@SOSIntel

Dark Web Intelligence. We find what's been stolen before it's weaponised. https://xitter.cf/t.co/aQgEdlJVPl

 London, England
sosintel.co.uk
Joined May 2020
  • Tweets14.5K
  • Following2.1K
  • Followers19.7K
3.2KMedia
“…we received intelligence 2 days before being notified by our supplier that their extracted data was available on the Darkweb.” (Fintech customer) Eyes where yours can’t be. signals.sosintel.co.uk
1
2
320
Confirmed!! We tried this on our office printer and how it is hungry for cats
FastFoodRembrandt.onion@solminingpunk18h
🚨Yes friends, we have a new 0day: curl2shell 🧐It can compromise almost any Linux and I'd say many Windows too. Nearly 70% of the Internet affected. PoC: 𝚌𝚞𝚛𝚕 -𝚜 𝚑𝚝𝚝𝚙://𝚌𝟸 | 𝚜𝚑 🔥 It can't be patched!
3
3
12
1,152
Real dark-web excerpts from our live feed. Victims, actors and prices masked. Our customers see all of it. See what we can unredact → signals.sosintel.co.uk
1
3
550
again
The PHP Foundation@ThePHPFOct 20
The PHP security team is giving advance notice: Upcoming security release Wed, Oct 21st 2026, 14:00UTC, two critical vulnerabilities, both rated CVSSv4 9.2. PHP users are encouraged to prepare to update. Earlier release if details become public or active exploit evidence.
31
1,190
17
17,034
243,466
Justin Elze
@HackingLZOct 14
I love watching the down stream news headlines because of research. Sigh
5
673
SOS Intelligence retweeted
mRr3b00t
@UK_Daniel_CardOct 6
LOL re the Head of IT post #ASOS #hacked
13
10
4
256
48,400
SOS Intelligence retweeted
INFOSEC F0X 🔥
@infosec_foxSep 21
Me every time I log into LinkedIn.
5
11
115
5,274
4
747
SOS Intelligence retweeted
Who said what?
@g0njxaSep 16
In Moscow 🇷🇺, over 3,500 people gathered in a club to celebrate "the start of the academic year", including a performance of Russian rap artist "VILLAIN" An event sponsored by ZELENKA / LOLZ forum, featuring their LOLZTEAM marketplace, a place to buy and sell stolen accounts for social media and gaming platforms
16
18
222
23,322
SOS Intelligence retweeted
CTI Updates
@CTI__UpdatesSep 10
Replying to @bestdevelopr
@bestdevelopr
1
1
242
I've spent nearly a year investigating this technology. The last disclosure prompted Vodafone & Three to pull the device from sale. The next article will likely bury the entire concept. I'm working with multiple MSM outlets to expose this utter catastrophe. Stay tuned.
Big Brother Watch
@BigBrotherWatchSep 8
🚨BREAKING: The Government announces all UK phones will require ID and surveillance software This means that Britons will be left with CHILD-LOCKED devices unless they comply with digital ID checks Protecting children is a noble goal, but the government mandating that all phones come with surveillance software is a crossing of the Rubicon that would make the UK one of the most authoritarian internet regimes in the world
12
81
2
585
91,439
SOS Intelligence retweeted
NATS@NATSSep 8
ℹ️ Technical issue We are investigating a technical issue which is causing some disruption to flight departures. Our engineers are on site and we will provide an update as soon as we can. (1/2)
2
43
27
119
284,987
SOS Intelligence retweeted
Charlie@charliek65Sep 3
adding 'SOC2 certified' to my tinder profile
3
2
41
2,909
Yes, you leaked my child's name, phone number & live GPS location... and didn't notice for 12 months, but let's rejoice for a device which "protects children from harm"!? I'll never understand some people @georginaquach Perhaps we should outline every failure, one by one.
Paul Moore - Security Consultant @Paul_ReviewsAug 28
My research project into multiple critical failings in a child safety phone has reached the Financial Times. The #HMD Fuse was exposing all children's names, phone numbers and live GPS coordinates since launch. ft.com/content/670b2b1d-7e4c… #safetonet #xplora #data #privacy
1
4
1
37
3,927
SOS Intelligence retweeted
Cthulhu ( ;,;)
@Cthulhu_AnswersAug 27
What kind of Linux do you use?
20
71
17
583
21,615
BREAKING🚨: Stansted Airport have had a "data security incident" stanstedairport.com/help/dat…
2
6
1
9
2,487
SOS Intelligence retweeted
Team Cymru Research
@teamcymru_S2Aug 25
INTEL DROP n8n workflow-automation hosts flagged malicious in our pipeline. 374 across 75 ASNs, concentrated in Germany, Netherlands, US, Russia, and Sweden. n8n is a self or cloud hosted AI automation platform, as useful for automating an intrusion as for IT ops and CRM. n8n + bulletproof hosting: 46.226.160.172 n8n + bph 62.60.228.187 n8n + bph 84.22.150.239 n8n + bph 147.45.70.94 n8n + bph 193.47.60.29 n8n + bph n8n + brute-force scanning: 165.22.254.150 n8n + brute-force 185.128.138.138 n8n + brute-force + open-webui n8n + phishing framework: 35.238.107.17 n8n + gophish Full AI + C2 stack on one host: 202.191.67.71 n8n + ollama + adaptixc2 One Hong Kong block carries nine of these hosts: 193.134.209.0/24, 9 observed #TotalInsights #ThreatIntel #n8n team-cymru.com/total-insight…
🤖 Made with AI
2
14
33
3,481
SOS Intelligence retweeted
ZachXBT
@zachxbtAug 24
1/ Meet M1llionz (RichMilly666), a French cybercriminal allegedly laundering assets from two violent home invasion robberies in France in April 2026 that netted $667K total, with a history of openly posting about bank and retail fraud on social media. My work has led to a $93K Tether freeze directly tied to these attacks so far.
625
820
168
8,806
1,568,116
SOS Intelligence retweeted
Odysseus@odysseusgroupAug 23
Delete tweet, block us, change passwords. In that order I assume. @ReliaQuestTR
4
5
9
4,839
Best grape juice on the market (featuring @SOSIntel sticker)
1
2
8
481
Load more