Author: HackWatchit

Europol shuts down Archetyp Market, longest-running dark web drug marketplace Pierluigi Paganini July 03, 2025 Europol shuts down Archetyp Market, longest-running dark web drug site, the police arrested the admin in Spain, top vendors hit in Sweden. An international law enforcement operation led by German authorities has shut down Archetyp Market, the longest-running dark web drug marketplace, in a coordinated operation across six countries with support from Europol and Eurojust. The market’s administrator was arrested in Spain, and top vendors were targeted in Sweden. “Between 11 and 13 June, a series of coordinated actions took place across Germany, the Netherlands,…

​The Hunters International Ransomware-as-a-Service (RaaS) operation announced today that it has officially closed down its operations and will offer free decryptors to help victims recover their data without paying a ransom. “After careful consideration and in light of recent developments, we have decided to close the Hunters International project. This decision was not made lightly, and we recognize the impact it has on the organizations we have interacted with, the cybercrime gang says in a statement published on its dark web leak earlier today. “As a gesture of goodwill and to assist those affected by our previous activities, we are…

Beau Bullock // This is part two of a series of posts (See part 1 here) where I am detailing multiple ways to gain access to domain user credentials without ever being on a target organization’s network. The first method involves exploiting password reuse issues where a user might have reused the same password they used for their corporate domain account on another external service. The second method is what I think is a far more interesting way of gathering user credentials that involves discovering a target organization’s username schema, followed by password spraying user accounts against an externally facing service that…

GitPhish is an open-source security research tool built to replicate GitHub’s device code authentication flow. It features three core operating modes: an authentication server, automated landing page deployment, and an administrative management interface. GitPhish can be accessed via a command-line interface or a web dashboard, offering comprehensive features such as logging, analytics, and token management. “We designed GitPhish explicitly for security teams looking to conduct assessments and build detection capabilities around Device Code Phishing in GitHub. Red teamers can simulate realistic attack scenarios to test organizational resilience, while detection engineers can validate their ability to identify suspicious OAuth flows, unusual…

Remember when users revolted after Apple pushed an unwanted U2 album onto 500 million devices back in 2014? Well, it seems Apple HQ *has* forgotten… because it’s just done something similar. This time it’s a notification from Apple Wallet promoting the new Formula 1 movie with Brad Pitt. Apple poured a whole load of $$$ into the movie, and maybe that’s why they decided to send out a push notification earlier today to millions of iPhones. Sign up to our free newsletter.Security news, advice, and tips. Umm.. isn’t this kinda…

Carrie Roberts // *Guest Blog It is important to ensure that your external mail servers are properly configured to not support open relaying of mail. An open mail relay can be abused by spammers, eating up your resources and landing you on a blacklist. It is not too common to find completely open mail relays these days because they get abused, thus inspiring them to be fixed. But what is common is to find is what I call a “Partially Open Mail Relay”. This occurs when the mail relay can be used to do one of the following: Send email…

The Federal Bureau of Investigation (FBI) said that it has recently observed the cybercriminal group Scattered Spider expanding its targeting to include the airline sector. These actors rely on social engineering techniques, often impersonating employees or contractors to deceive IT help desks into granting access.  “These techniques frequently involve methods to bypass multi-factor authentication (MFA), such as convincing help desk services to add unauthorized MFA devices to compromised accounts,” the FBI wrote in a message on X, formerly Twitter. “They target large corporations and their third-party IT providers, which means anyone in the airline ecosystem, including trusted vendors and contractors,…

G_mic, a user on a cybercrime forum, claims to have breached both Verizon and T-Mobile US and stolen a large amount of data which they are selling online in CSV and JSON format. The data includes information of 61 million Verizon customers (3.1 GB) and 55 million from T-Mobile US. Verizon Data As seen by Hackread.com, the user marked the data with the year “2025,” suggesting it is recent. When a forum member asked for a download link, the seller’s clear reply was “For sale.” To check its authenticity, we obtained a sample directly from the seller. After analysis, it…

Phuket in 2025 is where tropical paradise meets Web3 innovation. Imagine trading Bitcoin tax-free on Patong Beach, then using crypto to book a luxury villa—all while immersed in turquoise seas and vibrant nightlife. As Thailand’s Thailand 4.0 vision transforms Phuket into a global crypto hub, the island offers a pioneering crypto payment pilot, zero taxes on crypto gains until 2029, and nomad-friendly visas like LTR and DTV. For crypto traders, blockchain entrepreneurs, and digital nomads, Phuket blends cutting-edge tech with island allure. Here’s why Phuket is your ultimate crypto paradise in 2025. 1. Phuket’s Crypto Payment Pilot: Bitcoin Meets Tourism…