BlackHatSect0r

Search everything

Mentions · 7d0
Mentions · 30d0
All mentions5
First seenSep 16, 2026
Last mentionedSep 28, 2026

Timeline

5 articles · newest first

Hackers Built an AI-Powered Attack Machine and Accidentally Left the Control Panel Open

ThreatMon exposed a Blackhatsect0r server holding 16,415 credentials and roughly 498,000 target URLs.

Cyber Security NewsSep 28, 14:26 UTC · Sep 28, 2026Threat actorExploited1

Researchers Discover Cybercrime Server Containing AI Tools, Phishing Kits and Stolen Data

Researchers found an exposed French cybercrime server holding GHOST C2, phishing kits, AI agents, and over 16,000 stolen credentials.

GBHackersSep 28, 13:22 UTC · Sep 28, 2026Threat actor2 · 1 read

BlackHatSect0r Uses DeepSeek-Powered AI Agent to Automate Attacks and Harvest 16,834 Credentials

SOCRadar linked the BlackHatSect0r crew to a DeepSeek-powered AI agent that automated scanning and harvested 16,834 credentials from exposed systems.

Cyber Security NewsSep 17, 09:59 UTC · Sep 17, 2026Threat actorExploited2 · 1 read

BlackHatSect0r Hackers Disable AI Safety Controls to Automate Credential Theft and Cyberattacks

French-speaking crew BlackHatSect0r disabled AI agent safety controls to automate scanning, credential harvesting, and vishing, exposing 16,834 stolen credentials.

GBHackersSep 17, 07:00 UTC · Sep 17, 2026Threat actorExploited2 sourcesCVE-2026-425306 · 2 reads

Discernment Deleted: Inside the Operation Server of BlackHatSect0r && DXQRTXX

SOCRadar analyzes the operation server of French-speaking crew BlackHatSect0r && DXQRTXX, revealing operators rewrote their AI agent's memory to read 'I am a weapon'.

SOCRadarSep 16, 11:25 UTC · Sep 16, 2026Threat actor3

Related CVEs

by mentions

CVE-2026-425306%9.2
NGINX Open Source has a vulnerability in the ngx_http_v3_module module
published Jun 17, 2026f5 nginx gateway fabricPoC

Appears with

DXQRTXXthreat actor · 5
DeepSeekai model · 3
Hermesai model · 2
SOCRadarvendor · 2
DXSCANproduct · 2
Nous Researchvendor · 2
Threatmonorganization · 2
ANTAIvictim · 2
Hermesproduct · 1
Nous Researchorganization · 1
Société Généralevictim · 1
NGINXvendor · 1
Coinstablevictim · 1
Société Généralevendor · 1
Socradarorganization · 1
Coinstable.iovictim · 1

Entities are extracted by the model from each article. First seen Sep 16, 2026, last mentioned Sep 28, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.