAYUnited States9 Sept
- DDoSRBL LEVIATHAN GHOST targets the website of Hizbut TawhidRBL LEVIATHAN GHOSTBangladesh9 Sept
- Access BrokerageAlleged Sale of Unauthorized Webmail Access to National Council for Accreditation of Medical CollegesX Forum BotIraq9 Sept
- Data BreachAlleged data breach of Vision2iSophia01France9 Sept
- Data LeakAlleged Sale of 3.5M+ French Lead DatabasebetwayFrance9 Sept
- Data BreachAlleged data breach of Telegram user recordszasnitBurkina Faso, Mauritania, Angola, Congo, Democratic Republic of the, Malta, Gambia, Uruguay, Guinea, Burundi, Mali, Iceland, Bosnia and Herzegovina, Dominica, Lesotho, Jamaica, Sierra Leone, Mauritius, Kosovo, Liberia, Equatorial Guinea, Albania, Marshall Islands, Djibouti, Malawi, Gabon, Andorra, Madagascar, East Timor, Eswatini, South Sudan, Micronesia, Guyana, Trinidad and Tobago, Niger, Seychelles, Chad, Republic of the Congo, San Marino, North Korea, Suriname, Monaco9 Sept
- Data BreachAlleged data breach of Telegram user recordszasnitSri Lanka, Cambodia, Venezuela, Nepal, Maldives, Lithuania, South Africa, Argentina, Mexico, Greece, Turkmenistan, Kenya, Netherlands, Bangladesh, Switzerland, Sweden, Colombia, Finland, Bulgaria, Peru, Austria, Belgium, Haiti, Cyprus, Uganda, Costa Rica, Nicaragua, Guatemala, Fiji, Solomon Islands, Cameroon, Sudan, Japan, Bolivia, Brunei, Romania, Panama, Morocco, Somalia, Papua New Guinea, Portugal, Nauru, Taiwan, Tanzania, Belize, Libya, Australia9 Sept
- RansomwareRecovery Café falls victim to SAFEPAY ransomwareSAFEPAYUnited States9 Sept
- RansomwareHBPro, Informática e Telecomunicações Lda falls victim to SAFEPAY ransomwareSAFEPAYPortugal9 Sept
- RansomwareGSN Gestión falls victim to SAFEPAY ransomwareSAFEPAYSpain9 Sept
- RansomwareMcNish Steel Ltd. falls victim to SAFEPAY ransomwareSAFEPAYCanada9 Sept
- RansomwarePalmetto Eye Institute falls victim to SAFEPAY ransomwareSAFEPAYUnited States9 Sept
- RansomwareMarktgemeinde Reichenau an der Rax falls victim to SAFEPAY ransomwareSAFEPAYAustria9 Sept
- RansomwareCannon Puntana SA falls victim to SAFEPAY ransomwareSAFEPAYArgentina9 Sept
- RansomwareGruppo ASSIPRIME Assicurazioni e Finanziamenti falls victim to SAFEPAY ransomwareSAFEPAYItaly9 Sept
- Access BrokerageAlleged Sale of Domain Admin Access to an Unidentified Financial Organization in IndiaEllnoirIndia9 Sept
- Web DefacementJUNZXSEC targets the website of Etihad StoreJUNZXSECIran9 Sept
- RansomwareGAYAFORES falls victim to SAFEPAY ransomwareSAFEPAYSpain9 Sept
- Data BreachAlleged data breach of Telegram user recordszasnitZimbabwe, Palestine, El Salvador, Bhutan, Algeria, Tonga, Chile, Palau, Honduras, New Zealand, Ecuador, Benin, Dominican Republic, Hungary, Vanuatu, Tuvalu, Togo, Samoa, Kiribati, Slovakia, Ireland, Denmark, Norway, Luxembourg, Montenegro, Serbia, North Macedonia, Eritrea, Botswana, Slovenia, Croatia, Paraguay, Zambia, Senegal, Mozambique, Namibia, Tunisia, Rwanda, Laos9 Sept
- RansomwareCentury Maritime Agencies, Inc. falls victim to SAFEPAY ransomwareSAFEPAYPhilippines9 Sept
- Web Defacementsiyahi targets the website of qualus.com.mxsiyahiMexico9 Sept
- DDoSTeam1914_official targets the website of Ministry of Internal Affairs of UkraineTeam1914_officialUkraine9 Sept
- Data BreachAlleged data breach of City Polyclinic No. 3 ,Volgodonsk‘OFFENSIVERussia9 Sept
- Web DefacementameN targets the website of CherachiameNIran9 Sept
- DDoSTeam1914_official targets the Official website of UkraineTeam1914_officialUkraine9 Sept
- Access BrokerageAlleged Sale of Unauthorized Webmail Access to AdliranX Forum BotIran9 Sept
- Access BrokerageAlleged unauthorized access to unidentified system in USAGolden falconUnited States9 Sept
- Web Defacementazraelzer0d4y targets the website of UNADazraelzer0d4yColombia9 Sept
- Access BrokerageAlleged Sale of Unauthorized Webmail Access to Umrah Transport SaudiaX Forum BotSaudi Arabia9 Sept
- Data BreachAlleged data breach of Bahraini Telegram user recordszasnitBahrain9 Sept
- Data BreachAlleged data breach of Qatar Telegram user recordszasnitQatar9 Sept
- Data BreachAlleged data breach of Omani Telegram user recordszasnitOman9 Sept
- Data BreachAlleged data breach of Kuwaiti Telegram user recordszasnitKuwait9 Sept
- Data BreachAlleged data breach of Saudi Arabian Telegram user recordszasnitSaudi Arabia9 Sept
- Web DefacementCoupDeGrace targets the website cbt4all.co.ilCoupDeGraceIsrael9 Sept
- Access BrokerageAlleged Sale of Unauthorized Webmail Access to Kenaaz United Contracting CompanyX Forum BotSaudi Arabia9 Sept
- Access BrokerageAlleged Sale of Unauthorized Webmail Access to Banque Saudi FransiX Forum BotSaudi Arabia9 Sept
- Data BreachAlleged data breach of WHERADaOnlySparkGermany9 Sept
- Malware OpsAlleged leak of Babuk Ransomware Source Codehoneydutch—9 Sept
- Data LeakAlleged Data Leak of Turkey GSMrapeTurkey9 Sept
- Data BreachAlleged Data breach of Twitch Interactive, inc.CariUnited States9 Sept
- Data LeakAlleged data leak of 3I/ATLASarmandohkpr—9 Sept
- DDoSRBL LEVIATHAN GHOST targets the website of Jawa PosRBL LEVIATHAN GHOSTIndonesia9 Sept
- Data BreachAlleged Data Leak from JCPenneyhoneydutchUnited States9 Sept
- Data BreachAlleged data breach of marriage records from Banjar Mlati Urban VillagevfctIndonesia9 Sept
- Data BreachAlleged Data Leak from GirlsChase.TVzoozUnited States9 Sept
- Data BreachAlleged data breach of Das MusiknetzwerkSophia01Germany9 Sept
- Data LeakAlleged Sale of Revolut Business accountWhiteEU—9 Sept
- Access BrokerageAlleged Sale of Unauthorized Access to 54 Unidentified Cameras in TaiwanDBHunterTaiwan9 Sept
- Access BrokerageAlleged Sale of Unauthorized Access to 67 Unidentified Cameras in SwedenDBHunterSweden9 Sept
- Access BrokerageAlleged Sale of Unauthorized Access to 127 Unidentified Cameras in MexicoDBHunterMexico9 Sept
- Access BrokerageAlleged Sale of Unauthorized Access to 474 Unidentified Cameras in NetherlandsDBHunterNetherlands9 Sept
- Access BrokerageAlleged Sale of Unauthorized Access to 129 Unidentified Cameras in MalaysiaDBHunterMalaysia9 Sept
- RansomwareCope Plastics falls victim to CHAOS ransomwareCHAOSUnited States9 Sept
- Access BrokerageAlleged Sale of Unauthorized Access to 19 Cameras in VietnamDBHunterVietnam9 Sept
- RansomwareEMS1R falls victim to Dire Wolf ransomwareDire WolfUnited States9 Sept
- DDoSRBL LEVIATHAN GHOST targets the website of V6 VeluguRBL LEVIATHAN GHOSTIndia9 Sept
- RansomwareFDC Putman falls victim to LOCKBIT 5.0 ransomwareLOCKBIT 5.0Netherlands9 Sept
- RansomwareContreras falls victim to LOCKBIT 5.0 ransomwareLOCKBIT 5.0Argentina9 Sept
No events match your filters.
Page 1 of 1
Active threat actors
click any actor to filter the list aboveNo active actors in this view.