Cyber Intelligence Hub

Reduce your cyber risk and enhance your security posture with our expert resources. We provide the intelligence and strategies you need to protect your organization from evolving cyber threats.
AllCTICybercrimeDark Web
Banner for KELA's blog on Exilio404, a Portuguese-language dark web forum hosting carding, money mule and malware activity targeting Brazil.
Cybercrime

July 17, 2026

Inside Exilio404: Brazil's Underground Cybercrime SceneExilio404 is a Portuguese-language dark web forum that emerged in May 2025 and now hosts thousands of posts on carding, phishing, malware and money mule operations targeting Brazil. This blog examines
ByteToBreach: A Deep Dive into a Persistent Data Leak Operator
Threat Actor Spotlight

July 17, 2026

ByteToBreach: A Deep Dive into a Persistent Data Leak OperatorKELA uncovers ByteToBreach, a technically skilled cybercriminal selling sensitive global data from airlines, banks, and governments. This profile reveals his tactics, targets, and online identities ac
Top 10 Dark Web Search Engines: Enhance Your CTEM Discovery Strategy
Dark Web

July 14, 2026

Top 10 Dark Web Search Engines: Enhance Your CTEM Discovery StrategyDark web search engines give security teams a way to surface threats that never reach Google: leaked credentials, stealer logs, and active cybercrime chatter. This guide compares the top ten, shows wh
Top 10 Telegram Log & Carding Channels: A CTEM Defense Strategy
CTI

July 13, 2026

Top 10 Telegram Log & Carding Channels: A CTEM Defense StrategyMajor Telegram channels are fueling data theft and carding schemes. KELA helps your business track these threats and take action before they escalate.
Infrastructure Destruction Squad & BLACKNET-00: The Rise of a Hybrid Hacktivist-Ransomware Threat
Threat Actor Spotlight

July 6, 2026

Infrastructure Destruction Squad & BLACKNET-00: The Rise of a Hybrid Hacktivist-Ransomware ThreatThe Infrastructure Destruction Squad, is a hybrid threat actor blending hacktivism with cybercrime. They recently launched the $300 BLACKNET-00 ransomware builder alongside critical infrastructure exp
The Herd Immunity Effect: How Shared Threat Intelligence Makes Every Defender Stronger
CTI

July 1, 2026

How Threat Intelligence Sharing Strengthens Your Business NetworkThreat intelligence sharing helps organizations detect attacks faster by learning from threats seen across industries — improving response speed, prioritization, and resilience.
Image of a hand holding money with a snake wrapped around the arm to show a digital version that's turned them into a money mule
Cybercrime

June 26, 2026

Exposing the Underground Mule-as-a-Service Economy: How AI and Telegram Are Reshaping Money LaunderingA defenders guide to the MaaS economy that industrializes money laundering
The BreachForums Succession Wars
Cybercrime

June 22, 2026

The BreachForums Succession WarsKELA maps the fragmentation of BreachForums after the October 2025 FBI seizure into three rival successors — PWN, Breached, and HasanBroker's DoxByte — and explains why the most active heir now operat
2026 FIFA World Cup Cyber Threat Landscape
Cybercrime

June 14, 2026

Securing the Pitch for 6 Billion People: How Previous Games Shaped the 2026 FIFA World Cup Cyber Threat Landscape State-sponsored APTs, industrial-scale ticket fraud, and 1.5M+ leaked credentials: KELA's CIC breaks down the cyber threats facing the 2026 FIFA World Cup—and how to defend