Recent searches
Search options
8base ransomware group has apparently been seized or done an exit scam.
Two of its Tor portals say "This hidden site and the criminal content have been seized by the Bavarian State Criminal Police Office on behalf of the Office of the Public Prosecutor General in Bamberg"
They had been hitting some high profile targets in recent times.
HT @cR0w
The text comes from the HTML source btw.
8base weren't particular great at OPSEC, e.g. their Tor server was blatantly publicly visible on the plain internet for a while - it also had SSH running with the same host signature that LockBit 3.0 use.
based on the timestamps, apparently the portal changed yesterday. Their last victim post was 10 days ago. Has gone from Nginx to Apache webserver on Debian.
@FernandoMiguel@cyberplace.social@GossiTheDog people running apache is a big red flag :D