SECURITY FIRM HACKS RANSOMWARE GANG, CRIPPLES OPERATIONS

Summary from the TLDR InfoSec newsletter

After discovering a vulnerability on BlackLock's data leak site, Resecurity researchers have been covertly acquiring information since late 2024. The researchers exploited a Local File Inclusion vulnerability to retrieve server-side configuration details and credentials along with plain text server logs, SSH credentials, and command-line histories. Resecurity researchers utilized their position to warn law enforcement and potential victims before leaks occurred.