🇲🇽 🚨 QILIN RANSOMWARE NAMES AIRBUS SLC MÉXICO The Qilin ransomware gang has listed Airbus SLC México on its leak site. The Mexico City-based unit is Airbus's Public Safety and Security business in the country, supplying mission-critical TETRA and Tetrapol radio networks, dispatch and secure mobile broadband (MXLINK) to public safety, defense, transport and utility users. The listing appeared on Oct 26, 2026 (UTC). No details on the volume or type of data allegedly taken have been shared so far. The claim has not been independently verified, and Airbus has not publicly confirmed a cyber incident at the unit. ⚠️ Analyst Note: A vendor running radio and dispatch systems for police, emergency and state agencies holds sensitive network, customer and project data. If the claim holds, government customers should review vendor access and watch for targeted phishing. Unverified threat-actor claim, NOT confirmation of a breach. #DDW #DarkWeb #Qilin #Ransomware #Airbus #CriticalInfrastructure #Mexico #ThreatIntelligence #CyberSecurity

🇲🇽 🚨 MEXICO: MEXICAN GEOLOGICAL SERVICE (SGM) OFFICIAL EMAIL SYSTEM ALLEGEDLY HACKED A threat actor on an underground forum claims to have hacked the official email system of the Servicio Geológico Mexicano (SGM), Mexico's geological survey agency, specifically its Regional Coordination Office in the San Gregorio Atzompa area. The actor claims to have taken control of the agency's government correspondence system and extracted its archive, including: * Hundreds of internal documents and official announcements * Employee records and senior management correspondence * Salary, financial obligation and staffing-structure details * Personal data of government employees The actor also claims the systems were "wiped" and threatens to publish the data if unspecified demands are not met. A sample of documents is attached to the post. The claim has not been independently verified. ⚠️ Analyst Note: If authentic, government mailbox archives expose employee personal data and internal correspondence that can be reused for highly convincing spear-phishing and business email compromise against Mexican public agencies. The "hacked and wiped" and extortion language is unproven, and the scope may be limited to one regional office. Unverified threat-actor claim, NOT confirmation of a compromise of SGM systems. Source: this is for subscribers only. Subscribe: xitter.cf/DailyDarkWeb/creator-s… #DDW #DarkWeb #Mexico #DataBreach #Government #Extortion #ThreatIntelligence