Real-time threat and infostealer intelligence for MSSPs, enterprises, and researchers. Detect leaks, monitor takeovers and respond instantly.

Joined May 2024
We keep seeing the same pattern: security teams drowning in alerts from decade-old breaches while fresh threats went unnoticed. We broke down the credential leak ecosystem and what your team should actually be monitoring: whiteintel.io/blog/which-cre…
5
31
9,780
We have released our new report generate feature! Interested in generating dark web exposure reports for your own company? Get yours free, no sign up required: whiteintel.io/check-your-dar…
1
180
We are getting ready to release our new feature for generating reports. Why we did not do it until now, not sure. Why we do it now, we don’t know. Thank you for your understanding in this matter. (Gif is totally unrelated)
3
358
Turn off upload_progress. If your app does not have uploads, disabling them should have virtually no affect. php.ini: file_uploads=0, session.upload_progress.enabled=0 Cloudflare WAF: block multipart/form-data Patch when it lands. This is just our take. Do your own research.
Disclaimer: We do not know if this finding related to the patch will be dropped today.
1
10
1,999
Disclaimer: We do not know if this finding related to the patch will be dropped today.
... get it while its hot... 😈 > CVE-2026-109618 / CVE-2026-109619 (pre-patch PHP 8.x) > session.upload_progress UAF > jackalsyn.com/posts/php-up-2… > Courtesy of Me, @acd421 & @Archknight23 #CyberSecurity #infosec #php2shell #php
1
2
1
14
5,684
Our new Correlations feature shows the full footprint of an infection, not just the matched record. Browser history, autofill, extra credentials and live session cookies from the same device. Preview inline or export. Assess the session hijacking risk with the whole picture.
3
316
[EN] Whiteintel welcomes AIVA Corporation as an official reseller partner in Japan! Our customers in Japan can now access Whiteintel services locally through AIVA. [JP] Whiteintelは、株式会社アイヴァ(AIVA Corporation)を日本における正規リセラーパートナーとしてお迎えしました!日本のお客様は、アイヴァを通じて国内でWhiteintelのサービスをご利用いただけるようになりました。 aivacorp.jp/en/aiva-becomes-… @AIVAcorp
2
8
2,305
We've launched our new partner and reseller platform. Want to grow your revenue in the fast-moving dark web monitoring market? Join our partner program and earn competitive revenue share on every account. whiteintel.io/become-a-partn…
1
1
12
2,807
😬 Infostealer data courtesy of @whiteintel_io
🚨🇨🇴 [ACCESS] Colombian National Police and health-system access allegedly compromised A forum actor using the handle "Keishell" claims to have obtained access to two accounts associated with Colombia's National Police. The actor says one account has elevated access to a police health-services system, while the second provides access to internal training and course materials. Claimed access includes: ⠀ • Health services: medications, laboratory results, medical orders and appointment management • Patient data: clinical records and other health-related information • Police resources: internal training and course materials • Account access: two separate compromised accounts, including one described as having high-level permissions ⠀ The actor published screenshots showing access to National Police portals and a medical laboratory report as purported proof. This claim is currently unverified. ⠀ 💥 No delays. No guessing. No redactions. Get the intel threat actors see, the moment they post it. darkwebinformer.com/pricing
2
32
11,149
The hype is calm down however, we have released a permanent tool last week to check if your organization was affected from LiteLLM supply chain attack. If you are affected, you can get a complimentary full report: whiteintel.io/litellm-exposu…
1
3
7
1,264
Replying to @blk014
It’s when the project makers could have a “bug” in the entropy generation for later retrieval.
5
1,337
We are not in Blackhat conference but if you are there, assume that we are there and act like we made good sales talk please. Whiteintel.io
8
2,029
We finally have a White theme option. Ironically, most of us live in dark mode, our name is White, yet our logo is still mostly dark with just enough white to keep the branding team happy.
1
9
1,420
The branding team is the exact same team that collects the logs and builds the backend, so expectations for visual taste should probably be calibrated accordingly.
4
981
We just launched two new capabilities: Stolen Card Monitoring and the Supplier Security Module. Tracking exposed cards and BINs are now as easy as using a search bar. And with the Supplier module, you can now have access to the realistic security scores of your suppliers. whiteintel.io/blog/payment-f…
2
9
1,753
If you recognize this piece of fine art at first sight, you are experienced enough in credential / cc market intelligence.
4
882
A quick product update: Alongside our upcoming Payment Fraud capabilities, we're also putting the finishing touches on our new Supply Chain Security module. Looking forward to sharing more soon.
1
4
931
A potential security incident is developing at ServiceNow. Customers received notifications about a suspicious IP accessing multiple customer tenants. The root cause appears to be a Scripted REST API endpoint that required no authentication by logging activity under the "Guest" user with no actual account. The resource had been in this state since at least 2018, and was only patched last Friday when ServiceNow set the requires_authentication flag to true. One affected organization works for critical infrastructure. Their internal security team is now conducting a full investigation. The issue was linked to the Australia platform release. ServiceNow has not issued a public statement and reports are ongoing. Thread: reddit.com/r/servicenow/comm…
4
36
3
126
28,156
We projected ~2M bin records for the new payment fraud module. We're already at 4M+ with just 18% of the data processed. Nice to see our forecasting model is generating anomalies before the fraud module does.
2
1,018
You asked, and we listened. A major update is arriving in just 15 days: Payment Fraud Intelligence. Our newest module helps identify stolen BIN activity in real time, enabling faster action to reduce fraud exposure and prevent financial losses.
1
1
1
17
10,038
Obviously, this capability will only be available to trusted cybersecurity companies and financial institutions. We are continuously expanding our capabilities to provide visibility across every aspect of the dark web economy.
7
1,237