■ INFO#EDITORIAL#BY JORDANDisclosed2026-05-15Added to DMZ2026-05-15
Why I'm Building DMZ
I served nine years in the Navy as an Aviation Boatswain's Mate before I ever touched a SIEM. A year into my first analyst role, I started building DMZ — the threat intel publication I wish existed when I was sitting at my desk a year ago,…
■ MEDIUM#ACTOR#CRIMINAL
AudiA6 / Dark2Web Criminal Organization
AudiA6 was an industrial-scale cryptocurrency laundering operation linked to more than 15 global investigations related to ransomware attacks and large-scale crypto theft. On June 10, 2026, Europol and the U.S. DOJ coordinated the arrest…
■ MEDIUM#ACTOR#CRIMINAL
Amadey / StealC MaaS Operators
As part of the ongoing Operation Endgame Phase 4 (June 2026), Europol and partners from six countries disrupted the Amadey and StealC malware-as-a-service networks, seizing 326 servers, freezing $47M in criminal cryptocurrency, and…
■ HIGH#DARK WEB#EXPLOIT
[FortiBleed] FortiGate / Fortinet VPN Credential Auction — 34,000 Lines
Auctioning verified FortiGate SSL-VPN and admin credentials. Dataset covers ████████████. Credentials validated via automated tooling. Targets indexed by sector and revenue. Starting bid ███████████, later raised to ███████████ after…
■ HIGH#DARK WEB#EXPLOIT
[FortiBleed] FortiGate / Fortinet Access — 35,000 Devices For Sale
Selling FortiGate SSL-VPN and admin access. Dataset contains URL, username, password, domain name, and revenue of organization for ████████████. Price: ███████. Actor references FortiBleed campaign by name. Same actor previously listed…