Index live· 1,284 files · 148 editions
ForensicPost

Search the index

5 results
Try
Results for “Primary source”Newest first
25-0508
File

LockBit Affiliate Panel Breached, Defaced and Its Database Published

A chat archive is people talking. A panel dump is records — generated by the operation for its own use rather than asserted to anyone.

UnattributedPanel compromiseCriminalPrimary source
Sev 5TargetLockBitActorUnattributed
25-0226
File

The Black Basta Archive Is the Best Primary Source Here and a Sample of One

The most sensitive coordination in any organisation is the least likely to be typed. The archive is a survivorship sample of itself.

Black BastaMultipleMethod
Sev 2TargetNot applicableActorBlack Basta
25-0211
File

ExploitWhispers Published 200,000 Internal Black Basta Chat Messages

The operation describing itself, to itself, with no expectation of being read. Nearly everything else in this corpus is an attacker described from outside.

ExploitWhispersInsider disclosureCriminalPrimary source
Sev 5TargetBlack BastaActorExploitWhispers
24-0821
File

The SEC Asked Halliburton to Explain Its Own Disclosure

The rule requires disclosure of a material incident. It does not require the company to show its working — and Halliburton said so, in writing, to the SEC.

RansomHubEnergy servicesPrimary source
Sev 3TargetHalliburtonActorRansomHubUSA
24-0112
File

Microsoft Says Password Spray on a Legacy Test Account Reached Leadership Email

No exploit and no zero-day. An account existed, it had a guessable password, and nobody had required a second factor on it.

Midnight BlizzardPassword sprayCloudPrimary source
Sev 4TargetMicrosoftActorMidnight BlizzardUSA
© 2026 ForensicPost Media · the desk · newsletterGlossaryNo search logging