Navigation X
ALERT
Click here to register with a few steps and explore all our cool stuff we have to offer!



 2300

*(UPDATED) x2* Dark.Fail Breached - Ongoing Phishing Attack (MORE SITES BREACHED NOW)

by Ping - 03 May, 2021 - 05:12 PM
This post is by a banned member (Ping) - Unhide
Ping  
Staff
2.603
Posts
84
Threads
Staff Team
6 Years of service
#1
 
                                                                                                                                                                                                                                                                                                                                                                                                                                                                           
IMPORTANT NOTICES

Dark.Fail Restored to Owner


As of approximately 1 hour ago it has been announced that the domain "Dark.Fail" is now back under the control of the original owner(s).
Continue to take precautions and manually verifying mirrors.txt documents through GnuPG verification of signatures. They as of now are working on carefully rebuilding.



Tweet from Dark.Fail: See Tweet

Njal.la Releases Articles Addressing Hijacking Attacks

Njalla has also come forward and provided a clarification article in regards to the phishing attacks of the past few days.
You can read this article on their blog provided on their website. The clear net domain's link to their blog
post is provided below for any who wishes to review it.


Read the article here: Njalla's Response Article

 
                                                                                                                                                                                                                                                                                                                                                                                                                                                                            
Multiple.Onion Directory Services Breached

Several Directory Archiving Services For The Tor Onion Network Succumb to MiTM Phishing Attack

                                                                                                                                                                                                                                                                                                                                                                                                                                                                             
In the last week there have been multiple cases of .onion directory services website's having their domain(s) stolen,

Links provided on these websites are set to route the victim first through the attacker's malicious web proxy.
This intercepts the victim's private credentials, and/or manipulate the content which they are presented with upon
rendering the web document in order to potentially deceive the victim and compromise their information.

According to tweets posted by Dark.Fail the .onion mirror's of Dark.Fail have not been compromised,
although take all precautionary measures when using any directory service. Ensure that you take
the time to review the mirrors.txt of all .onion services and their third party correspondents.

Manually verify all GPG/PGP signatures of every .onion service.


                                                                                                                                                                                                                                                                                                                                                                                                                                                                             

BREACHED SITES LIST
  • Dark.Fail [Updated see notice at top of thread]
    Dark.Fail has had their security penetrated and their domain stolen.
RESOURCES REGARDING DARK.FAIL:
Hidden Content
You must register or login to view this content.

  • DarkNetLive.com
    DarkNetLive.com has had their security penetrated and their domain stolen.

RESOURCES REGARDING DARKNETLIVE,COM:

Hidden Content
You must register or login to view this content.

  • Onion.live
    Onion.live has had their security penetrated and their domain stolen.
RESOURCES REGARDING ONION.LIVE:

Hidden Content
You must register or login to view this content.


                                                                                                                                                                                                                                                                                                                                                                                                                                                                             

This list will be kept updated until further notice, or the attack's of these services ceases.
Additional information derived from trustworthy / verifiable sources will also be appended to their corresponding listings within this archive.

Stay Safe!
[DM to purchase Signature Ad Slots]

[Ping's PGP Key]
I am NOT affiliated with any "Ping" shops, or services being marketed over this forum.
Before conducting any form of business confirm my identity through onsite PM.
This post is by a banned member (Pruned110902) - Unhide
8.414
Posts
789
Threads
5 Years of service
#2
wowowoowow
 
 
[Image: image.png]
Quality Handcrafted Accounts Verified For Your Needs

This post is by a banned member (Anonymous) - Unhide
Anonymous  
Heaven
4.744
Posts
567
Threads
5 Years of service
#3
Wooow
[Image: Sig.png]
This post is by a banned member (Stox) - Unhide
This post is by a banned member (Ping) - Unhide
Ping  
Staff
2.603
Posts
84
Threads
Staff Team
6 Years of service
#5
(03 May, 2021 - 05:24 PM)Stox Wrote: Show More
The onions were definitely compromised as well according to WHM. They've had an alert about it for a day or two now. I wouldn't trust anything coming from them at this point, anyone capable of all this can probably get into their twitter too, unfortunately. 

Not sure if you left it out intentionally due to the nature of the site but you may wanna add the all the dark.fail mirrors of WHM are phishing links too.

All links provided on the services are phishing links, as far as I am informed.

Proper care to confirm the authenticity of the signed PGP/GPG message on the /mirrors.txt of any service is mandatory now more than ever.
[DM to purchase Signature Ad Slots]

[Ping's PGP Key]
I am NOT affiliated with any "Ping" shops, or services being marketed over this forum.
Before conducting any form of business confirm my identity through onsite PM.
This post is by a banned member (Rade) - Unhide
Rade  
Infinity
175
Posts
90
Threads
4 Years of service
#6
Damn :pray:
This post is by a banned member (finndov) - Unhide
This post is by a banned member (roman2) - Unhide
roman2  
Registered
106
Posts
4
Threads
3 Years of service
#8
(03 May, 2021 - 05:12 PM)Ping Wrote: Show More
 
                                                                                                                                                                                                                                                                                                                                                                                                                                                                           
IMPORTANT NOTICES

Dark.Fail Restored to Owner


As of approximately 1 hour ago it has been announced that the domain "Dark.Fail" is now back under the control of the original owner(s).
Continue to take precautions and manually verifying mirrors.txt documents through GnuPG verification of signatures. They as of now are working on carefully rebuilding.



Tweet from Dark.Fail: See Tweet

Njal.la Releases Articles Addressing Hijacking Attacks

Njalla has also come forward and provided a clarification article in regards to the phishing attacks of the past few days.
You can read this article on their blog provided on their website. The clear net domain's link to their blog
post is provided below for any who wishes to review it.


Read the article here: Njalla's Response Article

 
                                                                                                                                                                                                                                                                                                                                                                                                                                                                            
Multiple.Onion Directory Services Breached

Several Directory Archiving Services For The Tor Onion Network Succumb to MiTM Phishing Attack

                                                                                                                                                                                                                                                                                                                                                                                                                                                                             
In the last week there have been multiple cases of .onion directory services website's having their domain(s) stolen,

Links provided on these websites are set to route the victim first through the attacker's malicious web proxy.
This intercepts the victim's private credentials, and/or manipulate the content which they are presented with upon
rendering the web document in order to potentially deceive the victim and compromise their information.

According to tweets posted by Dark.Fail the .onion mirror's of Dark.Fail have not been compromised,
although take all precautionary measures when using any directory service. Ensure that you take
the time to review the mirrors.txt of all .onion services and their third party correspondents.

Manually verify all GPG/PGP signatures of every .onion service.


                                                                                                                                                                                                                                                                                                                                                                                                                                                                             

BREACHED SITES LIST
  • Dark.Fail [Updated see notice at top of thread]
    Dark.Fail has had their security penetrated and their domain stolen.
RESOURCES REGARDING DARK.FAIL:
                                                                                                                                                                                                                                                                                                                                                                                                                                                                             

This list will be kept updated until further notice, or the attack's of these services ceases.
Additional information derived from trustworthy / verifiable sources will also be appended to their corresponding listings within this archive.

Stay Safe!

Thanks for sharing dude, definitely will be having a glance at that.

Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
or
Sign in
Already have an account? Sign in here.


Forum Jump:


Users browsing this thread: 1 Guest(s)