‼️🇯🇴 A French hacker collective calling themselves "X-VDP-X" claims to have compromised wsip.mwi.gov.jo, a Jordanian government site under the Ministry of Water and Irrigation. The group states they have extracted sensitive information from the databases, with sample data available in CSV format.

‼️🇺🇸 Payouts Kings Ransomware Group Claims Attack on Prater Engineering Associates, Threatens to Leak 2.5TB of Data

Payouts Kings Ransomware Group Claims Attack on Prater Engineering Associates, Threatens to Leak 2.5TB of Data

💥 Working on a new open source script that will be uploaded to GitHub sometime this month. It scans a base domain (example darkforums) across 224+ TLDs to find every registered variant. For each hit it pulls DNS records, WHOIS registration data (registrar, creation date, registrant), TLS certificates, and HTTP details including the page title. It flags newly registered domains, suspicious TLDs, parked pages, and privacy-protected WHOIS. It outputs clickable terminal links, auto-saves results to JSON with scan-over-scan diffing to catch new registrations. Python code with no APIs, no dependencies, no pip install required.

❗️🇮🇳 Indian IT Firm Leora Infotech Allegedly Breached, 35K User Records Listed for Sale

Indian IT Firm Leora Infotech Allegedly Breached, 35K User Records Listed for Sale

‼️🇫🇷 Threat Actor Claims Air France Vulnerability Exposes 2 Million Customer Records via Admin Panel

Threat Actor Claims Air France Vulnerability Exposes 2 Million Customer Records via Admin Panel

‼️🇦🇷 Webmail credentials for the Argentine Air Force (Fuerza Aérea Argentina) have been posted freely, with screenshots showing access to internal email accounts at webcorreo[.faa[.mil[.ar. The proof includes views of official correspondence, personnel documents, judicial records, and internal communications referencing brigade operations, union matters, and personnel evaluations.

‼️ A dataset of 79,000 cryptocurrency leads is being sold for $5,000 with only one copy available. The data, allegedly collected from advertising campaigns, includes 78,841 unique phone numbers and 79,415 unique emails spanning multiple countries including Australia, UK, Canada, France, and over 25 others. Records contain names, contact details, registration dates, and country information.

‼️ Dutch authorities just seized one Windscribe VPN server without a warrant, claiming they'll return it after they "fully analyze it." They say their real concern "is the unredacted Epstein files we had on there..."

❗️LeakBase has been down for about two days now. The last two times the site went offline, it remained down for a week or two. There’s no information on any new domains or updates, and no recent news regarding the site. It is, however, hosted by the notorious Njalla.

Daily Dose of Dark Web Informer - February 5th, 2026

Daily Dose of Dark Web Informer - February 5th, 2026