One crew, five names in a year: BlackFile, Redact, Pink, Helix, Falcon. Same templates, same victims, shared infrastructure, wallets holding roughly 10.7 million dollars. The pitch never changes: IT calling, urgent upgrade. Read the filing #vishing #phishing #passkeys #infosec
The call that comes from your own IT desk | Steelwise
Attackers ring staff on personal mobiles posing as IT support and capture logins on fake portals. The callback rule that stops it.
steelwise.uk
November 8, 2026 at 11:06 AM
One crew, five names in a year: BlackFile, Redact, Pink, Helix, Falcon. Same templates, same victims, shared infrastructure, wallets holding roughly 10.7 million dollars. The pitch never changes: IT calling, urgent upgrade. Read the filing #vishing #phishing #passkeys #infosec
BLACKFILE // THE ROAD ENDS HERE.
Every tile changes your escape. Every bunker may be occupied. The survival board game BUG OUT is crowdfunding now. Back by Dec 5: https://gamefound.com/en/projects/baseraider/bug-out-escape-your-paranoia
Every tile changes your escape. Every bunker may be occupied. The survival board game BUG OUT is crowdfunding now. Back by Dec 5: https://gamefound.com/en/projects/baseraider/bug-out-escape-your-paranoia
November 8, 2026 at 12:03 AM
BLACKFILE // THE ROAD ENDS HERE.
Every tile changes your escape. Every bunker may be occupied. The survival board game BUG OUT is crowdfunding now. Back by Dec 5: https://gamefound.com/en/projects/baseraider/bug-out-escape-your-paranoia
Every tile changes your escape. Every bunker may be occupied. The survival board game BUG OUT is crowdfunding now. Back by Dec 5: https://gamefound.com/en/projects/baseraider/bug-out-escape-your-paranoia
BLACKFILE // STATUS CHANGE: BUG OUT is now crowdfunding on Gamefound. The bunker doors are open.
Watch the new SCAVENGERS trailer: https://www.youtube.com/shorts/65MSBHNRst8
BACK:
Watch the new SCAVENGERS trailer: https://www.youtube.com/shorts/65MSBHNRst8
BACK:
Bug Out: Escape your Paranoia by Baseraider - Gamefound
Will you escape your unfounded paranoia? The neighborhood has gone quiet. You are sure something is coming. What it is depends on who you ask. The only thing that truly matters is reaching a bunker with enough supplies left to call yourself prepared. Bug Out is a competitive game for 2 to 4 players....
gamefound.com
November 2, 2026 at 4:45 PM
BLACKFILE // STATUS CHANGE: BUG OUT is now crowdfunding on Gamefound. The bunker doors are open.
Watch the new SCAVENGERS trailer: https://www.youtube.com/shorts/65MSBHNRst8
BACK:
Watch the new SCAVENGERS trailer: https://www.youtube.com/shorts/65MSBHNRst8
BACK:
BLACKFILE // ARRIVAL CONFIRMED. Our BUG OUT production prototype is here. Watch the recovery footage. Next: unboxing, component inspection & gameplay evidence. Trust nothing. Check everything.
https://gamefound.com/en/projects/baseraider/bug-out-escape-your-paranoia
https://gamefound.com/en/projects/baseraider/bug-out-escape-your-paranoia
October 31, 2026 at 9:07 PM
BLACKFILE // ARRIVAL CONFIRMED. Our BUG OUT production prototype is here. Watch the recovery footage. Next: unboxing, component inspection & gameplay evidence. Trust nothing. Check everything.
https://gamefound.com/en/projects/baseraider/bug-out-escape-your-paranoia
https://gamefound.com/en/projects/baseraider/bug-out-escape-your-paranoia
BLACKFILE // BUP-1031: FINAL WARNING.
Tonight, 11:59 PM Central: BUG OUT activates on Gamefound. Roads compromised. Bunkers disputed. Supplies counted. The Bureau trusts nobody.
FOLLOW before the file opens: https://gamefound.com/en/projects/baseraider/bug-out-escape-your-paranoia
Tonight, 11:59 PM Central: BUG OUT activates on Gamefound. Roads compromised. Bunkers disputed. Supplies counted. The Bureau trusts nobody.
FOLLOW before the file opens: https://gamefound.com/en/projects/baseraider/bug-out-escape-your-paranoia
October 31, 2026 at 9:10 PM
BLACKFILE // BUP-1031: FINAL WARNING.
Tonight, 11:59 PM Central: BUG OUT activates on Gamefound. Roads compromised. Bunkers disputed. Supplies counted. The Bureau trusts nobody.
FOLLOW before the file opens: https://gamefound.com/en/projects/baseraider/bug-out-escape-your-paranoia
Tonight, 11:59 PM Central: BUG OUT activates on Gamefound. Roads compromised. Bunkers disputed. Supplies counted. The Bureau trusts nobody.
FOLLOW before the file opens: https://gamefound.com/en/projects/baseraider/bug-out-escape-your-paranoia
BLACKFILE // DISCLOSURE 008
Three knocks inside a sealed bunker. Then an unplugged radio answered. Do NOT answer the fourth.
Watch BUG OUT evidence: https://www.youtube.com/shorts/g9J8wCA5YYY
Case archive:
Three knocks inside a sealed bunker. Then an unplugged radio answered. Do NOT answer the fourth.
Watch BUG OUT evidence: https://www.youtube.com/shorts/g9J8wCA5YYY
Case archive:
Bug Out: Escape your Paranoia by Baseraider - Gamefound
Will you escape your unfounded paranoia? The neighborhood has gone quiet. You are sure something is coming. What it is depends on who you ask. The only thing that truly matters is reaching a bunker with enough supplies left to call yourself prepared. Bug Out is a competitive game for 2 to 4 players....
gamefound.com
October 21, 2026 at 5:02 PM
BLACKFILE // DISCLOSURE 008
Three knocks inside a sealed bunker. Then an unplugged radio answered. Do NOT answer the fourth.
Watch BUG OUT evidence: https://www.youtube.com/shorts/g9J8wCA5YYY
Case archive:
Three knocks inside a sealed bunker. Then an unplugged radio answered. Do NOT answer the fourth.
Watch BUG OUT evidence: https://www.youtube.com/shorts/g9J8wCA5YYY
Case archive:
BLACKFILE // THE ROAD ISN'T SAFE.
Your route. Your supplies. Somebody else's bunker.
Can you reach safety—and still win?
Explore BUG OUT: Escape Your Paranoia before the Halloween launch:
https://gamefound.com/en/projects/baseraider/bug-out-escape-your-paranoia
Your route. Your supplies. Somebody else's bunker.
Can you reach safety—and still win?
Explore BUG OUT: Escape Your Paranoia before the Halloween launch:
https://gamefound.com/en/projects/baseraider/bug-out-escape-your-paranoia
October 19, 2026 at 12:30 AM
BLACKFILE // THE ROAD ISN'T SAFE.
Your route. Your supplies. Somebody else's bunker.
Can you reach safety—and still win?
Explore BUG OUT: Escape Your Paranoia before the Halloween launch:
https://gamefound.com/en/projects/baseraider/bug-out-escape-your-paranoia
Your route. Your supplies. Somebody else's bunker.
Can you reach safety—and still win?
Explore BUG OUT: Escape Your Paranoia before the Halloween launch:
https://gamefound.com/en/projects/baseraider/bug-out-escape-your-paranoia
BLACKFILE // The Bureau leak exposes case files, bunker disputes & the Halloween directive. Your rivals can read it too. First into a bunker ≠ victory.
Read BUG OUT's game dossier:
https://gamefound.com/en/projects/baseraider/bug-out-escape-your-paranoia/updates/7
Read BUG OUT's game dossier:
https://gamefound.com/en/projects/baseraider/bug-out-escape-your-paranoia/updates/7
October 18, 2026 at 9:30 PM
BLACKFILE // The Bureau leak exposes case files, bunker disputes & the Halloween directive. Your rivals can read it too. First into a bunker ≠ victory.
Read BUG OUT's game dossier:
https://gamefound.com/en/projects/baseraider/bug-out-escape-your-paranoia/updates/7
Read BUG OUT's game dossier:
https://gamefound.com/en/projects/baseraider/bug-out-escape-your-paranoia/updates/7
BUP-019 // THE FILES HAVE ESCAPED.
Secret goals. Missing production records. Our own investigation, dated tomorrow.
Blackfile won't answer.
BUG OUT launches Halloween. Follow:
Secret goals. Missing production records. Our own investigation, dated tomorrow.
Blackfile won't answer.
BUG OUT launches Halloween. Follow:
Bug Out: Escape your Paranoia by Baseraider - Gamefound
Will you escape your unfounded paranoia? The neighborhood has gone quiet. You are sure something is coming. What it is depends on who you ask. The only thing that truly matters is reaching a bunker with enough supplies left to call yourself prepared. Bug Out is a competitive game for 2 to 4 players....
gamefound.com
October 18, 2026 at 7:03 PM
BUP-019 // THE FILES HAVE ESCAPED.
Secret goals. Missing production records. Our own investigation, dated tomorrow.
Blackfile won't answer.
BUG OUT launches Halloween. Follow:
Secret goals. Missing production records. Our own investigation, dated tomorrow.
Blackfile won't answer.
BUG OUT launches Halloween. Follow:
BLACKFILE // BUP-019
Whispers say the BUP knew about the scavengers. What did they bring back—and why was the file sealed?
BUG OUT: Escape Your Paranoia
https://gamefound.com/en/projects/baseraider/bug-out-escape-your-paranoia
Whispers say the BUP knew about the scavengers. What did they bring back—and why was the file sealed?
BUG OUT: Escape Your Paranoia
https://gamefound.com/en/projects/baseraider/bug-out-escape-your-paranoia
October 16, 2026 at 8:15 PM
BLACKFILE // BUP-019
Whispers say the BUP knew about the scavengers. What did they bring back—and why was the file sealed?
BUG OUT: Escape Your Paranoia
https://gamefound.com/en/projects/baseraider/bug-out-escape-your-paranoia
Whispers say the BUP knew about the scavengers. What did they bring back—and why was the file sealed?
BUG OUT: Escape Your Paranoia
https://gamefound.com/en/projects/baseraider/bug-out-escape-your-paranoia
BLACKFILE // ADDITIONAL FOOTAGE DECRYPTED
The originals survived. Our source's all-clear never arrived. Who else has a copy?
Enter the BUG OUT board-game archives:
https://gamefound.com/en/projects/baseraider/bug-out-escape-your-paranoia/updates/7
The originals survived. Our source's all-clear never arrived. Who else has a copy?
Enter the BUG OUT board-game archives:
https://gamefound.com/en/projects/baseraider/bug-out-escape-your-paranoia/updates/7
October 16, 2026 at 2:59 PM
BLACKFILE // ADDITIONAL FOOTAGE DECRYPTED
The originals survived. Our source's all-clear never arrived. Who else has a copy?
Enter the BUG OUT board-game archives:
https://gamefound.com/en/projects/baseraider/bug-out-escape-your-paranoia/updates/7
The originals survived. Our source's all-clear never arrived. Who else has a copy?
Enter the BUG OUT board-game archives:
https://gamefound.com/en/projects/baseraider/bug-out-escape-your-paranoia/updates/7
BLACKFILE // THE SAFE FILE
What needs protecting from the people already inside the bunker?
BUG OUT concept art; goals remain proposed.
Dossier: https://gamefound.com/en/projects/baseraider/bug-out-escape-your-paranoia/updates/7
Transmission: https://youtu.be/g9J8wCA5YYY
What needs protecting from the people already inside the bunker?
BUG OUT concept art; goals remain proposed.
Dossier: https://gamefound.com/en/projects/baseraider/bug-out-escape-your-paranoia/updates/7
Transmission: https://youtu.be/g9J8wCA5YYY
October 16, 2026 at 2:32 PM
BLACKFILE // THE SAFE FILE
What needs protecting from the people already inside the bunker?
BUG OUT concept art; goals remain proposed.
Dossier: https://gamefound.com/en/projects/baseraider/bug-out-escape-your-paranoia/updates/7
Transmission: https://youtu.be/g9J8wCA5YYY
What needs protecting from the people already inside the bunker?
BUG OUT concept art; goals remain proposed.
Dossier: https://gamefound.com/en/projects/baseraider/bug-out-escape-your-paranoia/updates/7
Transmission: https://youtu.be/g9J8wCA5YYY
BLACKFILE // THE REINFORCEMENT LINE
The Bureau calls it preparation. Blackfile calls it evidence.
Examine the leaked dossier and its proposed secret goals:
https://gamefound.com/en/projects/baseraider/bug-out-escape-your-paranoia/updates/7
#BugOutGame #EscapeYourParanoia #BoardGames
The Bureau calls it preparation. Blackfile calls it evidence.
Examine the leaked dossier and its proposed secret goals:
https://gamefound.com/en/projects/baseraider/bug-out-escape-your-paranoia/updates/7
#BugOutGame #EscapeYourParanoia #BoardGames
October 16, 2026 at 1:53 AM
BLACKFILE // THE REINFORCEMENT LINE
The Bureau calls it preparation. Blackfile calls it evidence.
Examine the leaked dossier and its proposed secret goals:
https://gamefound.com/en/projects/baseraider/bug-out-escape-your-paranoia/updates/7
#BugOutGame #EscapeYourParanoia #BoardGames
The Bureau calls it preparation. Blackfile calls it evidence.
Examine the leaked dossier and its proposed secret goals:
https://gamefound.com/en/projects/baseraider/bug-out-escape-your-paranoia/updates/7
#BugOutGame #EscapeYourParanoia #BoardGames
BLACKFILE // THE REINFORCEMENT LINE
The Bureau calls it preparation. Blackfile calls it evidence.
Examine the leaked dossier and its proposed secret goals:
https://gamefound.com/en/projects/baseraider/bug-out-escape-your-paranoia/updates/7
#BugOutGame #EscapeYourParanoia #BoardGames
The Bureau calls it preparation. Blackfile calls it evidence.
Examine the leaked dossier and its proposed secret goals:
https://gamefound.com/en/projects/baseraider/bug-out-escape-your-paranoia/updates/7
#BugOutGame #EscapeYourParanoia #BoardGames
October 16, 2026 at 2:05 AM
BLACKFILE // THE REINFORCEMENT LINE
The Bureau calls it preparation. Blackfile calls it evidence.
Examine the leaked dossier and its proposed secret goals:
https://gamefound.com/en/projects/baseraider/bug-out-escape-your-paranoia/updates/7
#BugOutGame #EscapeYourParanoia #BoardGames
The Bureau calls it preparation. Blackfile calls it evidence.
Examine the leaked dossier and its proposed secret goals:
https://gamefound.com/en/projects/baseraider/bug-out-escape-your-paranoia/updates/7
#BugOutGame #EscapeYourParanoia #BoardGames
BLACKFILE // BUP-017
Every copied page risked exposing our source. The transmission arrived. The all-clear did not.
Check your pack.
BUG OUT board-game archives:
https://gamefound.com/en/projects/baseraider/bug-out-escape-your-paranoia/updates/7
Every copied page risked exposing our source. The transmission arrived. The all-clear did not.
Check your pack.
BUG OUT board-game archives:
https://gamefound.com/en/projects/baseraider/bug-out-escape-your-paranoia/updates/7
October 16, 2026 at 3:20 AM
BLACKFILE // BUP-017
Every copied page risked exposing our source. The transmission arrived. The all-clear did not.
Check your pack.
BUG OUT board-game archives:
https://gamefound.com/en/projects/baseraider/bug-out-escape-your-paranoia/updates/7
Every copied page risked exposing our source. The transmission arrived. The all-clear did not.
Check your pack.
BUG OUT board-game archives:
https://gamefound.com/en/projects/baseraider/bug-out-escape-your-paranoia/updates/7
BLACKFILE // DISCLOSURE 008
Three knocks inside a sealed bunker. Then an unplugged radio answered.
Do not answer the fourth knock.
BUG OUT board game — examine the Bureau leak:
gamefound.com/en/projects/...
Three knocks inside a sealed bunker. Then an unplugged radio answered.
Do not answer the fourth knock.
BUG OUT board game — examine the Bureau leak:
gamefound.com/en/projects/...
October 15, 2026 at 3:25 PM
BLACKFILE // DISCLOSURE 008
Three knocks inside a sealed bunker. Then an unplugged radio answered.
Do not answer the fourth knock.
BUG OUT board game — examine the Bureau leak:
gamefound.com/en/projects/...
Three knocks inside a sealed bunker. Then an unplugged radio answered.
Do not answer the fourth knock.
BUG OUT board game — examine the Bureau leak:
gamefound.com/en/projects/...
BLACKFILE // REINFORCEMENT ORDER
Thicker roads. A secret file. A locked safe.
What does the Bureau expect to put on those roads?
BUG OUT concept dossier: proposed goals, not unlocked rewards.
https://gamefound.com/en/projects/baseraider/bug-out-escape-your-paranoia/updates/7
Thicker roads. A secret file. A locked safe.
What does the Bureau expect to put on those roads?
BUG OUT concept dossier: proposed goals, not unlocked rewards.
https://gamefound.com/en/projects/baseraider/bug-out-escape-your-paranoia/updates/7
October 15, 2026 at 8:50 PM
BLACKFILE // REINFORCEMENT ORDER
Thicker roads. A secret file. A locked safe.
What does the Bureau expect to put on those roads?
BUG OUT concept dossier: proposed goals, not unlocked rewards.
https://gamefound.com/en/projects/baseraider/bug-out-escape-your-paranoia/updates/7
Thicker roads. A secret file. A locked safe.
What does the Bureau expect to put on those roads?
BUG OUT concept dossier: proposed goals, not unlocked rewards.
https://gamefound.com/en/projects/baseraider/bug-out-escape-your-paranoia/updates/7
BLACKFILE // BUP-010: BUNKER ACCESS DISPUTE
Your neighbor built a bunker. Nobody agreed who gets inside.
The leaked index exposes the dispute—and the Halloween directive.
BUG OUT board game. Read the evidence:
https://gamefound.com/en/projects/baseraider/bug-out-escape-your-paranoia/updates/7
Your neighbor built a bunker. Nobody agreed who gets inside.
The leaked index exposes the dispute—and the Halloween directive.
BUG OUT board game. Read the evidence:
https://gamefound.com/en/projects/baseraider/bug-out-escape-your-paranoia/updates/7
October 15, 2026 at 3:31 PM
BLACKFILE // BUP-010: BUNKER ACCESS DISPUTE
Your neighbor built a bunker. Nobody agreed who gets inside.
The leaked index exposes the dispute—and the Halloween directive.
BUG OUT board game. Read the evidence:
https://gamefound.com/en/projects/baseraider/bug-out-escape-your-paranoia/updates/7
Your neighbor built a bunker. Nobody agreed who gets inside.
The leaked index exposes the dispute—and the Halloween directive.
BUG OUT board game. Read the evidence:
https://gamefound.com/en/projects/baseraider/bug-out-escape-your-paranoia/updates/7
One crew, five names in a year: BlackFile, Redact, Pink, Helix, Falcon. Same templates, same victims, shared infrastructure, wallets holding roughly 10.7 million dollars. The pitch never changes: IT calling, urgent upgrade. Read the filing #vishing #phishing #passkeys #infosec
The call that comes from your own IT desk | Steelwise
Attackers ring staff on personal mobiles posing as IT support and capture logins on fake portals. The callback rule that stops it.
steelwise.uk
October 4, 2026 at 1:12 PM
One crew, five names in a year: BlackFile, Redact, Pink, Helix, Falcon. Same templates, same victims, shared infrastructure, wallets holding roughly 10.7 million dollars. The pitch never changes: IT calling, urgent upgrade. Read the filing #vishing #phishing #passkeys #infosec
Up early so figured I’d flag a few more Blackfile/Helix and adjacent domains. Flying out this afternoon for work travel so may be scarce for the next week or so, but will try to continue updates where I can. CSVs at the IFIN thread.
ifin.network/t/blackfile-...
ifin.network/t/blackfile-...
Blackfile & Related emerging domains
📎 TLP:CLEAR Up early so figured I’d flag a few more Blackfile/Helix and adjacent domains. Flying out this afternoon to LABScon and then a work onsite in Chicago so may be scarce for the next week ...
ifin.network
September 16, 2026 at 11:36 AM
Up early so figured I’d flag a few more Blackfile/Helix and adjacent domains. Flying out this afternoon for work travel so may be scarce for the next week or so, but will try to continue updates where I can. CSVs at the IFIN thread.
ifin.network/t/blackfile-...
ifin.network/t/blackfile-...
Morning trawl for ShinyHunters/Blackfile and adjacent:
globalkeysecwork[.]com
challenge-onekey[.]com
agentkeystore[.]com
myaccount-auth[.]com
m365-authservices[.]com
globalkeysecwork[.]com
challenge-onekey[.]com
agentkeystore[.]com
myaccount-auth[.]com
m365-authservices[.]com
Blackfile & Related emerging domains
Morning trawl for ShinyHunters/Blackfile and adjacent: globalkeysecwork[.]com challenge-onekey[.]com agentkeystore[.]com myaccount-auth[.]com m365-authservices[.]com also seeing what looks like ...
ifin.network
September 15, 2026 at 4:26 PM
Morning trawl for ShinyHunters/Blackfile and adjacent:
globalkeysecwork[.]com
challenge-onekey[.]com
agentkeystore[.]com
myaccount-auth[.]com
m365-authservices[.]com
globalkeysecwork[.]com
challenge-onekey[.]com
agentkeystore[.]com
myaccount-auth[.]com
m365-authservices[.]com
also what looks like an evolution in more direct targeting in apex domains:
report-westernunion[.]com
report-marriott[.]com
report-crypto[.]com
report-target[.]com
report-roblox[.]com
report-hyatt[.]com
report-unum[.]com
CSV with details over at the IFIN thread:
ifin.network/t/blackfile-...
report-westernunion[.]com
report-marriott[.]com
report-crypto[.]com
report-target[.]com
report-roblox[.]com
report-hyatt[.]com
report-unum[.]com
CSV with details over at the IFIN thread:
ifin.network/t/blackfile-...
Blackfile & Related emerging domains
Morning trawl for ShinyHunters/Blackfile and adjacent: globalkeysecwork[.]com challenge-onekey[.]com agentkeystore[.]com myaccount-auth[.]com m365-authservices[.]com also seeing what looks like ...
ifin.network
September 15, 2026 at 4:26 PM
also what looks like an evolution in more direct targeting in apex domains:
report-westernunion[.]com
report-marriott[.]com
report-crypto[.]com
report-target[.]com
report-roblox[.]com
report-hyatt[.]com
report-unum[.]com
CSV with details over at the IFIN thread:
ifin.network/t/blackfile-...
report-westernunion[.]com
report-marriott[.]com
report-crypto[.]com
report-target[.]com
report-roblox[.]com
report-hyatt[.]com
report-unum[.]com
CSV with details over at the IFIN thread:
ifin.network/t/blackfile-...
Updated the @ifin@infosec.exchange thread here.
Blackfile-suspected list (attached) up to 59. Medium-high confidence.
Also attached CSV of 134 domains connected or adjacent to Blackfile/ShinyHunters from Sept 11-14, all worth blocking preemptively.
ifin.network/t/blackfile-...
Blackfile-suspected list (attached) up to 59. Medium-high confidence.
Also attached CSV of 134 domains connected or adjacent to Blackfile/ShinyHunters from Sept 11-14, all worth blocking preemptively.
ifin.network/t/blackfile-...
Blackfile & Related emerging domains
Blackfile-suspected list (attached) up to 59. Medium-high confidence. Also attached CSV of 134 domains connected or adjacent to Blackfile/ShinyHunters from Sept 11-14, all worth blocking preemptively...
ifin.network
September 14, 2026 at 6:13 PM
Updated the @ifin@infosec.exchange thread here.
Blackfile-suspected list (attached) up to 59. Medium-high confidence.
Also attached CSV of 134 domains connected or adjacent to Blackfile/ShinyHunters from Sept 11-14, all worth blocking preemptively.
ifin.network/t/blackfile-...
Blackfile-suspected list (attached) up to 59. Medium-high confidence.
Also attached CSV of 134 domains connected or adjacent to Blackfile/ShinyHunters from Sept 11-14, all worth blocking preemptively.
ifin.network/t/blackfile-...
New activity:
passkeyoptions[.]com (Fleetcor, Bainco, Global-E, Dechert, Lendio, BigCommerce, Ring)
register-passkeys[.]com (Ciena)
installpasskey[.]com (Billcom)
Newly seen:
Blackfile high confidence:
add-mfa[.]com
hashkey-exchange[.]com
passkey-auth[.]com
Medium confidence:
globalkeysec[.]com
passkeyoptions[.]com (Fleetcor, Bainco, Global-E, Dechert, Lendio, BigCommerce, Ring)
register-passkeys[.]com (Ciena)
installpasskey[.]com (Billcom)
Newly seen:
Blackfile high confidence:
add-mfa[.]com
hashkey-exchange[.]com
passkey-auth[.]com
Medium confidence:
globalkeysec[.]com
September 14, 2026 at 6:13 PM
New activity:
passkeyoptions[.]com (Fleetcor, Bainco, Global-E, Dechert, Lendio, BigCommerce, Ring)
register-passkeys[.]com (Ciena)
installpasskey[.]com (Billcom)
Newly seen:
Blackfile high confidence:
add-mfa[.]com
hashkey-exchange[.]com
passkey-auth[.]com
Medium confidence:
globalkeysec[.]com
passkeyoptions[.]com (Fleetcor, Bainco, Global-E, Dechert, Lendio, BigCommerce, Ring)
register-passkeys[.]com (Ciena)
installpasskey[.]com (Billcom)
Newly seen:
Blackfile high confidence:
add-mfa[.]com
hashkey-exchange[.]com
passkey-auth[.]com
Medium confidence:
globalkeysec[.]com
I've updated both the @ifin-intel.org thread and @domaintools.bsky.social Investigations Github with a new list of medium-high confidence domains in this Blackfile campaign, 55 in all.
Added Unit42 and Microsoft lists to my own.
Added Unit42 and Microsoft lists to my own.
September 10, 2026 at 8:47 PM
I've updated both the @ifin-intel.org thread and @domaintools.bsky.social Investigations Github with a new list of medium-high confidence domains in this Blackfile campaign, 55 in all.
Added Unit42 and Microsoft lists to my own.
Added Unit42 and Microsoft lists to my own.