GhostSec

The current Venezuelan regime can no longer go on They are starting another sham of an election to create a false sense of democracy the government has now pushed forward in their elections with a series of fraud votes part of which is from a recent event on May 25th where voter turnout was nearly non existed. And now they escalate this scheme even further with municipal elections, fake opposition candidates who are deeply entangles with the regime interests, either by family, or business. We aren't here to tell you what you know about these elections, We and you both know they're fake This is a call to arms, A start of attacks, going against the current regime in support of all the people in Venezuela who deserve their freedom, and rights to have a legitimate vote and democracy. The rights to a real regime with the interests of the country and their people in mind We will not discuss the coming attacks rather we love to surprise you all with the results. This is a final warning to all the corrupt canditates who will participate in this election there will be no difference between maduro's regimen and you. The people voted for freedom, Not for this. And We shall help them get the freedom they deserve Chase your freedom and dreams. We stand by you ~GhostSec 👻

More to come.. Shoot to kill 🏴‍☠️

MoD routing infrastructure 🔹 192.114.62.110 Location: ISOC IXP (Israeli Internet Exchange) Role: Entry point into NetVision network via public peering (used in alternate path to ThousandEyes agent) 🔹 195.160.241.193 Location: MoD subnet Hostname: mod1.defence.gov.il Role: Air Defense/C2 endpoint 🔹 195.160.243.161 Location: MoD subnet Hostname: edge1 Role: MoD edge gateway / reverse proxy 🔹 207.232.57.142 Location: NetVision backbone Hostname: core1-foh0-2-0-19-peering2.ory.nv.net.il Role: Core router in ISP backbone (transit to MoD edge) 🔹 207.232.57.169 Location: NetVision backbone Hostname: core1-gw3-101.ory.ory.nv.net.il Role: Core routing in Or Yehuda PoP 🔹 207.232.57.171 Location: NetVision backbone Hostname: core2-gw3-0-2.ory.ory.nv.net.il Role: Alternate core path (Haifa route) 🔹 212.143.12.21 Location: NetVision Lod (LND) gateway Hostname: gw1-hu4-0.lnd.nv.net.il Role: Gateway at Lod branch into VLAN100 clear zone 🔹 212.143.12.25 Location: NetVision Or Yehuda gateway Hostname: gw3-13-ory-nta.nv.net.il Role: ISP edge gateway (Haifa/ORY path) 🔹 212.143.12.60 Location: NetVision Haifa core Hostname: core2-be1342.hfa.nv.net.il Role: Core backbone router 🔹 212.143.12.65 Location: NetVision Haifa gateway Hostname: gw2-hfa-2-8-gw2.mrs.nv.net.il Role: Haifa ingress gateway (MoD edge path) 🔹 212.143.12.80 Location: NetVision Haifa core Hostname: core1-be11341.hfa.nv.net.il Role: Core backbone router 🔹 212.143.14.153 Location: NetVision Lod edge Hostname: edge5-te0-0-0-0-vl100-gw1-lnd-clear.lnd.nv.net.il Role: MoD VLAN100 edge router (clear zone) 🔹 212.143.203.24 Location: NetVision Or Yehuda peering core Hostname: core1-1-4-gw1.nta.nta.nv.net.il Role: Peering gateway at Or Yehuda 🔹 212.143.203.28 Location: NetVision Or Yehuda peering core Hostname: core1-2-13-peering2-nta.nta.nv.net.il Role: Secondary peering router (connection to ISOC and other peers) 🔹 212.143.60.85 Location: NetVision block Hostname: DSL212-143-60-85.bb.netvision.net.il Role: ThousandEyes Enterprise Agent (traffic monitoring) 🔹 212.143.8.193 Location: NetVision Haifa edge Hostname: edge3-te0-0-0-0-vl100-core1-hfa-clear.hfa.nv.net.il Role: MoD VLAN100 edge router (Haifa clear zone) 🔹 212.143.8.205 Location: NetVision Haifa edge Hostname: edge3-te0-0-0-2-vl100-core2-hfa-clear.hfa.nv.net.il Role: MoD VLAN100 edge router (Haifa clear zone alternate) 🔹 82.102.128.117 Location: Barak Online internal Role: Unknown Barak backbone node (used en route to MoD edge) 🔹 82.102.128.118 Location: Barak Online internal Role: Barak backbone node in MoD peering path 🔹 82.102.142.225 Location: Barak Online internal Role: Another Barak node seen before MoD ip (195.160.243.161) 🔹 82.166.97.196 Location: Barak Online edge Hostname: 82-166-97-196.barak-online.net Role: Final civilian hop before MoD Haifa path (core2) 🔹 82.166.97.197 Location: Barak Online edge Hostname: 82-166-97-197.barak-online.net Role: Final civilian hop before MoD Haifa path (core1) #OpIsrael

Iron who? Fuckass

BBB GROUP IN ISRAEL (TO MAKE IT EXTRA CLEAR THIS BREACH IS NOT fully CREDITED TO US WE shall HELP THE INITIAL ATTACKERS SPREAD IT) 77k records id name phone contact_type email status Not the full breach, Full Breach coming soon! https://biteblob.com/Information/a0TMnHdAiNCgRI/#customers.csv

3 very brief Screenshots of the attacks. The last one is a slightly old Unitronics attack The first one is a example of the Modbus attack and the start of the approach towards the VSAT attack With much more coming! ~GhostSec

With everything Israel Is currently facing we will be adding the pressure, how we best can. The fight with israel is not JUST about the oppression in Palestine while it started there Israel has continuously gone further and further, The fight is for all the nations affected by the injustice and wrong doings of the illegitimate "state" of Israel. Besides shutting down over 500+ Websites and counting we present even more attacks We have hit over 100 Modbus PLC devices affecting their industrial and OT systems all over the country We have hacked over 40 Aegis 2 water devices, defacing some of them. And completely messing with the settings of the rest, Eventually shutting them down completely We have hacked 8 Unitronics devices and after the absolute abuse of the systems shut them down too. We have hacked a total of 10 VSAT devices belonging to Israel specifically the satellites we mentioned briefly in our previous posts affecting Satellites directly owned by Israel and the military. We have a history of attacking Israel, all our previous attacks, breaches and much more. Our totalling record of 700+ devices hacked in the past year alone says a lot but today we provide a large scale attack to continue the pressure being applied on them. Down with Israel, for a free world the oppressive and illegitimate state of Israel cannot continue with their shit. We stand with all of you, We shout with all of you, We fight with all of you. To stand for nothing, Means you fall for everything. We Run Shit Cause We Can. ~GhostSec 👻

https://x.com/Adi13/status/1933419558896873944 #OpIsrael

Tzofar system, the system that activates and sends out red alerts, is under cyberattack. #OpIsrael #Anonymous #GhostSec #ChildrensOfGaza

[x] Users linked Anastasia - @DeepwepBF ID: 7146228815 Previous username: @Moderator3D @Database110892 @Wearelegionnn Previous name: Lazarus (known scammer) Denizer Name: Mia Username: @AlpvhDATA ID: 6143546402 Previous username: @Jhonesking @jhoneskingg Previous name: Dedale Other accounts related: @shinycorporates @shinycorporatee @shinycorphish [x] Channels linked Name: Breach Forum Admin: @AlpvhDATA Created: Link: https://t.me/BFOfficialV2 Name: Dedale Office Admin: @AlpvhDATA Created: May 03, 2025 Link: https://t.me/DedaleOfficials Link: https://t.me/+mTWRlHigXDUwOTg1 Name: Raid Forum Admin: @AlpvhDATA Created: May 18, 2025 Link: https://t.me/RF3Official Name: Akula Private Channel Admin: @AlpvhDATA Created: ? https://t.me/+XIj1PBKdumo4Yzll Name: Pi CoinNetwork Official Admin: @AlpvhDATA Created: May 25, 2025 Link: https://t.me/picointOfficial Name: Akula v3 Admin: @AlpvhDATA Link: https://t.me/+XIj1PBKdumo4Yzll Name: BF Repo v4 Admin: @AlpvhDATA Link: https://t.me/+mzbx0aLoa84yNWZl Name: DieNet Office Admin: @DeepwepBF Created: May 31, 2025 Link: https://t.me/DieNetOffice (Dont claim ownership / seem manager somehow?) Name: Shiny Hunters Owner: @DarkRaver1983 Link: https://t.me/ShinyHunters [x] Groups linked Name: Dedale Group Admin: @AlpvhDATA https://t.me/+DfJ0O_ukgVgyZGU1 [x] Bots linked @repoEconomyBot @BFRepoRelayBot @dnsupportbot [x] Claimed ownership https://breach-forums.st/ https://breachforums.vc/ http://breachforums.sx/ https://breached.fi/ https://raidforums.sbs/ https://ransomed.biz/ https://cdn.ransomed.biz/ https://market.ransomed.biz/ http://business-data-leaks.com/ https://diedetector.ct.ws https://dienet-cc.github.io/public_html +++  +++  +++  +++  +++  +++  +++  +++  Claiming ownership of: > Shiny Hunters > Dark Forum > Breach Forum > DieNet > Pi Network > Ransom Forum > BF Repo v1..v2..v3..v4.. > Akula v1..v2..v3..v4.. ... Probably claim being your mom too. When LARPer can't even scam properly. #GhostSec with love...

[x] Users linked Anastasia - @DeepwepBF ID: 7146228815 Previous username: @Moderator3D @Database110892 @Wearelegionnn Previous name: Lazarus (known scammer) Denizer Name: Mia Username: @AlpvhDATA ID: 6143546402 Previous username: @Jhonesking @jhoneskingg Previous name: Dedale Other accounts related: @shinycorporates @shinycorporatee @shinycorphish [x] Channels linked Name: Breach Forum Admin: @AlpvhDATA Created: Link: https://t.me/BFOfficialV2 Name: Dedale Office Admin: @AlpvhDATA Created: May 03, 2025 Link: https://t.me/DedaleOfficials Link: https://t.me/+mTWRlHigXDUwOTg1 Name: Raid Forum Admin: @AlpvhDATA Created: May 18, 2025 Link: https://t.me/RF3Official Name: Akula Private Channel Admin: @AlpvhDATA Created: ? https://t.me/+XIj1PBKdumo4Yzll Name: Pi CoinNetwork Official Admin: @AlpvhDATA Created: May 25, 2025 Link: https://t.me/picointOfficial Name: Akula v3 Admin: @AlpvhDATA Link: https://t.me/+XIj1PBKdumo4Yzll Name: BF Repo v4 Admin: @AlpvhDATA Link: https://t.me/+mzbx0aLoa84yNWZl Name: DieNet Office Admin: @DeepwepBF Created: May 31, 2025 Link: https://t.me/DieNetOffice Website tied: https://diedetector.ct.ws Website tied: https://dienet-cc.github.io/public_html Real dienet is the backup 🤣 : https://t.me/dienet2 (Dont claim ownership / seem manager somehow?) Name: Shiny Hunters Owner: @DarkRaver1983 Link: https://t.me/ShinyHunters [x] Groups linked Name: Dedale Group Admin: @AlpvhDATA https://t.me/+DfJ0O_ukgVgyZGU1 [x] Bots linked @repoEconomyBot @BFRepoRelayBot @dnsupportbot [x] Claimed ownership https://breach-forums.st/ https://breachforums.vc/ http://breachforums.sx/ https://breached.fi/ https://raidforums.sbs/ https://ransomed.biz/ https://cdn.ransomed.biz/ https://market.ransomed.biz/ http://business-data-leaks.com/ https://diedetector.ct.ws https://dienet-cc.github.io/public_html +++  +++  +++  +++  +++  +++  +++  +++  Claiming ownership of: > Shiny Hunters > Dark Forum > Breach Forum > DieNet > Pi Network > Ransom Forum > BF Repo v1..v2..v3..v4.. > Akula v1..v2..v3..v4.. ... Probably claim being your mom too. When LARPer can't even scam properly. #GhostSec with love...

Israel Satellite 》AMOS-3 Developer: Israel Aerospace Industries (IAI) / Spacecom Usage in Military: AMOS-3, also known as AMOS-60, provides secure satellite communication services for the Israeli military and intelligence operations. It is positioned at 4° West on the equator and serves as a core component of Israel’s military SATCOM backbone. 》SatTrooper-1000 Developer: Gilat Satellite Networks Usage in Military: The SatTrooper-1000 is a lightweight, portable manpack satellite terminal used by the IDF for secure, real-time communications during ground operations, enabling connectivity in remote or mobile combat environments. 》OceanTRx 4 Mil Developer: Orbit Communications Systems Usage in Military: Delivered to the Israeli Navy, the OceanTRx 4 Mil provides stabilized maritime satellite communications for secure naval operations, maintaining connectivity in both near-shore and deep-sea missions. 》ELK‑1882T SATCOM Developer: Elta Systems (IAI division) Usage in Military: The ELK‑1882T is a tactical SATCOM terminal supporting secure communications across air, land, sea, and man-portable units. It features AES encryption and LPI/LPD waveforms for resilient, jam-resistant communication on the move. 》MPT-30 / MPT-46 Developer: Orbit Communications Systems Usage in Military: These multi-purpose satellite terminals are deployed on mobile and stationary IDF platforms under a Ministry of Defense contract, providing secure, multi-band SATCOM for various operational environments. #Opisrael #GhostSec

+500 Israeli websites are currently offline. co.il org.il #OpIsrael #Anonymous #GhostSec

We need you. Share this message. Join #OpIsrael Wønd3r -/🏴‍☠️ #GhostSec #Anonymous #Gaza

As stated in the previous post, We tried to help the government get better security, we tried to provide safety for the people, we tried to improve your government from the inside. Yet North Macedonia and the Italian company settled on corruption, avoiding payments and other topics we will expose soon. For now the attacks done consist of affecting one of their main cabels provided by kabelnet Affecting and shutting down of a main Cisco Router. Affecting and shutting down 7+ Modbus Industrial devices Affecting and shutting down a repeater that they use not just for their regular needs but also for military cases In the future: We are dumping databases harder then a scammer dumping his crypto, We have larger things, and an even hotter expose coming up. To the people of North Macedonia see the corruption in your country for what it is, You've seen it for a long time. We tried to help from the shadows but clearly they would rather themselves over you. ~👻

Today comes something different, Something we have been involved in over the past year We are carrying out these attacks on North Macedonia because we were hired by an Italian company to do some work in the nation mostly securing them or attacking enemies of North Macedonia. Furthermore, we were paid to install Trojans and spy on/attack on a Sardinian company, and we were not paid. In the next statement, which we will also send to Macedonian and Italian newspapers, we will disclose the names of the victims and the company that hired us. For now we present to you the absolute shitshow of a government the North Macedonia government, Unbelievably weak security, The amount of negligence is crazy, and so much more can be said but for now we shall let our work speak for itself For the people there your government is more corrupt and unjust then you can imagine, your president well she isn't your president. Chase your freedom, make your move. In the next post you will see various attacks we Have pulled off ~👻

ShatteredFTP A dual exploiter This exploit script targets vulnerabilities in CrushFTP’s user creation/authentication process, offering dual mode support: CVE-2025-2825 CVE-2025-31161 https://github.com/ghostsec420/ShatteredFTP There is still many outdated targets that are vulnerable to these CVE's. ShatteredFTP provides Mass testing features and switching between each CVE to test with, Overall allowing you to take full advantage of this exploit as a simple and quick to use tool. Seek your own adventure and thus achieving your own freedom. Do what it is your heart desires do it all straight from your heart. Tool/exploit written by GhostSec 👻