β€ΌοΈπŸ‡ΊπŸ‡Έ Cardbase, a U.S.-based platform that aggregates trading card prices across 30+ marketplaces, has allegedly been breached. The listing claims 248,000 user records containing emails, names, and profile pictures are for sale. image
❗️ Corporate accounts and internal data from multiple EU-based companies have allegedly been leaked, spanning industrial, financial, and tech sectors. The dump includes 134 corporate email accounts with employee and customer contact information, bcrypt-hashed passwords, and internal company data such as transaction records, business codes, and partner details. DWI Note: A lot of the emails are from personal domains (Example Gmail) image
⚠️ A couple of people have asked me how to access the Dread premium link when Dread is down. You need to purchase a premium membership at: https://dreadytofatroptsdj6io7l3xptbet6onoyno2yv7jicoxknyazubrad[.]onion/store/ which is $50. Once you have a membership you can find the link in /d/lounge. Look for this stickied message at the top. Obviously I have redacted the url. image
β€ΌοΈπŸ‡¬πŸ‡§ WordPress admin and shell access to a UK-based online shop is being auctioned. The store processes payments via Stripe iframe with roughly 558 orders across the last three months and a 70% unique order rate. The auction starts at $700 with a blitz price of $1,500. image
‼️πŸ‡ͺπŸ‡Έ Guardia Civil Dismantled a Bank Mule Network in La Rioja Under Operation Vicentius, Spain's Guardia Civil has identified 12 suspects linked to fraud, money laundering, and unauthorized access to computer systems. The group allegedly operated fake cryptocurrency investment platforms and used remote access software to drain victims' bank accounts and take out loans in their names, causing an estimated €442,650 in total losses. Stolen funds were funneled to accounts in Denmark, Lithuania, the United Kingdom, and China. The investigation remains ongoing as authorities work to trace and recover the money. Source: Guardia Civil
‼️ .cz BreachForums was briefly defaced by what looks like a XSS vuln in XenForo. XenForo is a popular forum platform that I have seen used by a lot of actors, most of which I have identified in my Threat-Surface repo on GitHub. Credit to antisocial for sending the video. Seems the war is far from over.
Daily Dose of Dark Web Informer - February 4th, 2026
Threat Attack Update - February 4th, 2026