Search results

A dual United States and Estonian citizen has been extradited to the U.S. to face charges alleging he was a member of the Scattered Spider hacking collective. 19-year-old Peter Stokes (who used the online handles "Bouquet," "Spencer," and "Jordan") was arrested in Finland on April 10 while...

A campaign active since last November has been targeting Python developers building Telegram bots with trojanized Pyrogram forks that allow attackers to read arbitrary files on compromised servers. At least eight packages have been published on the Python Package Index (PyPI) with a hidden...

IT services giant Accenture has confirmed it suffered a security breach after a threat actor claimed to have stolen 35 GB of source code and other data from the company. "We are aware of this isolated matter, and we have remediated its source. There is no impact to Accenture operations and...

The Ostium trading platform announced that an attacker stole $23.75 million from its liquidity provider vault last week, after compromising off-chain infrastructure used to feed prices into the protocol. According to an update from the platform yesterday, the attacker submitted illegitimate...

Malicious packages on the Node Package Manager (npm) and the Python Package Index (PyPI) delivered stealer malware to developers and users of Paysafe, Skrill, and Neteller payment applications. The threat actor published at least 17 malicious packages simultaneously, each tasked to exfiltrate...

A new version of the RedHook Android malware abuses the Android Wireless Debugging (Wireless ADB) mechanism in a novel way to gain shell-level privileges without requiring a computer connection. Researchers at cybersecurity company Group-IB analyzed the new release of the mobile malware and say...

Online advertising firm Adform suffered a supply-chain attack that delivered cryptocurrency-stealing scripts to websites using its ad platform, replacing wallet addresses copied to visitors’ clipboards with ones controlled by an attacker. Adform is one of Europe’s largest adtech firms, providing...

Australian energy provider Origin Energy has confirmed a data breach by an unknown threat actor that exposed customers' personally identifiable information (PII). The company has 4.8 million customers and is currently investigating how many of them have been impacted to inform them of the risk...

🃏 Carding MTG Cards: CardKingdom 🃏 A common question I get: "d0ctrine whats the best thing to card that I can flip quickly?" The answer isnt simple - its about finding that sweet spot between risk and reward. If you read my write-up on the Value-Risk Balance you already know the basics. But...

🕵️The Art of Digital Reconnaissance: A Carder's Guide (Part 2)🕵️ Welcome back ambitious bastards. If Pt 1 was the starter, then get ready for the main event of carding recon. Were about to get into the technical stuff that separates the noobs from the pros. This part is all about Man in the...

🌍 Carding High-Value Domains 🌍 Ever notice how most carders are like sheep all rushing to card the same shit over and over? PS5s iPhones, gift cards - basic bitch stuff that gets burned fast. Meanwhile the real money's hiding in plain sight waiting for someone with half a brain to notice it...

🚚 All About Reshippers 🚚 Lets talk about one of the most crucial aspects of carding goods - getting your hands on the actual merch. About 90% of the time you need a solid drop address to actually receive your carded items. While private drops are the best option (well cover those in another...

🌐 Strategic Carding: Getting the Cleanest Possible IPs 🌐 Welcome to another carding knowledge you didnt know you needed. Today were diving into the dirty world of proxy providers and how to get every last drop of value out of their so called “clean” IPs. You see most of you noobs think youve...

📱In-App Purchases Carding📱 Ever tried punching a site with your best cards and setups but that shit just wont budge? Or maybe your cards are burned to a crisp - payment processors have flagged and blacklisted your ass. Frustrating as fuck, right? Well there's a sneaky little backdoor that most...

🔎 Strategic Carding: Deep Research 🔎 The fucking arms race never ends. Every day the antifraud systems get smarter and every day we need to get more creative. I cant check my DMs without seeing fifty variations of the same desperate questions: "d0c, I can't find sites that dont block me...

🏠 Strategic Carding: Jigging Your Drops 🏠 Hey degenerates its time we talk about a classic carding technique thats still kicking ass in 2024: address jigging. If youve been around the block or if youve read most of my other guides you might think you know all there is to know about this shit...

📱 The iPhone: A Carder's Ultimate Tool 📱 One of the things hackers and carders who pretend to be proficient with technology like to ignore is the Apple ecosystem. But if youre a carder and youre wasting your time with Android emulators, antidetects and VMs and yet still getting rejected by AI...

🔥 Carding eBay with PayPal 🔥 Most carders avoid eBay like its radioactive waste. "Too risky" they say. "Too many security layers." But fuck that noise - theyre dead wrong. eBay moves billions in merch daily and with the right technique you can grab your slice of that pie without getting burned...

🚫 Get Rid Of The BIN Mindset 🚫 Every fucking day I see the same shit - carders obsessing over BINs like theyre magic lottery numbers. 'What BIN works for Amazon?' 'Need BIN for Best Buy!' The Telegram groups are a cesspool of BIN-beggars who think finding the right number sequence is their...

🕵️The Art of Digital Reconnaissance: A Carder's Guide🕵️ For those who have been following my carding guides across forums, youre familiar with my emphasis on recon before hitting any site. The flood of DMs begging for a deeper dive into this process has finally worn me down. So here we are...